1274 matches found
MS16-026: Security Update for Graphic Fonts to Address Remote Code Execution (3143148)
The remote Windows host is affected by multiple vulnerabilities in the Adobe Type Manager Library : - A denial of service vulnerability exists due to improper handling of OpenType fonts. A remote attacker can exploit this vulnerability by convincing a user to open a file or visit a website...
Google Chrome < 48.0.2564.116 Vulnerability
The version of Google Chrome installed on the remote Windows host is prior to 48.0.2564.116. It is, therefore, affected by a vulnerability as referenced in the 201602stable-channel-update18 advisory. - Google Chrome before 48.0.2564.116 allows remote attackers to bypass the Blink Same Origin Poli...
AVG Internet Security 2015.5736 Address Space Layout Disclosure
The AVG Internet Security application installed on the remote Windows host is a version between 2015.5315 through 2015.5751, inclusive, with a virus definition database prior to version 9364. It is, therefore, affected by an information disclosure vulnerability due to insecure allocation of memor...
Google Chrome < 48.0.2564.109 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 48.0.2564.109. It is, therefore, affected by multiple vulnerabilities as referenced in the 201602stable-channel-update9 advisory. - The Developer Tools aka DevTools subsystem in Google Chrome before 48.0.2564.109 does n...
Adobe Flash Player <= 20.0.0.286 Multiple Vulnerabilities (APSB16-04)
The version of Adobe Flash Player installed on the remote Windows host is prior or equal to version 20.0.0.286. It is, therefore, affected by multiple vulnerabilities : - A type confusion error exists that allows a remote attacker to execute arbitrary code. CVE-2016-0985 - Multiple use-after-free...
Google Chrome < 48.0.2564.82 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 48.0.2564.82. It is, therefore, affected by multiple vulnerabilities as referenced in the 201601stable-channel-update20 advisory. - Multiple unspecified vulnerabilities in Google Chrome before 48.0.2564.82 allow attacke...
Wireshark 2.0.0 Multiple DoS
The version of Wireshark installed on the remote Windows host is 2.0.0. It is, therefore, affected by multiple denial of service vulnerabilities in the following components : - 802.11 dissector - ANSI A dissector - Ascend file parser - BER dissector - Bluetooth Attribute dissector - DIAMETER...
IBM WebSphere Portal AccessControl REST API Information Disclosure (PI51395)
The version of IBM WebSphere Portal installed on the remote Windows host is affected by an information disclosure vulnerability due to improper access control enforcement of the REST API. An unauthenticated, remote attacker can exploit this, via a specially crafted request, to gain access to...
Autodesk Design Review < 2013 Hotfix 2 Multiple RCE
The version of Autodesk Design Review installed on the remote Windows host is prior to 2013 Hotfix 2. It is, therefore, affected by the following vulnerabilities : - An integer overflow condition exists due to improper handling of BMP images. A remote attacker can exploit this, via a crafted...
Adobe AIR <= 20.0.0.204 Multiple Vulnerabilities (APSB16-01)
The version of Adobe AIR installed on the remote Windows host is equal or prior to version 20.0.0.204. It is, therefore, affected by multiple vulnerabilities : - A type confusion error exists that a remote attacker can exploit to execute arbitrary code. CVE-2015-8644 - An integer overflow conditi...
Google Chrome < 47.0.2526.106 Vulnerability
The version of Google Chrome installed on the remote Windows host is prior to 47.0.2526.106. It is, therefore, affected by a vulnerability as referenced in the 201512stable-channel-update15 advisory. - The MIDI subsystem in Google Chrome before 47.0.2526.106 does not properly handle the sending o...
Apple iTunes < 12.3.2 Multiple Vulnerabilities (uncredentialed check)
The version of Apple iTunes running on the remote Windows host is prior to 12.3.2. It is, therefore, affected by multiple vulnerabilities in the WebKit component : - Multiple memory corruption issues exists that an attacker can exploit to cause a denial of service or execute arbitrary code...
Hackers are using Nuclear Exploit Kit to Spread Cryptowall 4.0 Ransomware
Beware Internet Users! Cryptowall 4.0 – the newest version of the world's worst Ransomware – has surfaced in the Nuclear exploit kit, one of the most potent exploit kits available in the underground market for hacking into computers. Ransomware threat has emerged as one of the biggest threats to...
Google Chrome < 46.0.2490.86 Vulnerability
The version of Google Chrome installed on the remote Windows host is prior to 46.0.2490.86. It is, therefore, affected by a vulnerability as referenced in the 201511stable-channel-update advisory. - The PDF viewer in Google Chrome before 46.0.2490.86 does not properly restrict scripting messages...
MS15-121: Security Update for Schannel to Address Spoofing (3081320)
The remote Windows host is affected by a spoofing vulnerability due to a weakness in the Secure Channel SChannel TLS protocol implementation. A man-in-the-middle attacker can exploit this vulnerability to impersonate a victim on any other server that uses the same credentials as those used betwee...
Foxit PhantomPDF < 7.2 Multiple Vulnerabilities
According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is affected by multiple vulnerabilities : - A memory overflow condition exists in the PDF creator plugin ConvertToPDFx86.dll when converting a PNG file to a PDF file due to an...
Apple iTunes < 12.3.1 Multiple Vulnerabilities (credentialed check)
The version of Apple iTunes installed on the remote Windows host is prior to 12.3.1. It is, therefore, affected by multiple vulnerabilities due to memory corruption issues in the WebKit and CoreText components. An attacker can exploit these to cause a denial of service or execute arbitrary code...
Oracle JRockit R28 < R28.3.8 Multiple Vulnerabilities (October 2015 CPU)
The version of Oracle JRockit installed on the remote Windows host is R28 prior to R28.3.8. It is, therefore, affected by multiple vulnerabilities : - Multiple denial of service vulnerabilities exist due to multiple unspecified flaws in the JAXP subcomponent. A remote attacker can exploit these...
Adobe Acrobat < 10.1.16 / 11.0.13 / 2015.006.30094 / 2015.009.20069 Multiple Vulnerabilities (APSB15-24)
The version of Adobe Acrobat installed on the remote Windows host is a version prior to 10.1.16, 11.0.13, 2015.006.30094, or 2015.009.20069. It is, therefore, affected by multiple vulnerabilities. - The ANAuthenticateResource method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before...