Autodesk AutoCAD Multiple Vulnerabilities (adsk-sa-2022-0021)

The version of Autodesk AutoCAD installed on the remote Windows host is a version prior to 2020.1.6, 2021.1.3, 2022.1.3 or 2023.1.1. It is, therefore, affected by multiple vulnerabilities. - A maliciously crafted GIF or JPEG files when parsed through Autodesk Design Review 2018, and AutoCAD 2023,...

Google Chrome < 108.0.5359.71 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 108.0.5359.71. It is, therefore, affected by multiple vulnerabilities as referenced in the 202211stable-channel-update-for-desktop29 advisory. - Use after free in Accessibility in Google Chrome prior to 108.0.5359.71...

Mozilla Firefox < 107.0

The version of Firefox installed on the remote Windows host is prior to 107.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-47 advisory. - Mozilla developers Gabriele Svelto, Yulia Startsev, Andrew McCreight and the Mozilla Fuzzing Team reported memory safe...

VMWare Hyperic 代码问题漏洞

VMWare Hyperic is an application monitoring component of the Cloud Application Platform from VMWare, Inc. It enables IT professionals to manage the performance and availability of customized web applications in physical, virtual, and cloud environments. A code issue vulnerability exists in VMWare...

Mozilla Thunderbird < 102.4

The version of Thunderbird installed on the remote Windows host is prior to 102.4. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-46 advisory. - Mozilla developers Ashley Hale and the Mozilla Fuzzing Team reported memory safety bugs present in Thunderbird...

Mozilla Firefox < 106.0

The version of Firefox installed on the remote Windows host is prior to 106.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-44 advisory. - Mozilla developers Timothy Nikkel, Ashley Hale, and the Mozilla Fuzzing Team reported memory safety bugs present in...

Adobe Illustrator 26.x < 26.5.1 / 27.x < 27.0 Multiple Vulnerabilities (APSB22-56)

The version of Adobe Illustrator installed on the remote Windows host is prior to 27.0 or 26.5.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb22-56 advisory. - Improper Input Validation CWE-20 potentially leading to Arbitrary code execution CVE-2022-38435 -...

Mozilla Firefox ESR < 102.4

The version of Firefox ESR installed on the remote Windows host is prior to 102.4. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-45 advisory. - Mozilla developers Ashley Hale and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 105 and...

Microsoft Edge (Chromium) < 106.0.1370.47 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 106.0.1370.47. It is, therefore, affected by multiple vulnerabilities as referenced in the October 14, 2022 advisory. - Use after free in Skia. CVE-2022-3445 - Heap buffer overflow in WebSQL. CVE-2022-3446 -...

SAP BusinessObjects Business Intelligence Platform 4.3 < 4.3 SP2 P5 Information Disclosure

The version of SAP BusinessObjects Business Intelligence Platform installed on the remote Windows host is prior to 4.3 SP2 P5 or 4.3 SP3. It is, therefore, affected by an information disclosure vulnerability. A remote attacker, authenticated as a CMS administrator can access the BOE Monitoring...

Adobe ColdFusion < 2018.x < 2018u15 / 2021.x < 2021u5 Multiple Vulnerabilities (APSB22-44)

The version of Adobe ColdFusion installed on the remote Windows host is prior to 2018.x update 15 or 2021.x update 5. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB22-44 advisory. - Stack-based Buffer Overflow CWE-121 potentially leading to Arbitrary code executi...

Adobe Reader < 20.005.30407 / 22.003.20258 Multiple Vulnerabilities (APSB22-46)

The version of Adobe Reader installed on the remote Windows host is a version prior to 20.005.30407 or 22.003.20258. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat Reader versions 22.002.20212 and earlier and 20.005.30381 and earlier are affected by a Stack-based Buffer...

KB5018421: Windows Server 2022 Security Update (October 2022)

The remote Windows host is missing security update 5018421. It is, therefore, affected by multiple vulnerabilities - Internet Key Exchange IKE Protocol Denial of Service Vulnerability CVE-2022-38036 - Server Service Remote Protocol Elevation of Privilege Vulnerability CVE-2022-38045 - Microsoft...

KB5018418: Windows 11 Security Update (October 2022)

The remote Windows host is missing security update 5018418. It is, therefore, affected by multiple vulnerabilities - Internet Key Exchange IKE Protocol Denial of Service Vulnerability CVE-2022-38036 - Server Service Remote Protocol Elevation of Privilege Vulnerability CVE-2022-38045 - Microsoft...

Google Chrome < 106.0.5249.61 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 106.0.5249.61. It is, therefore, affected by multiple vulnerabilities as referenced in the 202209stable-channel-update-for-desktop27 advisory. - Use after free in ChromeOS Notifications in Google Chrome on ChromeOS prio...

Security Bulletin: Vulnerabilities in OpenSSL affect IBM Spectrum Protect Plus SQL, File Indexing, and Windows Host agents

Summary Multiple vulnerabilities in OpenSSL affect the IBM Spectrum Protect Plus SQL, File Indexing, and Windows Host agents. These vulnerabilities include execution of arbitrary commands, weaker than expected security, and denial of service. Vulnerability Details CVEID:CVE-2022-1292 DESCRIPTION:...

Mozilla Firefox < 105.0

The version of Firefox installed on the remote Windows host is prior to 105.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-40 advisory. - Mozilla developers Nika Layzell, Timothy Nikkel, Sebastian Hengst, Andreas Pehrson, and the Mozilla Fuzzing Team...

Mozilla Firefox ESR < 102.3

The version of Firefox ESR installed on the remote Windows host is prior to 102.3. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-41 advisory. - Mozilla developers Nika Layzell, Timothy Nikkel, Sebastian Hengst, Andreas Pehrson, and the Mozilla Fuzzing Team...

Security Bulletin: Vulnerabilities in libcurl affect IBM Spectrum Protect Plus SQL, File Indexing, and Windows Host agents

Summary Multiple vulnerabilities in libcurl affect the IBM Spectrum Protect Plus SQL, File Indexing, and Windows Host agents. These vulnerabilities include obtaining sensitive information, man-in-the-middle attacks, denial of service, and bypassing of security restrictions. Vulnerability Details...

McAfee DLPe < 11.6.600.212 / 11.9.100 (SB10386)

The version of the McAfee Data Loss Prevention Endpoint DLPe Agent installed on the remote Windows host is prior to 11.6.600.212 or 11.9.100. It is, therefore, affected by a vulnerability caused by improper restriction of XML external entity references which allows a remote attacker to cause the...