Google Chrome < 112.0.5615.137 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 112.0.5615.137. It is, therefore, affected by multiple vulnerabilities as referenced in the 202304stable-channel-update-for-desktop18 advisory. - Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed...

Wireshark 3.6.x < 3.6.13 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 3.6.13. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-3.6.13 advisory. - RPCoRDMA dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet...

SAP BusinessObjects Business Intelligence Platform < 420, 430 Information Disclosure (3298961)

The version of SAP BusinessObjects Business Intelligence Platform installed on the remote Windows host is prior to 420, 430. It is, therefore, affected by an information disclosure vulnerability. An attacker with basic privileges in SAP BusinessObjects Business Intelligence Platform Promotion...

Adobe Dimension < 3.4.9 Multiple Vulnerabilities (APSB23-27)

The version of Adobe Dimension installed on the remote Windows host is prior to 3.4.9. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-27 advisory. - Adobe Dimension version 3.4.8 and earlier is affected by an out-of-bounds write vulnerability that could result ...

Mozilla Firefox ESR < 102.10

The version of Firefox ESR installed on the remote Windows host is prior to 102.10. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-14 advisory. - Mozilla developers Andrew Osmond, Sebastian Hengst, Andrew McCreight, and the Mozilla Fuzzing Team reported memor...

Adobe Reader < 20.005.30467 / 23.001.20143 Multiple Vulnerabilities (APSB23-24)

The version of Adobe Reader installed on the remote Windows host is a version prior to 20.005.30467 or 23.001.20143. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat Reader versions 23.001.20093 and earlier and 20.005.30441 and earlier are affected by an out-of-bounds read...

McAfee Total Protection < 16.0.30 Multiple Vulnerabilities (TS103114)

The version of McAfee Total Protection installed on the remote Windows host is prior to 16.0.30. It is, therefore, affected by multiple vulnerabilities, including the following: - Bypass Remote Procedure call in McAfee Total Protection MTP prior to 16.0.30 allows a local user to gain elevated...

Adobe ColdFusion < 2018.x < 2018 Update 16 / 2021.x < 2021 Update 6 Multiple Vulnerabilities (APSB23-25)

The version of Adobe ColdFusion installed on the remote Windows host is prior to 2018.x Update 16 or 2021.x Update 6. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-25 advisory. - Deserialization of Untrusted Data CWE-502 potentially leading to Arbitrary code...

SAP BusinessObjects Business Intelligence Platform Multiple Vulnerabilities (3287120)

The version of SAP BusinessObjects Business Intelligence Platform installed on the remote Windows host is affected by a multiple vulnerabilities: - SSRF, an attacker can control a malicious BOE server, forcing the application server to connect to its own admintools CVE-2023-27271 - SSRF, n attack...

Mozilla Thunderbird < 102.9

The version of Thunderbird installed on the remote Windows host is prior to 102.9. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-11 advisory. - Mozilla developers Timothy Nikkel, Andrew McCreight, and the Mozilla Fuzzing Team reported memory safety bugs...

Adobe Photoshop 23.x < 23.5.4 / 24.x < 24.2.1 Vulnerability (APSB23-23)

The version of Adobe Photoshop installed on the remote Windows host is prior to 23.5.4/24.2.1. It is, therefore, affected by a vulnerability as referenced in the apsb23-23 advisory. - Adobe Photoshop versions 23.5.3 and earlier and 24.1.1 and earlier are affected by a Use After Free vulnerability...

Wireshark 4.0.x < 4.0.4 A Vulnerability

The version of Wireshark installed on the remote Windows host is prior to 4.0.4. It is, therefore, affected by a vulnerability as referenced in the wireshark-4.0.4 advisory. - The ISO 15765 and ISO 10681 dissectors could crash. It may be possible to make Wireshark crash by injecting a malformed...

Dell EMC NetWorker RCE (DSA-2023-041)

The version of Dell EMC NetWorker installed on the remote Windows host is affected by a remote code execution vulnerability in the NetWorker Client execution service nsrexecd irrespective of any auth used. Note that Nessus has not tested for this issue but has instead relied only on the...

Arbitrary Code Execution

MongoDB.Bson is vulnerable to Arbitrary Code Execution. The vulnerability exists because the library does not properly filter AllowedTypes when deserializing an object, allowing a privileged attacker to inject and execute malicious code through the ObjectSerializer in specific situtations. The...

CVE-2022-48282

Under very specific circumstances see Required configuration section below, a privileged user is able to cause arbitrary code to be executed which may cause further disruption to services. This is specific to applications written in C. This affects all MongoDB .NET/C Driver versions prior to and...

CVE-2022-48282 Deserializing compromised object with MongoDB .NET/C# Driver may cause remote code execution

Under very specific circumstances see Required configuration section below, a privileged user is able to cause arbitrary code to be executed which may cause further disruption to services. This is specific to applications written in C. This affects all MongoDB .NET/C Driver versions prior to and...

CVE-2022-48282

CVE-2022-48282 affects MongoDB .NET/C# Driver up to version 2.18.0. Under very specific conditions, a privileged user can cause arbitrary code execution via deserialization, involving applications written in C# running on Windows with the full .NET Framework, taking user data, and serializing wit...

CVE-2022-48282 Deserializing compromised object with MongoDB .NET/C# Driver may cause remote code execution

Under very specific circumstances see Required configuration section below, a privileged user is able to cause arbitrary code to be executed which may cause further disruption to services. This is specific to applications written in C. This affects all MongoDB .NET/C Driver versions prior to and...

PT-2023-15661 · Mongodb · Mongodb .Net/C# Driver

Name of the Vulnerable Software and Affected Versions: MongoDB .NET/C Driver versions prior to and including v2.18.0 Description: Under very specific circumstances, a privileged user is able to cause arbitrary code to be executed, which may cause further disruption to services. This issue is...

Adobe FrameMaker 2020 < 16.0.5 (2020.0.5) / Adobe FrameMaker 2022 < 17.0.1 (2022.0.1) Multiple Vulnerabilities (APSB23-06)

The version of Adobe FrameMaker installed on the remote Windows host is prior to Adobe FrameMaker 2020 16.0.5 / Adobe FrameMaker 2022 17.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb23-06 advisory. - FrameMaker 2020 Update 4 and earlier, 2022 and earlier ar...