Python TLS Handshake Bypass (CVE-2023-40217)

The version of Python installed on the remote Windows host is potentially affected by a vulnerability that primarily affects servers such as HTTP servers that use TLS client authentication. If a TLS server-side socket is created, receives data into the socket buffer, and then is closed quickly,...

Google Chrome < 116.0.5845.110 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 116.0.5845.110. It is, therefore, affected by multiple vulnerabilities as referenced in the 202308chrome-desktop-stable-update advisory. - Use after free in Vulkan in Google Chrome prior to 116.0.5845.110 allowed a remo...

Wireshark 4.0.x < 4.0.8 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 4.0.8. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.0.8 advisory. - Multiple integer signedness errors in the tvbunmasked function in epan/dissectors/packet-websocket.c in the...

Google Chrome < 116.0.5845.96 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 116.0.5845.96. It is, therefore, affected by multiple vulnerabilities as referenced in the 202308stable-channel-update-for-desktop15 advisory. - Insufficient policy enforcement in Extensions API in Google Chrome prior t...

SAP BusinessObjects Business Intelligence Platform DoS (3312047)

The version of SAP BusinessObjects Business Intelligence Platform installed on the remote Windows host is using a vulnerable version of commons-fileupload which is vulnerable to Denial of Service due to CVE-2023-24998. Apache Commons FileUpload before 1.5 does not limit the number of request part...

Adobe Dimension < 3.4.10 Multiple Vulnerabilities (APSB23-44)

The version of Adobe Dimension installed on the remote Windows host is prior to 3.4.10. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-44 advisory. - Adobe Dimension version 3.4.9 is affected by a Heap-based Buffer Overflow vulnerability that could result in...

Mozilla Thunderbird < 102.14

The version of Thunderbird installed on the remote Windows host is prior to 102.14. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-32 advisory. - Memory safety bugs present in Firefox 115, Firefox ESR 115.0, Firefox ESR 102.13, Thunderbird 115.0, and...

Google Chrome < 115.0.5790.170 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 115.0.5790.170. It is, therefore, affected by multiple vulnerabilities as referenced in the 202308stable-channel-update-for-desktop advisory. - Inappropriate implementation in Extensions in Google Chrome prior to...

Citrix Secure Access < 23.5.1.3 Privilege Escalation (CTX561480)

A privilege escalation vulnerability has been discovered in the Citrix Secure Access client for Windows which, if exploited, could allow an attacker with access to an endpoint with Standard User Account that has the vulnerable client installed to escalate their local privileges to that of NT...

Mozilla Thunderbird < 102.13.1

The version of Thunderbird installed on the remote Windows host is prior to 102.13.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2023-28 advisory. - Thunderbird allowed the Text Direction Override Unicode Character in filenames. An email attachment could be incorrectly...

Adobe ColdFusion < 2018.x < 2018u18 / 2021.x < 2021u8 / 2023.x < 2023u2 Code Execution (APSB23-41)

The version of Adobe ColdFusion installed on the remote Windows host is prior to 2018.x update 18, 2021.x update 8, or 2023.x update 2. It is, therefore, affected by a code execution vulnerability as referenced in the APSB23-41 advisory. Due to deserialization of untrusted data, a remote,...

Microsoft Edge (Chromium) < 114.0.1823.82 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 114.0.1823.82. It is, therefore, affected by multiple vulnerabilities as referenced in the July 13, 2023 advisory. - Microsoft Edge for Android Chromium-based Tampering Vulnerability CVE-2023-36888 - Microsoft Edge for...

Adobe ColdFusion < 2018.x < 2018u17 / 2021.x < 2021u7 / 2023.x < 2023u1 Multiple Vulnerabilities (APSB23-40)

The version of Adobe ColdFusion installed on the remote Windows host is prior to 2018.x update 17, 2021.x update 7, or 2023.x update 1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-40 advisory. - Improper Access Control CWE-284 potentially leading to Security...

Adobe InDesign < 17.4.2 / 18.0 < 18.4.0 Multiple Vulnerabilities (APSB23-38)

The version of Adobe InDesign installed on the remote Windows host is prior to 17.4.2, 18.4.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-38 advisory. - Adobe InDesign versions ID18.3 and earlier and ID17.4.1 and earlier are affected by an out-of-bounds wri...

Microsoft Windows Admin Center Spoofing (July 2023)

The remote Windows host is running a version of Microsoft Windows Admin Center that is missing a security update. It is, therefore, affected by a security spoofing vulnerability. An authenticated, remote attacker can exploit this to bypass security features. Note that Nessus has not tested for th...

Mozilla Firefox ESR < 102.13

The version of Firefox ESR installed on the remote Windows host is prior to 102.13. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-23 advisory. - Memory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of these bugs showed...

Dell NetWorker Virtual Edition Command Injection (DSA-2023-060)

The version of Dell NetWorker Virtual Edition installed on the remote Linux host is prior to 19.6.1.2, 19.7.0.3, and 19.7.1. It is, therefore, affected by command injection vulnerability in the NetWorker client. An unauthenticated, remote attacker could potentially exploit this vulnerability,...

VulnCheck KEV: CVE-2019-5526

VMware Workstation 15.x before 15.1.0 contains a DLL hijacking issue because some DLL files are improperly loaded by the application. Successful exploitation of this issue may allow attackers with normal user privileges to escalate their privileges to administrator on a windows host where...

Microsoft Edge (Chromium) < 114.0.1823.51 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 114.0.1823.51. It is, therefore, affected by multiple vulnerabilities as referenced in the June 15, 2023 advisory. - Use after free in Autofill payments in Google Chrome prior to 114.0.5735.133 allowed a remote attacke...

Foxit PhantomPDF < 10.1.12 Multiple Vulnerabilities

According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 10.1.12. It is, therefore affected by multiple vulnerabilities: - Addressed a potential issue where the application could be exposed to Remote Code Execution...