IBM WebSphere Portal XSS Vulnerability (CVE-2018-1660)

The version of IBM WebSphere Portal installed on the remote Windows host is affected by a cross-site scripting vulnerability. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid117937; scriptversion"1.4"; scriptcvsdate"Date: 2019/11/01"; scriptcveid"CVE-2018-1660";...

Mozilla Firefox < 49 Multiple Vulnerabilities

The version of Mozilla Firefox installed on the remote Windows host is prior to 49. It is, therefore, affected by multiple vulnerabilities as noted in Mozilla Firefox stable channel update release notes for 2016/09/20. Please refer to the release notes for additional information. Note that Nessus...

Mozilla Firefox < 62.0.3

The version of Firefox installed on the remote Windows host is prior to 62.0.3. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2018-24 advisory. - A vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple arguments that results i...

KB4457146: Security update for Adobe Flash Player (September 2018)

The remote Windows host is missing security update KB4457146. It is, therefore, affected by an information disclosure vulnerability in Adobe Flash Player. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid117419; scriptversion"1.8"; scriptcvsdate"Date: 2019/11/01";...

Mozilla Firefox ESR < 60.2

The version of Firefox ESR installed on the remote Windows host is prior to 60.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2018-21 advisory. - A use-after-free vulnerability can occur when an IndexedDB index is deleted while still in use by JavaScript code...

Foxit Reader < 8.3.7 Multiple Vulnerabilities

The version of Foxit Reader installed on the remote Windows host is prior to 8.3.7. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid112059; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate"...

VMware Workstation 14.x < 14.1.3 Out-of-Bounds Write (VMSA-2018-0022)

The version of VMware Workstation installed on the remote Windows host is 14.x prior to 14.1.3. It is, therefore, missing a security update that fixes an out-of-bounds write vulnerability. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid111979; scriptversion"1.5";...

Adobe Acrobat < 2015.006.30448 / 2017.011.30099 / 2018.011.20058 Multiple Vulnerabilities (APSB18-29)

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 2015.006.30448, 2017.011.30099, or 2018.011.20058. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat and Reader versions 2018.011.20055 and earlier, 2017.011.30096 and earlier, and...

Adobe Flash Player <= 30.0.0.134 (APSB18-25)

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 30.0.0.134. It is therefore affected by multiple vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

VLC 3.0.x < 3.0.2 Heap Use-After-Free / Remote Code Execution Vulnerability

The version of VLC media player installed on the remote host is earlier than 3.0.2. It is, therefore, affected by a heap use-after-free vulnerability which could result in a remote code execution. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid111518;...

Foxit PhantomPDF < 9.2 Multiple Vulnerabilities

According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 9.2. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid111376; scriptversion"1.7...

Foxit Reader < 9.2 Multiple Vulnerabilities

The version of Foxit Reader installed on the remote Windows host is prior to 9.2. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid111377; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate",...

Wireshark 2.6.x < 2.6.2 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 2.6.2. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.6.2 advisory. - In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the HTTP2 dissector could crash. This was...

Adobe Flash Player <= 30.0.0.113 (APSB18-24)

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 30.0.0.113. It is therefore affected by multiple vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Microsoft Windows: Prevent enabling lock screen slide show

This test checks the setting for policy OpenVAS Vulnerability Test $Id: wincplocklockscreenslideshow.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Prevent enabling lock screen slide show Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net...

Microsoft Windows: CD and DVD: Deny write access

This test checks the setting for policy OpenVAS Vulnerability Test $Id: wincddvddenywriteaccess.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for CD and DVD: Deny write access Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program...

Mozilla Firefox ESR < 52.8

The version of Firefox ESR installed on the remote Windows host is prior to 52.8. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2018-12 advisory. - Mozilla developers backported selected changes in the Skia library to the ESR52 branch of Firefox. These changes...

7-Zip < 18.05 Memory Corruption Arbitrary Code Execution

The version of 7-Zip installed on the remote Windows host contains a flaw in the NArchive::NRar::CHandler::Extract method in Archive/Rar/RarHandler.cpp. The issue is triggered as certain input is not properly validated when performing 'solid' decompression of a RAR archive. With a specially craft...

Adobe Flash Player <= 29.0.0.140 (APSB18-16)

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 29.0.0.140. It is therefore affected by multiple vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Microsoft Issues Emergency Patch For Critical Flaw In Windows Containers

Just a few days prior to its monthly patch release, Microsoft released an emergency patch for a critical vulnerability in the Windows Host Compute Service Shim hcsshim library that could allow remote attackers to run malicious code on Windows computers. Windows Host Compute Service Shim hcsshim i...