MS15-101: Vulnerabilities in .NET Framework Could Allow Elevation of Privilege (3089662)

The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities in the Microsoft .NET Framework : - An elevation of privilege vulnerability exists due to improper validation of the number of objects in memory before they are copied into an array. A...

HP Version Control Repository Manager < 7.5.0 Multiple Vulnerabilities (HPSBMU03396) (FREAK)

The version of HP Version Control Repository Manager VCRM installed on the remote Windows host is prior to 7.5.0. It is, therefore, affected by multiple vulnerabilities : - A NULL pointer dereference flaw exists when the SSLv3 option isn't enabled and an SSLv3 ClientHello is received. This allows...

Wireshark 1.12.x < 1.12.7 Multiple DoS

The version of Wireshark installed on the remote Windows host is 1.12.x prior to 1.12.7. It is, therefore, affected by multiple denial of service vulnerabilities : - An unspecified flaw exists that is triggered when adding an item to the protocol tree. A remote attacker can exploit this, via a...

MS15-087: Vulnerability in UDDI Services Could Allow Elevation of Privilege (3082459)

The remote Windows host is affected by an elevation of privilege vulnerability in the Universal Description, Discovery, and Integration UDDI Services component due to improper validation and sanitization of user-supplied input to the 'searchID' parameter of the 'explorer' frame in frames.aspx. A...

MS15-082: Vulnerability in RDP Could Allow Remote Code Execution (3080348)

The remote Windows host is missing a security update. It is, therefore affected by the following vulnerabilities : - A spoofing vulnerability exists due to the Remote Desktop Session Host RDSH not properly validating certificates during authentication. An man-in-the-middle attacker can exploit th...

Adobe Shockwave Player <= 12.1.8.158 Multiple RCE Vulnerabilities (APSB15-17)

The remote Windows host contains a version of Adobe Shockwave Player that is prior to or equal to 12.1.8.158. It is, therefore, affected by multiple remote code execution vulnerabilities : - An unspecified memory corruption issue exists due to improper validation of user-supplied input. An attack...

Adobe Flash Player <= 18.0.0.203 Multiple RCE Vulnerabilities (APSB15-18)

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 18.0.0.203. It is, therefore, affected by multiple remote code execution vulnerabilities : - A use-after-free error exists in the opaqueBackground class in the ActionScript 3 AS3 implementation. A...

MS15-071: Vulnerability in NETLOGON Could Allow Elevation of Privilege (3068457)

The remote Windows host is affected by a privilege escalation vulnerability due to the Netlogon service improperly establishing a communications channel to a primary domain controller PDC. An attacker, with access to the PDC, can exploit this by using a crafted application to create a secure...

IBM WebSphere Portal Active Content Filtering XSS (PI38732)

The version of IBM WebSphere Portal installed on the remote Windows host is affected by a cross-site scripting vulnerability in the Active Content Filtering component due to improperly validating user-supplied input. A remote attacker can exploit this by creating a specially crafted URL designed ...

AVG Internet Security 2013.x < 2013.3495 / 2015.x < 2015.5557 Local Privilege Escalation

The remote Windows host has a version of AVG Internet Security installed that is 2013.x prior to 2013.3495 or 2015.x prior to 2015.5557. It is, therefore, affected by a local privilege escalation vulnerability due to a flaw in the TDI driver avgtdix.sys that occurs when handling 0x830020f8 IOCTL...

Wireshark 1.12.x < 1.12.6 Multiple DoS Vulnerabilities

The version of Wireshark installed on the remote Windows host is 1.12.x prior to 1.12.6. It is, therefore, affected by multiple denial of service vulnerabilities : - An unspecified flaw exists in the WCCP dissector. A remote attacker can exploit this flaw, by injecting a specially crafted packet ...

Google Chrome < 43.0.2357.130 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 43.0.2357.130. It is, therefore, affected by multiple vulnerabilities : - A scheme validation error exists in WebUI. A remote attacker can exploit this to have an unspecified impact. CVE-2015-1266 - A cross-origin bypas...

Firefox ESR 31.x < 31.7 Multiple Vulnerabilities

The version of Firefox ESR 31.x installed on the remote Windows host is prior to 31.7. It is, therefore, affected by the following vulnerabilities : - A privilege escalation vulnerability exists in the Inter-process Communications IPC implementation due to a failure to validate the identity of a...

Adobe Flash Player <= 17.0.0.169 Multiple Vulnerabilities (APSB15-09)

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 17.0.0.169. It is, therefore, affected by multiple vulnerabilities : - An unspecified security bypass vulnerability exists that allows an attacker to disclose sensitive information. CVE-2015-3044 -...

VMware vSphere Update Manager Java Vulnerability (VMSA-2015-0003)

The version of VMware vSphere Update Manager installed on the remote Windows host is 5.0 prior to Update 3d, 5.1 prior to Update 3a, 5.5 prior to Update 2e, or 6.0 prior to 6.0.0a. It is, therefore, affected by a vulnerability related to the bundled version of Oracle JRE prior to 1.7.076. A flaw...

Symantec Workspace Streaming Agent Unquoted Service Path Local Privilege Escalation (SYM15-004)

The version of the Symantec Workspace Streaming SWS agent installed on the remote Windows host is affected by a local privilege escalation vulnerability due to an unquoted search path in AppMgrService.exe. A local attacker can exploit this to execute arbitrary code with local system privileges...

VMware Horizon View Multiple Vulnerabilities (VMSA-2015-0003) (VMSA-2015-0008) (POODLE)

The VMware Horizon View installed on the remote Windows host is version 5.x prior to 5.3.4 or version 6.x prior to 6.1. It is, therefore, affected by the following vulnerabilities : - A man-in-the-middle MitM information disclosure vulnerability, known as POODLE, exists due to the way SSL 3.0...

Firefox ESR 31.x < 31.5.3 SVG Bypass Privilege Escalation

The version of Mozilla Firefox ESR 31.x installed on the remote Windows host is prior to 31.5.3. It is, therefore, affected by a privilege escalation vulnerability due to a flaw within 'docshell/base/nsDocShell.cpp', which relates to SVG format content navigation. A remote attacker can exploit th...

Wireshark 1.10.x < 1.10.13 / 1.12.x < 1.12.4 Multiple DoS Vulnerabilities

The version of Wireshark installed remote Windows host is 1.10.x prior to 1.10.13, or 1.12.x prior to 1.12.4. It is, therefore, affected by denial of service vulnerabilities in the following items : - ATN-CPDLC dissector CVE-2015-2187 - WCP dissector CVE-2015-2188 - pcapng file parser CVE-2015-21...

Firefox ESR 31.x < 31.5 Multiple Vulnerabilities

The version of Firefox ESR 31.x installed on the remote Windows host is prior to 31.5. It is, therefore, affected by the following vulnerabilities : - An information disclosure vulnerability exists related to the autocomplete feature that allows an attacker to read arbitrary files. CVE-2015-0822 ...