risu 1.8.3 → 1.8.4

data/lib/risu/parsers/nessus/postprocess/vmware_player.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2017 Jacob Hammack.
+# Copyright (c) 2010-2020 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal
@@ -31,7 +31,7 @@ module Risu
 						{
 							:description => "VMware Player Patch Rollup",
 							:plugin_id => -99976,
-							:plugin_name => "Update to the latest VMware Player",
+							:plugin_name => "Missing the latest VMware Player Patches",
 							:item_name => "Update to the latest VMware Player",
 							:plugin_ids => [
 								71231,
@@ -41,7 +41,7 @@ module Risu
 								84219,
 								84805,
 								81185,
-								
+
 
 							]
 						}

data/lib/risu/parsers/nessus/postprocess/vmware_vcenter.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2017 Jacob Hammack.
+# Copyright (c) 2010-2020 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal
@@ -31,7 +31,7 @@ module Risu
 						{
 							:description => "VMware vCenter Patch Rollup",
 							:plugin_id => -99979,
-							:plugin_name => "Update to the latest VMware vCenter",
+							:plugin_name => "Missing the latest VMware vCenter Patches",
 							:item_name => "Update to the latest VMware vCenter",
 							:plugin_ids => [
 								79865,
@@ -52,9 +52,15 @@ module Risu
 								91322,
 								87592,
 								92870,
-
-
-
+91713, #VMware vCenter Server 5.0.x < 5.0u3g / 5.1.x < 5.1u3d / 5.5.x < 5.5u2d Reflected XSS (VMSA-2016- 0009)
+76947, #VMware vCenter Converter Multiple Vulnerabilities (VMSA-2014-0006)
+99475, #VMware vCenter Server 6.0.x < 6.0u3b / 6.5.x < 6.5c BlazeDS AMF3 RCE (VMSA-2017-0007)
+104654, #VMware vCenter Server 5.5.x < 5.5u3f / 6.0.x < 6.0u3c / 6.5.x < 6.5u1 Multiple Vulnerabilities (VMSA- 2017-0017)
+86124, #VMware vCenter 5.5 LDAP Certificate Validation MitM Spoofing (VMSA-2015-0006)
+95468, #VMware vCenter Server 5.5.x < 5.5u3e / 6.0.x < 6.0u2a Multiple XXE Vulnerabilities (VMSA-2016-0022)
+105784, #VMware vCenter Server 5.5.x < 5.5U3g / 6.0.x < 6.0U3d / 6.5.x < 6.5U1e Hypervisor-Assisted Guest Remediation (VMSA-2018-0004) (Spectre)
+111760, #VMware vCenter Server 5.5.x / 6.0.x / 6.5.x / 6.7.x Speculative Execution Side Channel Vulnerability (Foreshadow) (VMSA-2018-0020)
+79864, #VMware vCenter Update Manager Multiple Java Vulnerabilities (VMSA-2014-0012)
 
 
 

data/lib/risu/parsers/nessus/postprocess/vmware_vsphere_client.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2017 Jacob Hammack.
+# Copyright (c) 2010-2020 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal
@@ -31,15 +31,16 @@ module Risu
 						{
 							:description => "VMware vSphere Client Patch Rollup",
 							:plugin_id => -99967,
-							:plugin_name => "Update to the latest VMware vSphere Client",
+							:plugin_name => "Missing the latest VMware vSphere Client Patches",
 							:item_name => "Update to the latest VMware vSphere Client",
 							:plugin_ids => [
-                64559,
-                73595,
-                51057,
+                				64559,
+                				73595,
+                				51057,
 								76355,
 								87675,
-								
+								95657, #VMware vSphere Client XXE Injection Information Disclosure (VMSA-2016-0022)
+
 							]
 						}
 					end

data/lib/risu/parsers/nessus/postprocess/winscp.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2017 Jacob Hammack.
+# Copyright (c) 2010-2020 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal
@@ -31,15 +31,14 @@ module Risu
 						{
 							:description => "WinSCP Patch Rollups",
 							:plugin_id => -99978,
-							:plugin_name => "Update to the latest WinSCP",
+							:plugin_name => "Missing the latest WinSCP Patches",
 							:item_name => "Update to the latest WinSCP",
 							:plugin_ids => [
-								73613,
-								76167,
-								78078,
-								72388,
-								72389,
-								
+								73613, #WinSCP Heartbeat Information Disclosure (Heartbleed)
+								76167, #WinSCP 5.x < 5.5.4 Multiple Vulnerabilities
+								78078, #WinSCP 5.x < 5.5.5 Multiple Vulnerabilities
+								72388, #WinSCP < 5.1.6 RSA Signature Blob Integer Overflow
+								72389, #WinSCP < 5.1.7 Multiple Vulnerabilities
 
 
 							]

data/lib/risu/parsers/nessus/postprocess/wireshark.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2017 Jacob Hammack.
+# Copyright (c) 2010-2020 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal
@@ -31,58 +31,80 @@ module Risu
 						{
 							:description => "Wireshark Patch Rollups",
 							:plugin_id => -99992,
-							:plugin_name => "Update to the latest Wireshark",
+							:plugin_name => "Missing the latest Wireshark Patches",
 							:item_name => "Update to the latest Wireshark",
 							:plugin_ids => [
-								61572,
-								64361,
-								65253,
-								66543,
-								65254,
-								66544,
-								72941,
-								66895,
-								69104,
-								69880,
-								70763,
-								71520,
-								56164,
-								56690,
-								58518,
-								59240,
-								60117,
-								62477,
-								63095,
-								66894,
-								57539,
-								53473,
-								57538,
-								61571,
-								54942,
-								55510,
-								56163,
-								56689,
-								58517,
-								59239,
-								60116,
-								51458,
-								52502,
-								83488,
-								36127,
-								40335,
-								43350,
-								44338,
-								46864,
-								48213,
-								48943,
-								89103,
-								90786,
-								90787,
-								92817,
-								99437,
-								97574,
-								
-
+61572, #Wireshark 1.6.x < 1.6.10 Multiple Vulnerabilities
+64361, #Wireshark 1.6.x < 1.6.13 Multiple Vulnerabilities
+65253, #Wireshark 1.6.x < 1.6.14 Multiple Vulnerabilities
+66543, #Wireshark 1.6.x < 1.6.15 ASN.1 BER Dissector Malformed Packet Handling DoS
+65254, #Wireshark 1.8.x < 1.8.6 Multiple Vulnerabilities
+66544, #Wireshark 1.8.x < 1.8.7 Multiple Vulnerabilities
+72941, #Wireshark 1.8.x < 1.8.13 Multiple Vulnerabilities
+66895, #Wireshark 1.8.x < 1.8.8 Multiple Vulnerabilities
+69104, #Wireshark 1.8.x < 1.8.9 Multiple Vulnerabilities
+69880, #Wireshark 1.8.x < 1.8.10 Multiple DoS
+70763, #Wireshark 1.8.x < 1.8.11 Multiple DoS Vulnerabilities
+71520, #Wireshark 1.8.x < 1.8.12 Multiple DoS
+56164, #Wireshark 1.6.x < 1.6.2 Multiple Vulnerabilities
+56690, #Wireshark 1.6.x < 1.6.3 Multiple Vulnerabilities
+58518, #Wireshark 1.6.x < 1.6.6 Multiple Denial of Service Vulnerabilities
+59240, #Wireshark 1.6.x < 1.6.8 Multiple Denial of Service Vulnerabilities
+60117, #Wireshark 1.6.x < 1.6.9 Multiple Denial of Service Vulnerabilities
+62477, #Wireshark 1.6.x < 1.6.11 DRDA DoS
+63095, #Wireshark 1.6.x < 1.6.12 Multiple Vulnerabilities
+66894, #Wireshark 1.6.x < 1.6.16 Multiple DoS Vulnerabilities
+57539, #Wireshark 1.6.x < 1.6.5 Multiple Vulnerabilities
+53473, #Wireshark < 1.2.16 / 1.4.5 Multiple Vulnerabilities
+57538, #Wireshark 1.4.x < 1.4.11 Multiple Vulnerabilities
+61571, #Wireshark 1.4.x < 1.4.15 Multiple Vulnerabilities
+54942, #Wireshark < 1.2.17 / 1.4.7 Multiple DoS Vulnerabilities
+55510, #Wireshark < 1.2.18 / 1.4.8 / 1.6.1 Multiple Denial of Service Vulnerabilities
+56163, #Wireshark 1.4.x < 1.4.9 Multiple Vulnerabilities
+56689, #Wireshark 1.4.x < 1.4.10 Multiple Vulnerabilities
+58517, #Wireshark 1.4.x < 1.4.12 Multiple Denial of Service Vulnerabilities
+59239, #Wireshark 1.4.x < 1.4.13 Multiple Denial of Service Vulnerabilities
+60116, #Wireshark 1.4.x < 1.4.14 Multiple Denial of Service Vulnerabilities
+51458, #Wireshark < 1.2.14 / 1.4.3 Multiple Vulnerabilities
+52502, #Wireshark < 1.2.15 / 1.4.4 Multiple Vulnerabilities
+83488, #Wireshark 1.10.x < 1.10.14 / 1.12.x < 1.12.5 Multiple DoS Vulnerabilities
+36127, #Wireshark / Ethereal 0.99.2 to 1.0.6 Multiple Vulnerabilities
+40335, #Wireshark / Ethereal 0.9.2 to 1.2.0 Multiple Vulnerabilities
+43350, #Wireshark / Ethereal 0.9.0 to 1.2.4 Multiple Vulnerabilities
+44338, #Wireshark / Ethereal Dissector LWRES Multiple Buffer Overflows
+46864, #Wireshark / Ethereal < 1.0.14 / 1.2.9 Multiple Vulnerabilities
+48213, #Wireshark / Ethereal < 1.0.15 / 1.2.10 Multiple Vulnerabilities
+48943, #Wireshark / Ethereal < 1.2.11 / 1.0.16 Path Subversion Arbitrary DLL Injection Code Execution
+89103, #Wireshark 1.12.x < 1.12.10 Multiple Vulnerabilities
+90786, #Wireshark 1.12.x < 1.12.11 Multiple DoS
+90787, #Wireshark 2.0.x < 2.0.3 Multiple DoS
+92817, #Wireshark 2.0.x < 2.0.5 Multiple DoS
+99437, #Wireshark 2.0.x < 2.0.12 / 2.2.x < 2.2.6 Multiple DoS
+97574, #Wireshark 2.0.x < 2.0.11 / 2.2.x < 2.2.5 Multiple DoS
+89104, #Wireshark 2.0.x < 2.0.2 Multiple Vulnerabilities
+91821, #Wireshark 2.0.x < 2.0.4 Multiple DoS
+100671, #Wireshark 2.0.x < 2.0.13 / 2.2.x < 2.2.7 Multiple DoS
+91820, #Wireshark 1.12.x < 1.12.12 Multiple DoS - 91820
+92816, #Wireshark 1.12.x < 1.12.13 Multiple DoS - 92816
+50678, #Wireshark < 1.2.13 / 1.4.2 Multiple Vulnerabilities
+107093, #Wireshark 2.2.x < 2.2.13 / 2.4.x < 2.4.5 Multiple DoS Vulnerabilities
+108885, #Wireshark 2.2.x < 2.2.14 / 2.4.x < 2.4.6 Multiple Vulnerabilities
+110269, #Wireshark 2.2.x < 2.2.15 / 2.4.x < 2.4.7 / 2.6.x < 2.6.1 Multiple Vulnerabilities
+111387, #Wireshark 2.2.x < 2.2.16 / 2.4.x < 2.4.8 / 2.6.x < 2.6.2 Multiple Vulnerabilities
+117339, #Wireshark 2.2.x < 2.2.17 / 2.4.x < 2.4.9 / 2.6.x < 2.6.3 Multiple Vulnerabilities
+101898, #Wireshark 2.0.x < 2.0.14 / 2.2.x < 2.2.8 Multiple DoS
+102920, #Wireshark 2.2.x < 2.2.9 Multiple DoS
+103985, #Wireshark 2.2.x < 2.2.10 Multiple DoS
+105007, #Wireshark 2.2.x < 2.2.11 / 2.4.x < 2.4.3 DoS Vulnerabilities
+106142, #Wireshark 2.2.x < 2.2.12 / 2.4.x < 2.4.4 DoS Vulnerabilities
+102919, #Wireshark 2.0.x < 2.0.15 Multiple DoS
+103984, #Wireshark 2.0.x < 2.0.16 DMP dissector DoS
+118206, #Wireshark 2.4.x < 2.4.10 Multiple Vulnerabilities
+119419, #Wireshark 2.4.x < 2.4.11 Multiple Vulnerabilities
+121107, #Wireshark 2.4.x < 2.4.12 Multiple Vulnerabilities
+124164, #Wireshark 2.4.x < 2.4.14 Multiple Vulnerabilities
+125365, #Wireshark 2.4.x < 2.4.15 A Vulnerability
+126923, #Wireshark 2.4.x < 2.4.16 DoS Vulnerability
 							]
 						}
 					end

data/lib/risu/parsers/nexpose/nexpose_document.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2017 Jacob Hammack.
+# Copyright (c) 2010-2020 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/parsers/nexpose/simple_nexpose.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2017 Jacob Hammack.
+# Copyright (c) 2010-2020 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/renderers.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2017 Jacob Hammack.
+# Copyright (c) 2010-2020 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/renderers/csvrenderer.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2017 Jacob Hammack.
+# Copyright (c) 2010-2020 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/renderers/nilrenderer.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2017 Jacob Hammack.
+# Copyright (c) 2010-2020 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/renderers/pdfrenderer.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2017 Jacob Hammack.
+# Copyright (c) 2010-2020 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/template_helpers.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2017 Jacob Hammack.
+# Copyright (c) 2010-2020 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/templates/assets.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2017 Jacob Hammack.
+# Copyright (c) 2010-2020 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/templates/authentication_summary.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2017 Jacob Hammack.
+# Copyright (c) 2010-2020 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/templates/cover_sheet.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2017 Jacob Hammack.
+# Copyright (c) 2010-2020 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/templates/exec_summary.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2017 Jacob Hammack.
+# Copyright (c) 2010-2020 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/templates/executive_summary_detailed.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2017 Jacob Hammack.
+# Copyright (c) 2010-2020 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/templates/exploitablity_summary.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2017 Jacob Hammack.
+# Copyright (c) 2010-2020 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/templates/failed_audits.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2017 Jacob Hammack.
+# Copyright (c) 2010-2020 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/templates/finding_statistics.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2017 Jacob Hammack.
+# Copyright (c) 2010-2020 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/templates/findings_host.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2017 Jacob Hammack.
+# Copyright (c) 2010-2020 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/templates/findings_summary.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2017 Jacob Hammack.
+# Copyright (c) 2010-2020 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/templates/findings_summary_with_pluginid.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2017 Jacob Hammack.
+# Copyright (c) 2010-2020 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/templates/graphs.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2017 Jacob Hammack.
+# Copyright (c) 2010-2020 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/templates/host_findings_csv.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2017 Jacob Hammack.
+# Copyright (c) 2010-2020 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/templates/host_summary.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2017 Jacob Hammack.
+# Copyright (c) 2010-2020 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/templates/malicious_process_detection.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2017 Jacob Hammack.
+# Copyright (c) 2010-2020 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/templates/missing_root_causes.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2017 Jacob Hammack.
+# Copyright (c) 2010-2020 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/templates/ms_patch_summary.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2017 Jacob Hammack.
+# Copyright (c) 2010-2020 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/templates/ms_update_summary.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2017 Jacob Hammack.
+# Copyright (c) 2010-2020 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/templates/ms_wsus_findings.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2017 Jacob Hammack.
+# Copyright (c) 2010-2020 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/templates/notable.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2017 Jacob Hammack.
+# Copyright (c) 2010-2020 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/templates/notable_detailed.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2017 Jacob Hammack.
+# Copyright (c) 2010-2020 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal

data/lib/risu/templates/pci_compliance.rb

@@ -1,4 +1,4 @@
-# Copyright (c) 2010-2017 Jacob Hammack.
+# Copyright (c) 2010-2020 Jacob Hammack.
 #
 # Permission is hereby granted, free of charge, to any person obtaining a copy
 # of this software and associated documentation files (the "Software"), to deal