risu 1.8.3 → 1.8.4

Sign up to get free protection for your applications and to get access to all the features.
Files changed (161) hide show
  1. checksums.yaml +5 -5
  2. checksums.yaml.gz.sig +0 -0
  3. data.tar.gz.sig +0 -0
  4. data/Gemfile.lock +159 -0
  5. data/LICENSE +1 -1
  6. data/README.markdown +2 -5
  7. data/Rakefile +1 -1
  8. data/bin/risu +1 -1
  9. data/docs/NEWS.markdown +3 -0
  10. data/lib/risu.rb +2 -2
  11. data/lib/risu/base.rb +1 -1
  12. data/lib/risu/base/graph_template_helper.rb +1 -1
  13. data/lib/risu/base/host_template_helper.rb +2 -1
  14. data/lib/risu/base/malware_template_helper.rb +1 -1
  15. data/lib/risu/base/post_process_base.rb +7 -4
  16. data/lib/risu/base/post_process_manager.rb +1 -1
  17. data/lib/risu/base/scan_helper.rb +1 -1
  18. data/lib/risu/base/schema.rb +10 -3
  19. data/lib/risu/base/shares_template_helper.rb +1 -1
  20. data/lib/risu/base/template_base.rb +1 -1
  21. data/lib/risu/base/template_helper.rb +1 -1
  22. data/lib/risu/base/template_manager.rb +1 -1
  23. data/lib/risu/base/templater.rb +1 -1
  24. data/lib/risu/cli.rb +1 -1
  25. data/lib/risu/cli/application.rb +16 -16
  26. data/lib/risu/cli/banner.rb +1 -1
  27. data/lib/risu/exceptions.rb +1 -1
  28. data/lib/risu/exceptions/invaliddocument.rb +1 -1
  29. data/lib/risu/graphs.rb +1 -1
  30. data/lib/risu/graphs/top_vuln_graph.rb +1 -1
  31. data/lib/risu/graphs/windows_os_graph.rb +1 -1
  32. data/lib/risu/models.rb +2 -1
  33. data/lib/risu/models/attachment.rb +1 -1
  34. data/lib/risu/models/familyselection.rb +1 -1
  35. data/lib/risu/models/host.rb +34 -2
  36. data/lib/risu/models/hostproperty.rb +1 -1
  37. data/lib/risu/models/individualpluginselection.rb +1 -1
  38. data/lib/risu/models/item.rb +248 -20
  39. data/lib/risu/models/nessuspluginmetadata.rb +28 -0
  40. data/lib/risu/models/patch.rb +1 -1
  41. data/lib/risu/models/plugin.rb +1 -1
  42. data/lib/risu/models/pluginspreference.rb +1 -1
  43. data/lib/risu/models/policy.rb +1 -1
  44. data/lib/risu/models/reference.rb +1 -1
  45. data/lib/risu/models/report.rb +1 -1
  46. data/lib/risu/models/serverpreference.rb +1 -1
  47. data/lib/risu/models/servicedescription.rb +1 -1
  48. data/lib/risu/models/version.rb +1 -1
  49. data/lib/risu/parsers.rb +1 -1
  50. data/lib/risu/parsers/nessus/nessus_document.rb +1 -1
  51. data/lib/risu/parsers/nessus/nessus_sax_listener.rb +3 -2
  52. data/lib/risu/parsers/nessus/postprocess.rb +1 -1
  53. data/lib/risu/parsers/nessus/postprocess/7zip.rb +6 -4
  54. data/lib/risu/parsers/nessus/postprocess/adobe_acrobat.rb +48 -54
  55. data/lib/risu/parsers/nessus/postprocess/adobe_air.rb +58 -63
  56. data/lib/risu/parsers/nessus/postprocess/adobe_coldfusion.rb +47 -0
  57. data/lib/risu/parsers/nessus/postprocess/{shockwave.rb → adobe_creative_desktop.rb} +9 -34
  58. data/lib/risu/parsers/nessus/postprocess/adobe_flash_player.rb +175 -0
  59. data/lib/risu/parsers/nessus/postprocess/adobe_reader.rb +73 -55
  60. data/lib/risu/parsers/nessus/postprocess/adobe_shockwave_player.rb +74 -0
  61. data/lib/risu/parsers/nessus/postprocess/apache.rb +38 -33
  62. data/lib/risu/parsers/nessus/postprocess/apache_tomcat.rb +8 -10
  63. data/lib/risu/parsers/nessus/postprocess/apple_icloud.rb +47 -0
  64. data/lib/risu/parsers/nessus/postprocess/apple_itunes.rb +23 -17
  65. data/lib/risu/parsers/nessus/postprocess/apple_quicktime.rb +38 -32
  66. data/lib/risu/parsers/nessus/postprocess/artifex_ghostscript.rb +49 -0
  67. data/lib/risu/parsers/nessus/postprocess/blackberry_enterprise_server.rb +10 -14
  68. data/lib/risu/parsers/nessus/postprocess/ca_brightstor_arcserve.rb +10 -10
  69. data/lib/risu/parsers/nessus/postprocess/cisco_anyconnect.rb +18 -20
  70. data/lib/risu/parsers/nessus/postprocess/cisco_ios.rb +25 -15
  71. data/lib/risu/parsers/nessus/postprocess/cisco_telepresence.rb +45 -0
  72. data/lib/risu/parsers/nessus/postprocess/core_ftp.rb +6 -6
  73. data/lib/risu/parsers/nessus/postprocess/db2.rb +7 -9
  74. data/lib/risu/parsers/nessus/postprocess/dell_idrac.rb +49 -0
  75. data/lib/risu/parsers/nessus/postprocess/downgrade_plugins.rb +4 -2
  76. data/lib/risu/parsers/nessus/postprocess/dropbear_ssh.rb +7 -6
  77. data/lib/risu/parsers/nessus/postprocess/filezilla.rb +4 -6
  78. data/lib/risu/parsers/nessus/postprocess/firefox.rb +113 -71
  79. data/lib/risu/parsers/nessus/postprocess/flexnet.rb +3 -3
  80. data/lib/risu/parsers/nessus/postprocess/foxit_phantom_pdf.rb +10 -3
  81. data/lib/risu/parsers/nessus/postprocess/foxit_reader.rb +13 -12
  82. data/lib/risu/parsers/nessus/postprocess/google_chrome.rb +34 -6
  83. data/lib/risu/parsers/nessus/postprocess/hp_system_mgt_homepage.rb +3 -3
  84. data/lib/risu/parsers/nessus/postprocess/iLo.rb +50 -0
  85. data/lib/risu/parsers/nessus/postprocess/intel_mgt_engine.rb +47 -0
  86. data/lib/risu/parsers/nessus/postprocess/irfanview.rb +2 -2
  87. data/lib/risu/parsers/nessus/postprocess/java.rb +70 -64
  88. data/lib/risu/parsers/nessus/postprocess/libreoffice.rb +2 -2
  89. data/lib/risu/parsers/nessus/postprocess/microsoft_office.rb +73 -0
  90. data/lib/risu/parsers/nessus/postprocess/microsoft_visual_studio.rb +47 -0
  91. data/lib/risu/parsers/nessus/postprocess/microsoft_windows.rb +1312 -0
  92. data/lib/risu/parsers/nessus/postprocess/mongo_db.rb +46 -0
  93. data/lib/risu/parsers/nessus/postprocess/mozzila_thunderbird.rb +49 -0
  94. data/lib/risu/parsers/nessus/postprocess/normalize_plugin_names.rb +5 -2
  95. data/lib/risu/parsers/nessus/postprocess/openoffice.rb +14 -11
  96. data/lib/risu/parsers/nessus/postprocess/openssh.rb +3 -3
  97. data/lib/risu/parsers/nessus/postprocess/openssl.rb +58 -39
  98. data/lib/risu/parsers/nessus/postprocess/oracle_database.rb +3 -3
  99. data/lib/risu/parsers/nessus/postprocess/php.rb +94 -69
  100. data/lib/risu/parsers/nessus/postprocess/post_process.rb +1 -1
  101. data/lib/risu/parsers/nessus/postprocess/putty.rb +47 -0
  102. data/lib/risu/parsers/nessus/postprocess/real_player.rb +3 -3
  103. data/lib/risu/parsers/nessus/postprocess/risk_score.rb +1 -1
  104. data/lib/risu/parsers/nessus/postprocess/root_cause.rb +16 -3
  105. data/lib/risu/parsers/nessus/postprocess/samba.rb +46 -0
  106. data/lib/risu/parsers/nessus/postprocess/servu.rb +4 -4
  107. data/lib/risu/parsers/nessus/postprocess/sigplus_pro.rb +3 -3
  108. data/lib/risu/parsers/nessus/postprocess/skype.rb +4 -3
  109. data/lib/risu/parsers/nessus/postprocess/solarwinds_dameware.rb +48 -0
  110. data/lib/risu/parsers/nessus/postprocess/symantec_endpoint.rb +4 -3
  111. data/lib/risu/parsers/nessus/postprocess/symantec_pcanywhere.rb +3 -3
  112. data/lib/risu/parsers/nessus/postprocess/tenable_nessus.rb +47 -0
  113. data/lib/risu/parsers/nessus/postprocess/timbuktu.rb +2 -2
  114. data/lib/risu/parsers/nessus/postprocess/vlc.rb +4 -3
  115. data/lib/risu/parsers/nessus/postprocess/vmware_esxi.rb +64 -54
  116. data/lib/risu/parsers/nessus/postprocess/vmware_player.rb +3 -3
  117. data/lib/risu/parsers/nessus/postprocess/vmware_vcenter.rb +11 -5
  118. data/lib/risu/parsers/nessus/postprocess/vmware_vsphere_client.rb +7 -6
  119. data/lib/risu/parsers/nessus/postprocess/winscp.rb +7 -8
  120. data/lib/risu/parsers/nessus/postprocess/wireshark.rb +73 -51
  121. data/lib/risu/parsers/nexpose/nexpose_document.rb +1 -1
  122. data/lib/risu/parsers/nexpose/simple_nexpose.rb +1 -1
  123. data/lib/risu/renderers.rb +1 -1
  124. data/lib/risu/renderers/csvrenderer.rb +1 -1
  125. data/lib/risu/renderers/nilrenderer.rb +1 -1
  126. data/lib/risu/renderers/pdfrenderer.rb +1 -1
  127. data/lib/risu/template_helpers.rb +1 -1
  128. data/lib/risu/templates/assets.rb +1 -1
  129. data/lib/risu/templates/authentication_summary.rb +1 -1
  130. data/lib/risu/templates/cover_sheet.rb +1 -1
  131. data/lib/risu/templates/exec_summary.rb +1 -1
  132. data/lib/risu/templates/executive_summary_detailed.rb +1 -1
  133. data/lib/risu/templates/exploitablity_summary.rb +1 -1
  134. data/lib/risu/templates/failed_audits.rb +1 -1
  135. data/lib/risu/templates/finding_statistics.rb +1 -1
  136. data/lib/risu/templates/findings_host.rb +1 -1
  137. data/lib/risu/templates/findings_summary.rb +1 -1
  138. data/lib/risu/templates/findings_summary_with_pluginid.rb +1 -1
  139. data/lib/risu/templates/graphs.rb +1 -1
  140. data/lib/risu/templates/host_findings_csv.rb +1 -1
  141. data/lib/risu/templates/host_summary.rb +1 -1
  142. data/lib/risu/templates/malicious_process_detection.rb +1 -1
  143. data/lib/risu/templates/missing_root_causes.rb +1 -1
  144. data/lib/risu/templates/ms_patch_summary.rb +1 -1
  145. data/lib/risu/templates/ms_update_summary.rb +1 -1
  146. data/lib/risu/templates/ms_wsus_findings.rb +1 -1
  147. data/lib/risu/templates/notable.rb +1 -1
  148. data/lib/risu/templates/notable_detailed.rb +1 -1
  149. data/lib/risu/templates/pci_compliance.rb +1 -1
  150. data/lib/risu/templates/rollup_summary.rb +82 -0
  151. data/lib/risu/templates/stig_findings_summary.rb +1 -1
  152. data/lib/risu/templates/talking_points.rb +1 -1
  153. data/lib/risu/templates/technical_findings.rb +1 -1
  154. data/lib/risu/templates/template.rb +1 -1
  155. data/lib/risu/templates/top_25.rb +1 -1
  156. data/lib/risu/version.rb +2 -2
  157. data/risu.gemspec +5 -5
  158. metadata +59 -56
  159. metadata.gz.sig +0 -0
  160. data/lib/risu/parsers/nessus/postprocess/flash_player.rb +0 -145
  161. data/lib/risu/parsers/nessus/postprocess/windows.rb +0 -976
@@ -0,0 +1,28 @@
1
+ # Copyright (c) 2010-2020 Jacob Hammack.
2
+ #
3
+ # Permission is hereby granted, free of charge, to any person obtaining a copy
4
+ # of this software and associated documentation files (the "Software"), to deal
5
+ # in the Software without restriction, including without limitation the rights
6
+ # to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
7
+ # copies of the Software, and to permit persons to whom the Software is
8
+ # furnished to do so, subject to the following conditions:
9
+ #
10
+ # The above copyright notice and this permission notice shall be included in
11
+ # all copies or substantial portions of the Software.
12
+ #
13
+ # THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
14
+ # IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
15
+ # FITNESS FOR A PARTICULAR PURPOSE AND NON INFRINGEMENT. IN NO EVENT SHALL THE
16
+ # AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
17
+ # LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
18
+ # OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
19
+ # THE SOFTWARE.
20
+
21
+
22
+ module Risu
23
+ module Models
24
+
25
+ class NessusPluginMetadata < ActiveRecord::Base
26
+ end
27
+ end
28
+ end
@@ -1,4 +1,4 @@
1
- # Copyright (c) 2010-2017 Jacob Hammack.
1
+ # Copyright (c) 2010-2020 Jacob Hammack.
2
2
  #
3
3
  # Permission is hereby granted, free of charge, to any person obtaining a copy
4
4
  # of this software and associated documentation files (the "Software"), to deal
@@ -1,4 +1,4 @@
1
- # Copyright (c) 2010-2017 Jacob Hammack.
1
+ # Copyright (c) 2010-2020 Jacob Hammack.
2
2
  #
3
3
  # Permission is hereby granted, free of charge, to any person obtaining a copy
4
4
  # of this software and associated documentation files (the "Software"), to deal
@@ -1,4 +1,4 @@
1
- # Copyright (c) 2010-2017 Jacob Hammack.
1
+ # Copyright (c) 2010-2020 Jacob Hammack.
2
2
  #
3
3
  # Permission is hereby granted, free of charge, to any person obtaining a copy
4
4
  # of this software and associated documentation files (the "Software"), to deal
@@ -1,4 +1,4 @@
1
- # Copyright (c) 2010-2017 Jacob Hammack.
1
+ # Copyright (c) 2010-2020 Jacob Hammack.
2
2
  #
3
3
  # Permission is hereby granted, free of charge, to any person obtaining a copy
4
4
  # of this software and associated documentation files (the "Software"), to deal
@@ -1,4 +1,4 @@
1
- # Copyright (c) 2010-2017 Jacob Hammack.
1
+ # Copyright (c) 2010-2020 Jacob Hammack.
2
2
  #
3
3
  # Permission is hereby granted, free of charge, to any person obtaining a copy
4
4
  # of this software and associated documentation files (the "Software"), to deal
@@ -1,4 +1,4 @@
1
- # Copyright (c) 2010-2017 Jacob Hammack.
1
+ # Copyright (c) 2010-2020 Jacob Hammack.
2
2
  #
3
3
  # Permission is hereby granted, free of charge, to any person obtaining a copy
4
4
  # of this software and associated documentation files (the "Software"), to deal
@@ -1,4 +1,4 @@
1
- # Copyright (c) 2010-2017 Jacob Hammack.
1
+ # Copyright (c) 2010-2020 Jacob Hammack.
2
2
  #
3
3
  # Permission is hereby granted, free of charge, to any person obtaining a copy
4
4
  # of this software and associated documentation files (the "Software"), to deal
@@ -1,4 +1,4 @@
1
- # Copyright (c) 2010-2017 Jacob Hammack.
1
+ # Copyright (c) 2010-2020 Jacob Hammack.
2
2
  #
3
3
  # Permission is hereby granted, free of charge, to any person obtaining a copy
4
4
  # of this software and associated documentation files (the "Software"), to deal
@@ -1,4 +1,4 @@
1
- # Copyright (c) 2010-2017 Jacob Hammack.
1
+ # Copyright (c) 2010-2020 Jacob Hammack.
2
2
  #
3
3
  # Permission is hereby granted, free of charge, to any person obtaining a copy
4
4
  # of this software and associated documentation files (the "Software"), to deal
@@ -1,4 +1,4 @@
1
- # Copyright (c) 2010-2017 Jacob Hammack.
1
+ # Copyright (c) 2010-2020 Jacob Hammack.
2
2
  #
3
3
  # Permission is hereby granted, free of charge, to any person obtaining a copy
4
4
  # of this software and associated documentation files (the "Software"), to deal
@@ -1,4 +1,4 @@
1
- # Copyright (c) 2010-2017 Jacob Hammack.
1
+ # Copyright (c) 2010-2020 Jacob Hammack.
2
2
  #
3
3
  # Permission is hereby granted, free of charge, to any person obtaining a copy
4
4
  # of this software and associated documentation files (the "Software"), to deal
@@ -1,4 +1,4 @@
1
- # Copyright (c) 2010-2017 Jacob Hammack.
1
+ # Copyright (c) 2010-2020 Jacob Hammack.
2
2
  #
3
3
  # Permission is hereby granted, free of charge, to any person obtaining a copy
4
4
  # of this software and associated documentation files (the "Software"), to deal
@@ -375,7 +375,8 @@ module Risu
375
375
  :cm_compliance_output => @vals["cm:compliance-output"],
376
376
  :cm_compliance_reference => @vals["cm:compliance-reference"],
377
377
  :cm_compliance_see_also => @vals["cm:compliance-see-also" ],
378
- :cm_compliance_solution => @vals["cm:compliance-solution"]
378
+ :cm_compliance_solution => @vals["cm:compliance-solution"],
379
+ :rollup_finding => false
379
380
  )
380
381
 
381
382
  @plugin.update(:solution => @vals["solution"],
@@ -1,4 +1,4 @@
1
- # Copyright (c) 2010-2017 Jacob Hammack.
1
+ # Copyright (c) 2010-2020 Jacob Hammack.
2
2
  #
3
3
  # Permission is hereby granted, free of charge, to any person obtaining a copy
4
4
  # of this software and associated documentation files (the "Software"), to deal
@@ -1,4 +1,4 @@
1
- # Copyright (c) 2010-2017 Jacob Hammack.
1
+ # Copyright (c) 2010-2020 Jacob Hammack.
2
2
  #
3
3
  # Permission is hereby granted, free of charge, to any person obtaining a copy
4
4
  # of this software and associated documentation files (the "Software"), to deal
@@ -31,11 +31,13 @@ module Risu
31
31
  {
32
32
  :description => "7-Zip Patch Rollup",
33
33
  :plugin_id => -99954,
34
- :plugin_name => "Update to the latest 7-Zip",
34
+ :plugin_name => "Missing the latest 7-Zip Patches",
35
35
  :item_name => "Update to the latest 7-Zip",
36
36
  :plugin_ids => [
37
- 91230,
38
-
37
+ 91230, #7-Zip < 16.00 Multiple Vulnerabilities
38
+ 109730, #7-Zip < 18.05 Memory Corruption Arbitrary Code Execution
39
+ 109799, #7-Zip < 16.03 NULL Pointer Dereference DoS
40
+ 109800, #7-Zip < 18.00 Multiple Vulnerabilities
39
41
  ]
40
42
  }
41
43
  end
@@ -1,4 +1,4 @@
1
- # Copyright (c) 2010-2017 Jacob Hammack.
1
+ # Copyright (c) 2010-2020 Jacob Hammack.
2
2
  #
3
3
  # Permission is hereby granted, free of charge, to any person obtaining a copy
4
4
  # of this software and associated documentation files (the "Software"), to deal
@@ -31,61 +31,55 @@ module Risu
31
31
  {
32
32
  :description => "Adobe Acrobat Patch Rollup",
33
33
  :plugin_id => -99975,
34
- :plugin_name => "Update to the latest Adobe Acrobat",
34
+ :plugin_name => "Missing the latest Adobe Acrobat Patches",
35
35
  :item_name => "Update to the latest Adobe Acrobat",
36
36
  :plugin_ids => [
37
- 79855,
38
- 83470,
39
- 40803,
40
- 40804,
41
- 40805,
42
- 40806,
43
- 42119,
44
- 43875,
45
- 44643,
46
- 45504,
47
- 47164,
48
- 48374,
49
- 49172,
50
- 50613,
51
- 51924,
52
- 52671,
53
- 53450,
54
- 55143,
55
- 56197,
56
- 57042,
57
- 77813,
58
- 57483,
59
- 58682,
60
- 61561,
61
- 64785,
62
- 63453,
63
- 66409,
64
- 74011,
65
- 84801,
66
- 84800,
67
- 77176,
68
- 77711,
69
- 69845,
70
- 71946,
71
- 86402,
72
- 91096,
73
- 87917,
74
- 89830,
75
- 92034,
76
- 40802,
77
- 40801,
78
- 40800,
79
- 48323,
80
- 49260,
81
- 51062,
82
- 96452,
83
- 99373,
84
- 94071,
85
-
86
-
87
-
88
-
37
+ 79855, #Adobe Acrobat < 10.1.13 / 11.0.10 Multiple Vulnerabilities (APSB14-28)
38
+ 83470, #Adobe Acrobat < 10.1.14 / 11.0.11 Multiple Vulnerabilities (APSB15-10)
39
+ 40803, #Adobe Acrobat < 9.1 / 8.1.4 / 7.1.1 Multiple Vulnerabilities
40
+ 40804, #Adobe Acrobat < 9.1.1 / 8.1.5 / 7.1.2 getAnnots() JavaScript Method PDF Handling Memory Corruption (APSB09-06)
41
+ 40805, #Adobe Acrobat < 9.1.2 / 8.1.6 / 7.1.3 Multiple Vulnerabilities
42
+ 40806, #Adobe Acrobat < 9.1.3 Flash Handling Unspecified Arbitrary Code Execution
43
+ 42119, #Adobe Acrobat < 9.2 / 8.1.7 / 7.1.4 Multiple Vulnerabilities (APSB09-15)
44
+ 43875, #Adobe Acrobat < 9.3 / 8.2 Multiple Vulnerabilities (APSB10-02)
45
+ 44643, #Adobe Acrobat < 9.3.1 / 8.2.1 Multiple Vulnerabilities (APSB10-07)
46
+ 45504, #Adobe Acrobat < 9.3.2 / 8.2.2 Multiple Vulnerabilities (APSB10-09)
47
+ 47164, #Adobe Acrobat < 9.3.3 / 8.2.3 Multiple Vulnerabilities (APSB10-15)
48
+ 48374, #Adobe Acrobat < 9.3.4 / 8.2.4 Multiple Vulnerabilities (APSB10-17)
49
+ 49172, #Adobe Acrobat < 9.4 / 8.2.5 Multiple Vulnerabilities (APSB10-21)
50
+ 50613, #Adobe Acrobat 9.x < 9.4.1 Multiple Vulnerabilities (APSB10-28)
51
+ 51924, #Adobe Acrobat < 10.0.1 / 9.4.2 / 8.2.5 Multiple Vulnerabilities (APSB11-03)
52
+ 52671, #Adobe Acrobat 9.x / 10.x Unspecified Memory Corruption (APSB11-06)
53
+ 53450, #Adobe Acrobat 9.x / 10.x Multiple Vulnerabilities (APSB11-08)
54
+ 55143, #Adobe Acrobat < 10.1 / 9.4.5 / 8.3 Multiple Vulnerabilities (APSB11-16)
55
+ 56197, #Adobe Acrobat < 10.1.1 / 9.4.6 / 8.3.1 Multiple Vulnerabilities (APSB11-21, APSB11-24)
56
+ 57042, #Adobe Acrobat < 9.4.7 Multiple Memory Corruption Vulnerabilities (APSB11-30)
57
+ 77813, #Adobe Acrobat Help Page XSS
58
+ 57483, #Adobe Acrobat < 10.1.2 / 9.5 Multiple Vulnerabilities (APSB12-01)
59
+ 58682, #Adobe Acrobat < 10.1.3 / 9.5.1 Multiple Vulnerabilities (APSB12-08)
60
+ 61561, #Adobe Acrobat < 10.1.4 / 9.5.2 Multiple Vulnerabilities (APSB12-16)
61
+ 64785, #Adobe Acrobat < 11.0.2 / 10.1.6 / 9.5.4 Multiple Vulnerabilities (APSB13-07)
62
+ 63453, #Adobe Acrobat < 11.0.1 / 10.1.5 / 9.5.3 Multiple Vulnerabilities (APSB13-02)
63
+ 66409, #Adobe Acrobat < 11.0.3 / 10.1.7 / 9.5.5 Multiple Vulnerabilities (APSB13-15)
64
+ 74011, #Adobe Acrobat < 10.1.10 / 11.0.07 Multiple Vulnerabilities (APSB14-15)
65
+ 84801, #Adobe Reader < 10.1.15 / 11.0.12 / 2015.006.30060 / 2015.008.20082 Multiple Vulnerabilities (APSB15-15)
66
+ 84800, #Adobe Acrobat < 10.1.15 / 11.0.12 / 2015.006.30060 / 2015.008.20082 Multiple Vulnerabilities (APSB15-15)
67
+ 77176, #Adobe Acrobat < 10.1.11 / 11.0.08 Sandbox Bypass (APSB14-19)
68
+ 77711, #Adobe Acrobat < 10.1.12 / 11.0.09 Multiple Vulnerabilities (APSB14-20)
69
+ 69845, #Adobe Acrobat < 11.0.4 / 10.1.8 Multiple Vulnerabilities (APSB13-22)
70
+ 71946, #Adobe Acrobat < 10.1.9 / 11.0.6 Multiple Vulnerabilities (APSB14-01)
71
+ 86402, #Adobe Acrobat <= 10.1.15 / 11.0.12 / 2015.006.30060 / 2015.008.20082 Multiple Vulnerabilities (APSB15-24)
72
+ 91096, #Adobe Acrobat < 11.0.16 / 15.006.30172 / 15.016.20039 Multiple Vulnerabilities (APSB16-14)
73
+ 87917, #Adobe Acrobat < 11.0.14 / 15.006.30119 / 15.010.20056 Multiple Vulnerabilities (APSB16-02)
74
+ 89830, #Adobe Acrobat < 11.0.15 / 15.006.30121 / 15.010.20060 Multiple Vulnerabilities (APSB16-09)
75
+ 92034, #Adobe Acrobat < 11.0.17 / 15.006.30198 / 15.017.20050 Multiple Vulnerabilities (APSB16-26)
76
+ 40802, #Adobe Acrobat < 8.1.3 Multiple Vulnerabilities
77
+ 40801, #Adobe Acrobat < 7.1.0 / 8.1.2 Unspecified JavaScript Method Handling Arbitrary Code Execution
78
+ 40800, #Adobe Acrobat < 8.1.2 / 7.1.0 Multiple Vulnerabilities
79
+ 96452, #Adobe Acrobat < 11.0.19 / 15.006.30279 / 15.023.20053 Multiple Vulnerabilities (APSB17-01)
80
+ 99373, #Adobe Acrobat < 11.0.20 / 2015.006.30306 / 2017.009.20044 Multiple Vulnerabilities (APSB17-11)
81
+ 94071, #Adobe Acrobat < 11.0.18 / 15.006.30243 / 15.020.20039 Multiple Vulnerabilities (APSB16-33)
82
+ 102427, #Adobe Acrobat < 11.0.21 / 2015.006.30355 / 2017.011.30066 / 2017.012.20098 Multiple Vulnerabilities (APSB17-24)
89
83
  ]
90
84
  }
91
85
  end
@@ -1,4 +1,4 @@
1
- # Copyright (c) 2010-2017 Jacob Hammack.
1
+ # Copyright (c) 2010-2020 Jacob Hammack.
2
2
  #
3
3
  # Permission is hereby granted, free of charge, to any person obtaining a copy
4
4
  # of this software and associated documentation files (the "Software"), to deal
@@ -31,71 +31,66 @@ module Risu
31
31
  {
32
32
  :description => "Adobe Air Patch Rollup",
33
33
  :plugin_id => -99994,
34
- :plugin_name => "Update to the latest Adobe Air",
34
+ :plugin_name => "Missing the latest Adobe Air Patches",
35
35
  :item_name => "Update to the latest Adobe Air",
36
36
  :plugin_ids => [
37
- 52755,
38
- 53474,
39
- 55805,
40
- 55806,
41
- 66444,
42
- 66871,
43
- 69865,
44
- 70214,
45
- 70857,
46
- 71350,
47
- 71947,
48
- 71950,
49
- 73432,
50
- 73993,
51
- 74430,
52
- 73432,
53
- 73993,
54
- 74430,
55
- 58537,
56
- 59425,
57
- 61624,
58
- 62835,
59
- 62479,
60
- 63449,
61
- 64583,
62
- 65218,
63
- 65909,
64
- 66444,
65
- 66871,
66
- 63241,
67
- 77171,
68
- 77576,
69
- 78440,
70
- 79139,
71
- 80483,
72
- 34815,
73
- 40447,
74
- 43069,
75
- 46858,
76
- 48299,
77
- 50604,
78
- 44595,
79
- 84155,
80
- 84156,
81
- 84157,
82
- 84158,
83
- 84641,
84
- 85325,
85
- 86059,
86
- 86368,
87
- 86850,
88
- 87243,
89
- 87656,
90
- 88638,
91
- 89868,
92
- 91162,
93
- 93523,
94
-
95
-
96
-
37
+ 56959, #Adobe AIR <= 3.0 Multiple Vulnerabilities (APSB11-28)
38
+ 52755, #Adobe AIR < 2.6 Unspecified Memory Corruption (APSB11-05)
39
+ 53474, #Adobe AIR < 2.6.0.19140 ActionScript Predefined Class Prototype Addition Remote Code Execution (APSB11-07)
40
+ 55805, #Adobe AIR < 2.7.1 Multiple Vulnerabilities (APSB11-21)
41
+ 66444, #Adobe AIR <= 3.7.0.1530 Multiple Vulnerabilities (APSB13-14)
42
+ 66871, #Adobe AIR <= 3.7.0.1860 Memory Corruption (APSB13-16)
43
+ 69865, #Adobe AIR <= 3.8.0.870 Memory Corruptions (APSB13-21)
44
+ 70214, #Adobe AIR <= 3.7.0.2090 Multiple Vulnerabilities (APSB13-17)
45
+ 70857, #Adobe AIR <= 3.9.0.1030 Memory Corruptions (APSB13-26)
46
+ 71350, #Adobe AIR <= AIR 3.9.0.1210 Multiple Vulnerabilities (APSB13-28)
47
+ 71950, #Adobe AIR <= AIR 3.9.0.1380 Multiple Vulnerabilities (APSB14-02)
48
+ 73432, #Adobe AIR <= AIR 4.0.0.1628 Multiple Vulnerabilities (APSB14-09)
49
+ 73993, #Adobe AIR <= AIR 13.0.0.83 Multiple Vulnerabilities (APSB14-14)
50
+ 74430, #Adobe AIR <= AIR 13.0.0.111 Multiple Vulnerabilities (APSB14-16)
51
+ 73432, #Adobe AIR <= AIR 4.0.0.1628 Multiple Vulnerabilities (APSB14-09)
52
+ 73993, #Adobe AIR <= AIR 13.0.0.83 Multiple Vulnerabilities (APSB14-14)
53
+ 74430, #Adobe AIR <= AIR 13.0.0.111 Multiple Vulnerabilities (APSB14-16)
54
+ 58537, #Adobe AIR 3.x <= 3.1.0.4880 Multiple Memory Corruption Vulnerabilities (APSB12-07)
55
+ 59425, #Adobe AIR 3.x <= 3.2.0.2070 Multiple Vulnerabilities (APSB12-14)
56
+ 61624, #Adobe AIR 3.x <= 3.3.0.3670 Multiple Vulnerabilities (APSB12-19)
57
+ 62835, #Adobe AIR 3.x <= 3.4.0.2710 Multiple Vulnerabilities (APSB12-24)
58
+ 62479, #Adobe AIR 3.x <= 3.4.0.2540 Multiple Vulnerabilities (APSB12-22)
59
+ 63449, #Adobe AIR 3.x <= 3.5.0.880 Buffer Overflow (APSB13-01)
60
+ 64583, #Adobe AIR 3.x <= 3.5.0.1060 Buffer Overflow (APSB13-05)
61
+ 65218, #Adobe AIR 3.x <= 3.6.0.597 Buffer Overflow (APSB13-09)
62
+ 65909, #Adobe AIR 3.x <= 3.6.0.6090 Multiple Vulnerabilities (APSB13-11)
63
+ 66444, #Adobe AIR <= 3.7.0.1530 Multiple Vulnerabilities (APSB13-14)
64
+ 66871, #Adobe AIR <= 3.7.0.1860 Memory Corruption (APSB13-16)
65
+ 63241, #Adobe AIR 3.x <= 3.5.0.600 Multiple Vulnerabilities (APSB12-27)
66
+ 77171, #Adobe AIR <= AIR 14.0.0.110 Multiple Vulnerabilities (APSB14-18)
67
+ 77576, #Adobe AIR <= AIR 14.0.0.178 Multiple Vulnerabilities (APSB14-21)
68
+ 78440, #Adobe AIR <= AIR 15.0.0.249 Multiple Vulnerabilities (APSB14-22)
69
+ 79139, #Adobe AIR <= 15.0.0.293 Multiple Vulnerabilities (APSB14-24)
70
+ 80483, #Adobe AIR <= 15.0.0.356 Multiple Vulnerabilities (APSB15-01)
71
+ 34815, #Adobe AIR < 1.5 Multiple Vulnerabilities (APSB08-23)
72
+ 40447, #Adobe AIR < 1.5.2 Multiple Vulnerabilities (APSB09-10)
73
+ 43069, #Adobe AIR < 1.5.3 Multiple Vulnerabilities (APSB09-19)
74
+ 46858, #Adobe AIR < 2.0.2.12610 Multiple Vulnerabilities (ASPB10-14)
75
+ 48299, #Adobe AIR < 2.0.3 Multiple Vulnerabilities (APSB10-16)
76
+ 50604, #Adobe AIR < 2.5.1 Multiple Vulnerabilities (APSB10-26)
77
+ 44595, #Adobe AIR < 1.5.3.9130 Multiple Vulnerabilities (APSB10-06)
78
+ 84155, #Adobe AIR <= 17.0.0.124 Multiple Vulnerabilities (APSB15-05)
79
+ 84156, #Adobe AIR <= 17.0.0.144 Multiple Vulnerabilities (APSB15-06)
80
+ 84157, #Adobe AIR <= 17.0.0.144 Multiple Vulnerabilities (APSB15-09)
81
+ 84158, #Adobe AIR <= 17.0.0.172 Multiple Vulnerabilities (APSB15-11)
82
+ 84641, #Adobe AIR <= 18.0.0.144 Multiple Vulnerabilities (APSB15-16)
83
+ 85325, #Adobe AIR <= 18.0.0.180 Multiple Vulnerabilities (APSB15-19)
84
+ 86059, #Adobe AIR <= 18.0.0.199 Multiple Vulnerabilities (APSB15-23)
85
+ 86368, #Adobe AIR <= 19.0.0.190 Multiple Vulnerabilities (APSB15-25)
86
+ 86850, #Adobe AIR <= 19.0.0.213 Multiple Vulnerabilities (APSB15-28)
87
+ 87243, #Adobe AIR <= 19.0.0.241 Multiple Vulnerabilities (APSB15-32)
88
+ 87656, #Adobe AIR <= 20.0.0.204 Multiple Vulnerabilities (APSB16-01)
89
+ 88638, #Adobe AIR <= 20.0.0.233 Multiple Vulnerabilities (APSB16-04)
90
+ 89868, #Adobe AIR <= 20.0.0.260 Multiple Vulnerabilities (APSB16-08)
91
+ 91162, #Adobe AIR <= 21.0.0.198 Multiple Vulnerabilities (APSB16-15)
92
+ 93523, #Adobe AIR <= 22.0.0.153 Android Applications Runtime Analytics MitM (APSB16-31)
97
93
  ]
98
-
99
94
  }
100
95
 
101
96
  end
@@ -0,0 +1,47 @@
1
+ # Copyright (c) 2010-2020 Jacob Hammack.
2
+ #
3
+ # Permission is hereby granted, free of charge, to any person obtaining a copy
4
+ # of this software and associated documentation files (the "Software"), to deal
5
+ # in the Software without restriction, including without limitation the rights
6
+ # to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
7
+ # copies of the Software, and to permit persons to whom the Software is
8
+ # furnished to do so, subject to the following conditions:
9
+ #
10
+ # The above copyright notice and this permission notice shall be included in
11
+ # all copies or substantial portions of the Software.
12
+ #
13
+ # THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
14
+ # IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
15
+ # FITNESS FOR A PARTICULAR PURPOSE AND NON INFRINGEMENT. IN NO EVENT SHALL THE
16
+ # AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
17
+ # LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
18
+ # OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
19
+ # THE SOFTWARE.
20
+
21
+
22
+ module Risu
23
+ module Parsers
24
+ module Nessus
25
+ module PostProcess
26
+ class AdobeColdfusionPatchRollup < Risu::Base::PostProcessBase
27
+
28
+ #
29
+ def initialize
30
+ @info =
31
+ {
32
+ :description => "Adobe Coldfusion Patch Rollup",
33
+ :plugin_id => -99950,
34
+ :plugin_name => "Missing the latest Adobe Coldfusion Patches",
35
+ :item_name => "Update to the latest Adobe Coldfusion",
36
+ :plugin_ids => [
37
+ 64689, #Adobe ColdFusion Authentication Bypass (APSB13-03)
38
+ 72091, #Adobe ColdFusion Unsupported Version Detection
39
+ 99731, #Adobe ColdFusion BlazeDS Java Object Deserialization RCE
40
+ ]
41
+ }
42
+ end
43
+ end
44
+ end
45
+ end
46
+ end
47
+ end