Browse, filter by detection status, or search by CVE to get visibility into upcoming and new detections (QIDs) for all severities.
Under investigation:
We are researching a detection and will publish one if
it is feasible.
In development:
We are coding a detection and will typically publish it
within a few days.
Recently published:
We have published the detection on the date indicated,
and it will typically be available in the KnowledgeBase
on shared platforms within a day.
Non-Qualys customers can audit their network for all published vulnerabilities by signing up for a Qualys Free Trial or Qualys Community Edition.
Affected Versions:
Oracle PeopleSoft Enterprise PeopleTools 8.56
Oracle PeopleSoft Enterprise PeopleTools 8.57
Oracle PeopleSoft Enterprise PeopleTools 8.58
QID Detection Logic (Authenticated):
The authenticated check looks for the installed version of PeopleTools and it's corresponding patch.
Oracle Coherence is affected by CVE-2021-2277,CVE-2020-25649.
Affected Versions:
Oracle Coherence, version(s) 3.7, 12.1.3.0, 12.2.1.3, 12.2.1.4 and 14.1.1.0
QID Detection Logic (Authenticated):
Operating System: Linux
This QID checks to see if Oracle Coherence process is listening on any of the TCP port. The version is checked via product.xml under the install location of coherence. The patches for 12.x are checked under "Install Location"/invetory/patches.
QID Detection Logic (Authenticated):
Operating System: Windows
The QID checks the "Oracle_Home" path with help of the registry key "HKLM\Software\Oracle". The QID verifies if the affected Oracle Coherence version is installed on the host and then checks if the corresponding patch is applied or not.
Patch IDs checked:
Coherence 3.7.1.0, Patch 32581736
Coherence 12.1.3.0.0 Patch 32581818
Coherence 12.2.1.3.0 Patch 32581838
Coherence 12.2.1.4.0 Patch 32581859
Coherence 14.1.1.0.0 Patch 32581868
Oracle HTTP Server is the Web server component for Oracle Fusion Middleware. It provides a listener for Oracle WebLogic Server and the framework for hosting static pages, dynamic pages, and applications over the Web.
Affected Versions:
Oracle HTTP Server, versions 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0
QID Detection Logic (Authenticated):
This QID checks the vulnerable version of Oracle HTTP Server from file "inventory.xml" from the Home Directory.
Affected Products:
Prior to Firefox ESR 78.10
QID Detection Logic (Authenticated) :
This checks for vulnerable version of Firefox browser.
Affected Versions:
Oracle WebLogic Server, version(s) 12.2.1.3,12.2.1.4
QID Detection Logic (Authenticated):
Operating System: Linux
Detection reads the WebLogic Server Location from WebLogic server record.
For version 12.x the QID navigates to that directory and reads "registry.xml" and the patch files found in the directory "Oracle_Home"\inventory\patches to check if the installed version is patched.
Patch IDs checked:
WebLogic Server 12.2.1.4 - Patch 32698246
WebLogic Server 12.2.1.3 - Patch 32697734
NOTE: For Oracle WebLogic Server 14.x we don't have support so we are looking only for Web logic 12.x vulnerable version for this Detection.
Affected Products:
Prior to Firefox 88
QID Detection Logic (Authenticated) :
This checks for vulnerable version of Firefox browser.
Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosxi/html/includes configwizards/windowswmi/windowswmi.inc.php due to improper sanitization of authenticated user-controlled input by a single HTTP request, which can lead to OS command injection on the Nagios XI server.
Affected versions:
Version: 5.7.5
QID Detection Logic:(Authenticated)
It to check for vulnerable version of Nagios Core from version file.
Affected Software:
Oracle Database 12.1.0.2
QID Detection Logic (Unauthenticated):
This QID connects the remote server's Oracle listener and reviews the Oracle banner version.
Affected Software:
Oracle Database 12.1.0.2
QID Detection Logic (Authenticated):
Authentication via Oracle Database:
This QID reviews the Oracle output from the table name DBA_REGISTRY_SQLPATCH for patch information.
Affected Software:
Oracle Database 12.2.0.1
QID Detection Logic (Unauthenticated):
This QID connects the remote server's Oracle listener and reviews the Oracle banner version.
Affected Software:
Oracle Database 12.2.0.1
QID Detection Logic (Authenticated):
Authentication via Oracle Database:
This QID reviews the Oracle output from the table name DBA_REGISTRY_SQLPATCH for patch information.
Affected Software:
Oracle Database 18c
QID Detection Logic (Authenticated):
Authentication via Oracle Database:
This QID reviews the Oracle output from the table name DBA_REGISTRY_SQLPATCH for patch information.
Affected Software:
Oracle Database 19c
QID Detection Logic (Authenticated):
Authentication via Oracle Database:
This QID reviews the Oracle output from the table name DBA_REGISTRY_SQLPATCH for patch information.
Pulse Connect Secure is affected by a vulnerability that can allow an unauthenticated user to perform remote arbitrary file execution on the Pulse Connect Secure gateway.
Affected Versions:
Pulse Connect Secure 9.0R3 and Higher
QID Detection Logic:(Authenticated)
This QID checks for vulnerable versions of Pulse Connect Secure with an SNMP request.
Affected Versions:
Oracle WebLogic Server, version(s) 10.3.6.0, 12.1.3.0, 12.2.1.3,12.2.1.4 and 14.1.1.0
QID Detection Logic (Authenticated):
Operating System: Linux
This QID checks to see if Oracle WebLogic Server process is listening on any of the TCP ports. If so, for version 12.x it gets the "Oracle_Home" path, navigates to that directory and reads "registry.xml" and the patch files found in the directory "Oracle_Home"\inventory\patches to check if the installed version is patched.
For version 10.3.6.x, it gets the "Oracle_Home" path, navigates to that directory and reads "registry.xml" and the file "Oracle_Home"\patch_wls1036\registry\patch-registry.xml to check if the installed version is patched.
QID Detection Logic (Authenticated):
Operating System: Windows
For affected 12.x version
The QID checks the "Oracle_Home" path with help of the registry key "HKLM\Software\Oracle". The QID verifies if the affected WebLogic version is installed on the host and then checks if the corresponding patch is applied or not.
For 10.3.6.0
The QID checks if WebLogic v10.3.6.0 is installed by looking at the file WLS_HOME\wlserver_10.3\.product.properties. The QID then checks if the corresponding patch is applied or not. The WLS_HOME is check using the file "systemdrive"\bea\beahomelist.
Patch IDs checked:
WebLogic Server 14.1.1.0 - Patch 32697788
WebLogic Server 12.2.1.4 - Patch 32698246
WebLogic Server 12.2.1.3 - Patch 32697734
WebLogic Server 12.1.3.0 - Patch 32345262
WebLogic Server 10.3.6.0 - Patch 32403651
QID Detection Logic (Unauthenticated) :
The qid sends a "GET console/login/LoginForm.jsp" request to retrieve the WebLogic version installed.
Affected version:
Atlassian Jira Server and Data Center version prior to 8.5.13
Atlassian Jira Server and Data Center version from 8.6.0 and prior to 8.13.5
Atlassian Jira Server and Data Center version from 8.14.0 and prior to 8.15.1
QID Detection Logic:(Unauthenticated)
It checks for vulnerable version of Atlassian Jira.
Customers are advised to refer to JRASERVER-72115 for updates pertaining to this vulnerability.
No further bug fixes, enhancements, security updates or technical support is available for this version.
QID Detection Logic (Authenticated):
The qid looks for sub directories under %programfiles%\dotnet\shared\Microsoft.NETCore.App, %programfiles(x86)%\dotnet\shared\Microsoft.NETCore.App and checks for vulnerable versions in .version file on Windows.
No further bug fixes, enhancements, security updates or technical support is available for this version.
QID Detection Logic (Authenticated):
The qid looks for sub directories under %programfiles%\dotnet\shared\Microsoft.NETCore.App, %programfiles(x86)%\dotnet\shared\Microsoft.NETCore.App and checks for vulnerable versions in .version file on Windows.
IBM WebSphere Application Server multiple vulnerabilities
CVEID: CVE-2020-27221
DESCRIPTION: Eclipse OpenJ9 is vulnerable to a stack-based buffer overflow when the virtual machine or JNI natives are converting from UTF-8 characters to platform encoding. By sending an overly long string, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.
CVEID: CVE-2020-2773
DESCRIPTION: An unspecified vulnerability in Java SE related to the Java SE Security component could allow an unauthenticated attacker to cause a denial of service resulting in a low availability impact using unknown attack vectors.
CVEID: CVE-2020-14782
DESCRIPTION: An unspecified vulnerability in Java SE related to the Libraries component could allow an unauthenticated attacker to cause no confidentiality impact, low integrity impact, and no availability impact.
CVEID: CVE-2020-14781
DESCRIPTION: An unspecified vulnerability in Java SE related to the JNDI component could allow an unauthenticated attacker to obtain sensitive information resulting in a low confidentiality impact using unknown attack vectors
Affected Versions:
Affected Product(s) Version(s)
WebSphere Application Server 9.0.0.0
WebSphere Application Server V8.5.5.9 through 8.5.5.19
QID Detection Logic (Authenticated):
This QID checks for the vulnerable version of IBM WebSphere Application Server and checks if the patches are installed or not.
QID Detection Logic (Unauthenticated):
This QID matches vulnerable versions Java
QID Detection Logic:(Unauthenticated)
This QID sends POST request to api/login and redfish/v1/Systems/1/ with credentials USERID:PASSW0RD.
A buffer overflow vulnerability exists in the overlayd service of Juniper Networks Junos OS.
The overlayd daemon handles Overlay OAM packets, such as ping and traceroute, sent to the overlay. The service runs as root by default and listens for UDP connections on port 4789. This issue results from improper buffer size validation, which can lead to a buffer overflow.
Affected releases are Junos OS:
15.1X49 versions prior to 15.1X49-D240 on SRX Series;
15.1 versions prior to 15.1R7-S9;
17.3 versions prior to 17.3R3-S11;
17.4 versions prior to 17.4R2-S13, 17.4R3-S4;
18.1 versions prior to 18.1R3-S12;
18.2 versions prior to 18.2R2-S8, 18.2R3-S7;
18.3 versions prior to 18.3R3-S4;
18.4 versions prior to 18.4R1-S8, 18.4R2-S7, 18.4R3-S7;
19.1 versions prior to 19.1R2-S2, 19.1R3-S4;
19.2 versions prior to 19.2R1-S6, 19.2R3-S2;
19.3 versions prior to 19.3R3-S1;
19.4 versions prior to 19.4R2-S4, 19.4R3-S1;
20.1 versions prior to 20.1R2-S1, 20.1R3;
20.2 versions prior to 20.2R2, 20.2R2-S1, 20.2R3;
20.3 versions prior to 20.3R1-S1.
QID detection logic: (Authenticated)
It checks for vulnerable Junos OS version.
Security Fix(es): samba: Out of bounds read in AD DC LDAP server (CVE-2021-20277)
Affected Products:
Red Hat Enterprise Linux for x86_64 8 x86_64
Red Hat Enterprise Linux for IBM z Systems 8 s390x
Red Hat Enterprise Linux for Power, little endian 8 ppc64le
Red Hat Enterprise Linux for ARM 64 8 aarch64
Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.
Refer to Red Hat security advisory RHSA-2021:1197 to address this issue and obtain more information.
Security Fix(es): nettle: Out of bounds memory access in signature verification (CVE-2021-20305)
Affected Products:
Red Hat Enterprise Linux for x86_64 8 x86_64
Red Hat Enterprise Linux for IBM z Systems 8 s390x
Red Hat Enterprise Linux for Power, little endian 8 ppc64le
Red Hat Enterprise Linux for ARM 64 8 aarch64
Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.
Refer to Red Hat security advisory RHSA-2021:1206 to address this issue and obtain more information.
Security Fix(es): samba: Out of bounds read in AD DC LDAP server (CVE-2021-20277)
Affected Products:
Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.2 x86_64
Red Hat Enterprise Linux Server - AUS 8.2 x86_64
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.2 s390x
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.2 ppc64le
Red Hat Enterprise Linux Server - TUS 8.2 x86_64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.2 aarch64
Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions 8.2 ppc64le
Red Hat Enterprise Linux Server - Update Services for SAP Solutions 8.2 x86_64
Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.
Refer to Red Hat security advisory RHSA-2021:1213 to address this issue and obtain more information.
Security Fix(es): samba: Out of bounds read in AD DC LDAP server (CVE-2021-20277)
Affected Products:
Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.1 x86_64
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.1 s390x
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.1 ppc64le
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.1 aarch64
Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions 8.1 ppc64le
Red Hat Enterprise Linux Server - Update Services for SAP Solutions 8.1 x86_64
Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.
Refer to Red Hat security advisory RHSA-2021:1214 to address this issue and obtain more information.
Puppet Server 5.5.x (PE 2018.1.Z) end of life date of January 31, 2021.
QID Detection Logic:(Unauthenticated)
This QID sends a crafted GET request to check the vulnerable version of puppet server .
Affected Versions:
Kong docker images before 1.0.2-alpine (Alpine specific)
QID Detection Logic:
This QID checks for the vulnerable version of Kong Docker.
Affected Versions:
Java Extension Pack for Visual Studio Code prior to version 0.28.0
QID Detection Logic(Authenticated):
This QID checks for the vulnerable versions of Java Extension Pack for Visual Studio Code.
Affected Versions:
Java Extension Pack for Visual Studio Code prior to version 0.72
QID Detection Logic(Authenticated):
This QID checks for the vulnerable versions of Java Extension Pack for Visual Studio Code.
Affected Versions:
Adobe Digital Editions 4.5.11.187245 and below
QID Detection Logic (Authenticated):
This QID checks for the vulnerable version of Digital Editions on MacOS
Adobe has released a patch to fix this vulnerability. User are advised to upgrade to the latest version of software available. The latest version can be downloaded from APSB20-26
No further bug fixes, enhancements, security updates or technical support is available for this version.
QID Detection Logic (Authenticated):
The qid looks for sub directories under %programfiles%\dotnet\shared\Microsoft.NETCore.App, %programfiles(x86)%\dotnet\shared\Microsoft.NETCore.App and checks for vulnerable versions in .version file on Windows.
No further bug fixes, enhancements, security updates or technical support is available for this version.
QID Detection Logic (Authenticated):
The qid looks for sub directories under %programfiles%\dotnet\shared\Microsoft.NETCore.App, %programfiles(x86)%\dotnet\shared\Microsoft.NETCore.App and checks for vulnerable versions in .version file on Windows.
No further bug fixes, enhancements, security updates or technical support is available for this version.
QID Detection Logic (Authenticated):
The qid looks for sub directories under %programfiles%\dotnet\shared\Microsoft.NETCore.App, %programfiles(x86)%\dotnet\shared\Microsoft.NETCore.App and checks for vulnerable versions in .version file on Windows.
No further bug fixes, enhancements, security updates or technical support is available for this version.
QID Detection Logic (Authenticated):
The qid looks for sub directories under %programfiles%\dotnet\shared\Microsoft.NETCore.App, %programfiles(x86)%\dotnet\shared\Microsoft.NETCore.App and checks for vulnerable versions in .version file on Windows.
No further bug fixes, enhancements, security updates or technical support is available for this version.
QID Detection Logic (Authenticated):
The qid looks for sub directories under %programfiles%\dotnet\shared\Microsoft.NETCore.App, %programfiles(x86)%\dotnet\shared\Microsoft.NETCore.App and checks for vulnerable versions in .version file on Windows.
No further bug fixes, enhancements, security updates or technical support is available for this version.
QID Detection Logic (Authenticated):
The qid looks for sub directories under %programfiles%\dotnet\shared\Microsoft.NETCore.App, %programfiles(x86)%\dotnet\shared\Microsoft.NETCore.App and checks for vulnerable versions in .version file on Windows.
No further bug fixes, enhancements, security updates or technical support is available for this version.
QID Detection Logic (Authenticated):
The qid looks for sub directories under %programfiles%\dotnet\shared\Microsoft.NETCore.App, %programfiles(x86)%\dotnet\shared\Microsoft.NETCore.App and checks for vulnerable versions in .version file on Windows.
Python versions 3.0.0 through 3.9.0 are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information, addition or modification of data, or Denial of Service (DoS).
Affected Versions
Python versions 3.0.0 through 3.9.0
QID Detection Logic(Authenticated):
This checks for version information from patchlevel.h file.
Affected Versions:
Google Chrome Up to 90.0.818.41
QID Detection Logic(Authenticated):
This QID checks for vulnerable versions of Google Chrome on Windows.
Affected Versions:
Google Chrome Prior To 90.0.4430.85
QID Detection Logic(Authenticated):
This QID checks for vulnerable versions of Google Chrome on Windows.
Security Fix(es): squid: improper input validation may allow a trusted client to perform HTTP request smuggling (CVE-2020-25097)
Affected Products:
Red Hat Enterprise Linux Server 7 x86_64
Red Hat Enterprise Linux Workstation 7 x86_64
Red Hat Enterprise Linux for IBM z Systems 7 s390x
Red Hat Enterprise Linux for Power, big endian 7 ppc64
Red Hat Enterprise Linux for Power, little endian 7 ppc64le
Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.
Refer to Red Hat security advisory RHSA-2021:1135 to address this issue and obtain more information.
Security Fix(es): nettle: Out of bounds memory access in signature verification (CVE-2021-20305)
Affected Products:
Red Hat Enterprise Linux Server 7 x86_64
Red Hat Enterprise Linux Workstation 7 x86_64
Red Hat Enterprise Linux Desktop 7 x86_64
Red Hat Enterprise Linux for IBM z Systems 7 s390x
Red Hat Enterprise Linux for Power, big endian 7 ppc64
Red Hat Enterprise Linux for Scientific Computing 7 x86_64
Red Hat Enterprise Linux for Power, little endian 7 ppc64le
Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.
Refer to Red Hat security advisory RHSA-2021:1145 to address this issue and obtain more information.
Affected Products:
centos 7
Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.
Security Fix(es): kernel: out-of-bounds read in libiscsi module (CVE-2021-27364) kernel: heap buffer overflow in the iSCSI subsystem (CVE-2021-27365) kernel: iscsi: unrestricted access to sessions and handles (CVE-2021-27363)
Affected Products:
Red Hat Enterprise Linux Server 7 x86_64
Red Hat Enterprise Linux Workstation 7 x86_64
Red Hat Enterprise Linux Desktop 7 x86_64
Red Hat Enterprise Linux for IBM z Systems 7 s390x
Red Hat Enterprise Linux for Power, big endian 7 ppc64
Red Hat Enterprise Linux for Scientific Computing 7 x86_64
Red Hat Enterprise Linux for Power, little endian 7 ppc64le
Red Hat Virtualization Host 4 for RHEL 7 x86_64
Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.
Refer to Red Hat security advisory RHSA-2021:1071 to address this issue and obtain more information.
Security Fix(es): kernel: out-of-bounds read in libiscsi module (CVE-2021-27364) kernel: heap buffer overflow in the iSCSI subsystem (CVE-2021-27365) kernel: iscsi: unrestricted access to sessions and handles (CVE-2021-27363)
Affected Products:
Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.1 x86_64
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.1 s390x
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.1 ppc64le
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.1 aarch64
Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions 8.1 ppc64le
Red Hat Enterprise Linux Server - Update Services for SAP Solutions 8.1 x86_64
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 8.1 x86_64
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 8.1 ppc64le
Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 8.1 aarch64
Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.
Refer to Red Hat security advisory RHSA-2021:1171 to address this issue and obtain more information.
Security Fix(es): kernel: out-of-bounds read in libiscsi module (CVE-2021-27364) kernel: heap buffer overflow in the iSCSI subsystem (CVE-2021-27365)
Affected Products:
Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.1 x86_64
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.1 ppc64le
Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions 8.1 ppc64le
Red Hat Enterprise Linux Server - Update Services for SAP Solutions 8.1 x86_64
Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.
Refer to Red Hat security advisory RHSA-2021:1173 to address this issue and obtain more information.
Affected Products:
centos 7
Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.
QID Detection Logic (Authenticated):
The check matches CiscoCisco APIC version retrieved via Unix Auth using "show version" command.
Affected Version:
Cisco APIC Software releases earlier than 3.2(9b) and 4.1(2g).
Customers are advised to refer to cisco-sa-20190703-ccapic-restapi for more information.
Affected Versions:
Microsoft Exchange Server 2013 Cumulative Update 23
Microsoft Exchange Server 2016 Cumulative Update 19
Microsoft Exchange Server 2016 Cumulative Update 20
Microsoft Exchange Server 2019 Cumulative Update 8
Microsoft Exchange Server 2019 Cumulative Update 9
QID Detection Logic (authenticated):
The QID checks for the version of file Exsetup.exe.
CVE-2021-21206: Use after free in Blink
CVE-2021-21220: Insufficient validation of untrusted input in V8.
Affected Versions:
Google Chrome Prior to 89.0.4389.128
QID Detection Logic(Authenticated):
This QID checks for vulnerable versions of Google Chrome on Windows, MAC OS, and Linux OS.
Affected Product:
VP9 Video Extensions prior to version 1.0.40631.0
Raw Image Extension prior to version 1.0.40392.0
QID detection Logic:
The gets the version of HEVCVideoExtension by querying wmi class Win32_InstalledStoreProgram.
The KB Articles associated with the update:
KB5001387
KB5001382
KB5001339
KB5001337
KB5001347
KB5001383
KB5001342
KB5001392
KB5001335
KB5001330
KB5001389
KB5001332
KB5001393
KB5001340
This QID checks for the file version of ntoskrnl.exe
The following versions of ntoskrnl.exe with their corresponding KBs are verified:
KB5001387 - 6.2.9200.23327
KB5001382 - 6.3.9600.19994
KB5001339 - 10.0.17134.2145
KB5001337 - 10.0.18362.1500
KB5001347 - 10.0.14393.4350
KB5001383 - 6.2.9200.23327
KB5001342 - 10.0.17763.1879
KB5001392 - 6.1.7601.24576
KB5001335 - 6.1.7601.24576
KB5001330 - 10.0.19041.928
KB5001389 - 6.0.6003.21095
KB5001332 - 6.0.6003.21095
KB5001393 - 6.3.9600.19994
KB5001340 - 10.0.10240.18906
Affected Software:
Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)
Microsoft Visual Studio 2019 version 16.7 (includes 16.0 - 16.6)
Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)
QID Detection Logic:Authenticated
This QID detects vulnerable versions of Microsoft Visual Studio by checking file version of devenv.exe.
Affected Versions:
Maven for Java Extension for Visual Studio Code prior to version 0.29.0
QID Detection Logic(Authenticated):
This QID checks for the vulnerable versions of Maven for Java Extension for Visual Studio Code.
Affected Versions:
Kubernetes Tools for Visual Studio Code prior to version 1.3.0
QID Detection Logic(Authenticated):
This QID checks for the vulnerable versions of Kubernetes Tools for Visual Studio Code.
Affected Versions:
GitHub Pull Requests and Issues Extension for Visual Studio Code prior to version 0.25.1
QID Detection Logic(Authenticated):
This QID checks for the vulnerable versions of GitHub Pull Requests and Issues Extension for Visual Studio Code.
Affected Versions:
Visual studio code prior to version 1.55.2
QID Detection Logic(Authenticated):
This QID checks for the vulnerable versions of visual studio code.
This security update contains the following KBs:
KB4504727
KB4493218
KB4504729
KB4504735
KB4504721
KB4504714
KB4504726
KB3178643
KB3178639
KB2553491
KB2589361
KB4504738
KB4504705
KB4493215
KB4493198
KB4504739
KB3017810
KB4504724
KB4493208
KB4504722
QID Detection Logic:
This authenticated QID checks the file versions from the Microsoft advisory with the versions on the affected office system.
Note: Office click-2-run and Office 365 installations need to be updated manually or need to be set to automatic update. There is no direct download for the patch.
This security update contains the following KBs:
KB4504709
KB4504716
KB4493170
KB4504719
KB4504701
KB4504715
KB4493201
KB4504723
QID Detection Logic:
This authenticated QID checks the file versions from the above Microsoft KB article with the versions on the affected SharePoint system.
This security update contains the following KBs:
KB4493185
KB4504733
KB4504712
QID Detection Logic:
This authenticated QID checks the file versions from the Microsoft advisory with the versions on affected outlook applications.
Note: Office click-2-run and Office 365 installations need to be either updated manually or need to be set to automatic update. There is no direct download for the patch.
CVE-2021-21206: Use after free in Blink.
CVE-2021-21220: Insufficient validation of untrusted input in V8 for x86_64.
Affected Version:
Microsoft Edge based on Chromium prior to version 89.0.774.77
QID Detection Logic: (authenticated)
Operating System: Windows
The install path is checked via registry "HKLM\SOFTWARE\Clients\StartMenuInternet\Microsoft Edge\shell\open\command". The version is checked via file msedge.exe.
QID Detection Logic: (authenticated)
Operating System: MacOS
The QID checks for vulnerable version of Microsoft Edge from installed application list.
Support for Apache Tomcat 7.0.x ended on March, 31 2021. No further bug fixes, enhancements, security updates or technical support is available for this version.
QID Detection Logic (Unauthenticated):
Checks for Apache Tomcat version 7.0.x in the HTTP response.
QID Detection Logic (Authenticated):
Operating System: Windows
Detection checks for Tomcat version from the windows registry and checks for existence of Tomcat4.exe file.
QID Detection Logic (Authenticated):
Operating System: Linux
The QID checks for tomcat instances in the running processes. The QID uses unzip command with -p (prints output to stdout) option to extract the version from catalina.jar file.
IBM Spectrum Protect provides automated, centrally scheduled, policy-managed backup, archive, and space-management capabilities for file servers.
Node.js is vulnerable to a denial of service or could allow a remote attacker to bypass security restrictions. These vulnerabilities may affect IBM Spectrum Control. This vulnerability affects IBM Spectrum Control (formerly Tivoli Storage Productivity Center).
Affected Versions:
IBM Spectrum Protect 5.3.1.0 through 5.3.7.0
QID Detection Logic(Authenticated):
It checks for vulnerable version of IBM Spectrum Protect (Tivoli Storage Productivity Center).
FreePBX is vulnerable to Incorrect Access Control
Affected Versions:
FreePBX 13 prior to v13.0.197.14
FreePBX 14 prior to v14.0.13.12
FreePBX 15 prior to v15.0.16.27
QID Detection Logic:
This QID checks for the vulnerable version of FreePBX by sending get request to admin/config.php
Multiple potential security vulnerabilities have been identified in HPE System Management Homepage (SMH) on Windows and Linux.
Affected Versions:
HPE System Management Homepage versions prior to 7.5.5
Affected Versions:
Operation Bridge Manager versions 10.0x, 10.1x, 10.6x 2018.05, 2018.11, 2019.05, 2019.11, 2020.05, 2020.10
QID Detection Logic:
This QID checks the vulnerable officialrelease of Operation Bridge Manager.
Customers are advised to refer to KM03792443 for updates pertaining to this vulnerability.
Affected Versions:
Cisco AMP for Endpoints Prior to Version 7.3.15
Immunet Prior to Version 7.4.0
QID Detection Logic:
QID checks for the vulnerable version of Cisco AMP and Immunet
Note: Currently we are not supporting ClamAV software
Affected versions:
Any .NET Core 2.1 , 3.1 or .NET 5.0 application running on .NET Core 2.1.25, 3.1.12 or .NET 5.0.3 or lower respectively.
QID Detection Logic (Authenticated):
The qid looks for sub directories under %programfiles%\dotnet\shared\Microsoft.NETCore.App, %programfiles(x86)%\dotnet\shared\Microsoft.NETCore.App and checks for vulnerable versions in .version file on Windows.
SeaMonkey has released new updates to address multiple vulnerabilities.
Affected Versions:
SeaMonkey prior to 2.53.7
QID Detection Logic (Authenticated)
This QID checks for vulnerable versions of SeaMonkey.
Note:Mozilla Security Updates also contains Security fixes for SeaMonkey.
A sandbox escape flaw was found in the way flatpak handled special tokens in ".desktop" files. This flaw allows an attacker to gain access to files that are not ordinarily allowed by the app's permissions. The highest threat from this vulnerability is to confidentiality and integrity. (CVE-2021-21381 )
</DIV>Security Fix(es): flatpak: "file forwarding" feature can be used to gain unprivileged access to files (CVE-2021-21381)
Affected Products:
Red Hat Enterprise Linux for x86_64 8 x86_64
Red Hat Enterprise Linux for IBM z Systems 8 s390x
Red Hat Enterprise Linux for Power, little endian 8 ppc64le
Red Hat Enterprise Linux for ARM 64 8 aarch64
Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.
Refer to Red Hat security advisory RHSA-2021:1068 to address this issue and obtain more information.
Security Fix(es): samba: Out of bounds read in AD DC LDAP server (CVE-2021-20277)
Affected Products:
Red Hat Enterprise Linux Server 7 x86_64
Red Hat Enterprise Linux Workstation 7 x86_64
Red Hat Enterprise Linux Desktop 7 x86_64
Red Hat Enterprise Linux for IBM z Systems 7 s390x
Red Hat Enterprise Linux for Power, big endian 7 ppc64
Red Hat Enterprise Linux for Scientific Computing 7 x86_64
Red Hat Gluster Storage Server for On-premise 3 for RHEL 7 x86_64
Red Hat Enterprise Linux for Power, little endian 7 ppc64le
Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.
Refer to Red Hat security advisory RHSA-2021:1072 to address this issue and obtain more information.
Security Fix(es): flatpak: "file forwarding" feature can be used to gain unprivileged access to files (CVE-2021-21381)
Affected Products:
Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.2 x86_64
Red Hat Enterprise Linux Server - AUS 8.2 x86_64
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.2 s390x
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.2 ppc64le
Red Hat Enterprise Linux Server - TUS 8.2 x86_64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.2 aarch64
Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions 8.2 ppc64le
Red Hat Enterprise Linux Server - Update Services for SAP Solutions 8.2 x86_64
Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.
Refer to Red Hat security advisory RHSA-2021:1073 to address this issue and obtain more information.
Security Fix(es): flatpak: "file forwarding" feature can be used to gain unprivileged access to files (CVE-2021-21381)
Affected Products:
Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.1 x86_64
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.1 s390x
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.1 ppc64le
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.1 aarch64
Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions 8.1 ppc64le
Red Hat Enterprise Linux Server - Update Services for SAP Solutions 8.1 x86_64
Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.
Refer to Red Hat security advisory RHSA-2021:1074 to address this issue and obtain more information.
Security Fix(es): kernel: use after free in eventpoll.c may lead to escalation of privilege (CVE-2020-0466)
kernel: SCSI target (LIO)
write to any block on ILO backstore (CVE-2020-28374)
kernel: Use after free via PI futex state (CVE-2021-3347)
kernel: race conditions caused by wrong locking in net/vmw_vsock/af_vsock.c (CVE-2021-26708)
kernel: out-of-bounds read in libiscsi module (CVE-2021-27364)
kernel: heap buffer overflow in the iSCSI subsystem (CVE-2021-27365)
Kernel: KVM: host stack overflow due to lazy update IOAPIC (CVE-2020-27152)
kernel: iscsi: unrestricted access to sessions and handles (CVE-2021-27363)
Affected Products:
Red Hat Enterprise Linux for Real Time 8 x86_64
Red Hat Enterprise Linux for Real Time for NFV 8 x86_64
Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.
Refer to Red Hat security advisory RHSA-2021:1081 to address this issue and obtain more information.
Security Fix(es): kernel: use after free in eventpoll.c may lead to escalation of privilege (CVE-2020-0466)
kernel: SCSI target (LIO)
write to any block on ILO backstore (CVE-2020-28374)
kernel: Use after free via PI futex state (CVE-2021-3347)
kernel: race conditions caused by wrong locking in net/vmw_vsock/af_vsock.c (CVE-2021-26708)
kernel: out-of-bounds read in libiscsi module (CVE-2021-27364)
kernel: heap buffer overflow in the iSCSI subsystem (CVE-2021-27365)
Kernel: KVM: host stack overflow due to lazy update IOAPIC (CVE-2020-27152)
kernel: iscsi: unrestricted access to sessions and handles (CVE-2021-27363)
Affected Products:
Red Hat Enterprise Linux for x86_64 8 x86_64
Red Hat Enterprise Linux for IBM z Systems 8 s390x
Red Hat Enterprise Linux for Power, little endian 8 ppc64le
Red Hat Enterprise Linux for ARM 64 8 aarch64
Red Hat CodeReady Linux Builder for x86_64 8 x86_64
Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le
Red Hat CodeReady Linux Builder for ARM 64 8 aarch64
Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.
Refer to Red Hat security advisory RHSA-2021:1093 to address this issue and obtain more information.
Security Fix(es): kernel: out-of-bounds read in libiscsi module (CVE-2021-27364) kernel: heap buffer overflow in the iSCSI subsystem (CVE-2021-27365)
Affected Products:
Red Hat Enterprise Linux Server 7 x86_64
Red Hat Enterprise Linux for Power, little endian 7 ppc64le
Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.
Refer to Red Hat security advisory RHSA-2021:1069 to address this issue and obtain more information.
Security Fix(es): kernel: out-of-bounds read in libiscsi module (CVE-2021-27364) kernel: heap buffer overflow in the iSCSI subsystem (CVE-2021-27365) kernel: iscsi: unrestricted access to sessions and handles (CVE-2021-27363)
Affected Products:
Red Hat Enterprise Linux for Real Time 7 x86_64
Red Hat Enterprise Linux for Real Time for NFV 7 x86_64
Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.
Refer to Red Hat security advisory RHSA-2021:1070 to address this issue and obtain more information.
Security Fix(es): openssl: NULL pointer dereference in signature_algorithms processing (CVE-2021-3449)
Affected Products:
Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.1 x86_64
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.1 s390x
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.1 ppc64le
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.1 aarch64
Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions 8.1 ppc64le
Red Hat Enterprise Linux Server - Update Services for SAP Solutions 8.1 x86_64
Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.
Refer to Red Hat security advisory RHSA-2021:1131 to address this issue and obtain more information.
Affected Products
Cisco SD-WAN vManage Software releases earlier than the following releases:
From 0.0.0 Prior To 19.2.4
Version 19.3.x all versions
From 20.0.0 Prior To 20.3.3
From 20.4.0 Prior To 20.4.1
Customers are advised to refer to cisco-sa-vmanage-YuTVWqy for more information.
