risu 1.8.3 → 1.8.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (161) hide show
  1. checksums.yaml +5 -5
  2. checksums.yaml.gz.sig +0 -0
  3. data.tar.gz.sig +0 -0
  4. data/Gemfile.lock +159 -0
  5. data/LICENSE +1 -1
  6. data/README.markdown +2 -5
  7. data/Rakefile +1 -1
  8. data/bin/risu +1 -1
  9. data/docs/NEWS.markdown +3 -0
  10. data/lib/risu.rb +2 -2
  11. data/lib/risu/base.rb +1 -1
  12. data/lib/risu/base/graph_template_helper.rb +1 -1
  13. data/lib/risu/base/host_template_helper.rb +2 -1
  14. data/lib/risu/base/malware_template_helper.rb +1 -1
  15. data/lib/risu/base/post_process_base.rb +7 -4
  16. data/lib/risu/base/post_process_manager.rb +1 -1
  17. data/lib/risu/base/scan_helper.rb +1 -1
  18. data/lib/risu/base/schema.rb +10 -3
  19. data/lib/risu/base/shares_template_helper.rb +1 -1
  20. data/lib/risu/base/template_base.rb +1 -1
  21. data/lib/risu/base/template_helper.rb +1 -1
  22. data/lib/risu/base/template_manager.rb +1 -1
  23. data/lib/risu/base/templater.rb +1 -1
  24. data/lib/risu/cli.rb +1 -1
  25. data/lib/risu/cli/application.rb +16 -16
  26. data/lib/risu/cli/banner.rb +1 -1
  27. data/lib/risu/exceptions.rb +1 -1
  28. data/lib/risu/exceptions/invaliddocument.rb +1 -1
  29. data/lib/risu/graphs.rb +1 -1
  30. data/lib/risu/graphs/top_vuln_graph.rb +1 -1
  31. data/lib/risu/graphs/windows_os_graph.rb +1 -1
  32. data/lib/risu/models.rb +2 -1
  33. data/lib/risu/models/attachment.rb +1 -1
  34. data/lib/risu/models/familyselection.rb +1 -1
  35. data/lib/risu/models/host.rb +34 -2
  36. data/lib/risu/models/hostproperty.rb +1 -1
  37. data/lib/risu/models/individualpluginselection.rb +1 -1
  38. data/lib/risu/models/item.rb +248 -20
  39. data/lib/risu/models/nessuspluginmetadata.rb +28 -0
  40. data/lib/risu/models/patch.rb +1 -1
  41. data/lib/risu/models/plugin.rb +1 -1
  42. data/lib/risu/models/pluginspreference.rb +1 -1
  43. data/lib/risu/models/policy.rb +1 -1
  44. data/lib/risu/models/reference.rb +1 -1
  45. data/lib/risu/models/report.rb +1 -1
  46. data/lib/risu/models/serverpreference.rb +1 -1
  47. data/lib/risu/models/servicedescription.rb +1 -1
  48. data/lib/risu/models/version.rb +1 -1
  49. data/lib/risu/parsers.rb +1 -1
  50. data/lib/risu/parsers/nessus/nessus_document.rb +1 -1
  51. data/lib/risu/parsers/nessus/nessus_sax_listener.rb +3 -2
  52. data/lib/risu/parsers/nessus/postprocess.rb +1 -1
  53. data/lib/risu/parsers/nessus/postprocess/7zip.rb +6 -4
  54. data/lib/risu/parsers/nessus/postprocess/adobe_acrobat.rb +48 -54
  55. data/lib/risu/parsers/nessus/postprocess/adobe_air.rb +58 -63
  56. data/lib/risu/parsers/nessus/postprocess/adobe_coldfusion.rb +47 -0
  57. data/lib/risu/parsers/nessus/postprocess/{shockwave.rb → adobe_creative_desktop.rb} +9 -34
  58. data/lib/risu/parsers/nessus/postprocess/adobe_flash_player.rb +175 -0
  59. data/lib/risu/parsers/nessus/postprocess/adobe_reader.rb +73 -55
  60. data/lib/risu/parsers/nessus/postprocess/adobe_shockwave_player.rb +74 -0
  61. data/lib/risu/parsers/nessus/postprocess/apache.rb +38 -33
  62. data/lib/risu/parsers/nessus/postprocess/apache_tomcat.rb +8 -10
  63. data/lib/risu/parsers/nessus/postprocess/apple_icloud.rb +47 -0
  64. data/lib/risu/parsers/nessus/postprocess/apple_itunes.rb +23 -17
  65. data/lib/risu/parsers/nessus/postprocess/apple_quicktime.rb +38 -32
  66. data/lib/risu/parsers/nessus/postprocess/artifex_ghostscript.rb +49 -0
  67. data/lib/risu/parsers/nessus/postprocess/blackberry_enterprise_server.rb +10 -14
  68. data/lib/risu/parsers/nessus/postprocess/ca_brightstor_arcserve.rb +10 -10
  69. data/lib/risu/parsers/nessus/postprocess/cisco_anyconnect.rb +18 -20
  70. data/lib/risu/parsers/nessus/postprocess/cisco_ios.rb +25 -15
  71. data/lib/risu/parsers/nessus/postprocess/cisco_telepresence.rb +45 -0
  72. data/lib/risu/parsers/nessus/postprocess/core_ftp.rb +6 -6
  73. data/lib/risu/parsers/nessus/postprocess/db2.rb +7 -9
  74. data/lib/risu/parsers/nessus/postprocess/dell_idrac.rb +49 -0
  75. data/lib/risu/parsers/nessus/postprocess/downgrade_plugins.rb +4 -2
  76. data/lib/risu/parsers/nessus/postprocess/dropbear_ssh.rb +7 -6
  77. data/lib/risu/parsers/nessus/postprocess/filezilla.rb +4 -6
  78. data/lib/risu/parsers/nessus/postprocess/firefox.rb +113 -71
  79. data/lib/risu/parsers/nessus/postprocess/flexnet.rb +3 -3
  80. data/lib/risu/parsers/nessus/postprocess/foxit_phantom_pdf.rb +10 -3
  81. data/lib/risu/parsers/nessus/postprocess/foxit_reader.rb +13 -12
  82. data/lib/risu/parsers/nessus/postprocess/google_chrome.rb +34 -6
  83. data/lib/risu/parsers/nessus/postprocess/hp_system_mgt_homepage.rb +3 -3
  84. data/lib/risu/parsers/nessus/postprocess/iLo.rb +50 -0
  85. data/lib/risu/parsers/nessus/postprocess/intel_mgt_engine.rb +47 -0
  86. data/lib/risu/parsers/nessus/postprocess/irfanview.rb +2 -2
  87. data/lib/risu/parsers/nessus/postprocess/java.rb +70 -64
  88. data/lib/risu/parsers/nessus/postprocess/libreoffice.rb +2 -2
  89. data/lib/risu/parsers/nessus/postprocess/microsoft_office.rb +73 -0
  90. data/lib/risu/parsers/nessus/postprocess/microsoft_visual_studio.rb +47 -0
  91. data/lib/risu/parsers/nessus/postprocess/microsoft_windows.rb +1312 -0
  92. data/lib/risu/parsers/nessus/postprocess/mongo_db.rb +46 -0
  93. data/lib/risu/parsers/nessus/postprocess/mozzila_thunderbird.rb +49 -0
  94. data/lib/risu/parsers/nessus/postprocess/normalize_plugin_names.rb +5 -2
  95. data/lib/risu/parsers/nessus/postprocess/openoffice.rb +14 -11
  96. data/lib/risu/parsers/nessus/postprocess/openssh.rb +3 -3
  97. data/lib/risu/parsers/nessus/postprocess/openssl.rb +58 -39
  98. data/lib/risu/parsers/nessus/postprocess/oracle_database.rb +3 -3
  99. data/lib/risu/parsers/nessus/postprocess/php.rb +94 -69
  100. data/lib/risu/parsers/nessus/postprocess/post_process.rb +1 -1
  101. data/lib/risu/parsers/nessus/postprocess/putty.rb +47 -0
  102. data/lib/risu/parsers/nessus/postprocess/real_player.rb +3 -3
  103. data/lib/risu/parsers/nessus/postprocess/risk_score.rb +1 -1
  104. data/lib/risu/parsers/nessus/postprocess/root_cause.rb +16 -3
  105. data/lib/risu/parsers/nessus/postprocess/samba.rb +46 -0
  106. data/lib/risu/parsers/nessus/postprocess/servu.rb +4 -4
  107. data/lib/risu/parsers/nessus/postprocess/sigplus_pro.rb +3 -3
  108. data/lib/risu/parsers/nessus/postprocess/skype.rb +4 -3
  109. data/lib/risu/parsers/nessus/postprocess/solarwinds_dameware.rb +48 -0
  110. data/lib/risu/parsers/nessus/postprocess/symantec_endpoint.rb +4 -3
  111. data/lib/risu/parsers/nessus/postprocess/symantec_pcanywhere.rb +3 -3
  112. data/lib/risu/parsers/nessus/postprocess/tenable_nessus.rb +47 -0
  113. data/lib/risu/parsers/nessus/postprocess/timbuktu.rb +2 -2
  114. data/lib/risu/parsers/nessus/postprocess/vlc.rb +4 -3
  115. data/lib/risu/parsers/nessus/postprocess/vmware_esxi.rb +64 -54
  116. data/lib/risu/parsers/nessus/postprocess/vmware_player.rb +3 -3
  117. data/lib/risu/parsers/nessus/postprocess/vmware_vcenter.rb +11 -5
  118. data/lib/risu/parsers/nessus/postprocess/vmware_vsphere_client.rb +7 -6
  119. data/lib/risu/parsers/nessus/postprocess/winscp.rb +7 -8
  120. data/lib/risu/parsers/nessus/postprocess/wireshark.rb +73 -51
  121. data/lib/risu/parsers/nexpose/nexpose_document.rb +1 -1
  122. data/lib/risu/parsers/nexpose/simple_nexpose.rb +1 -1
  123. data/lib/risu/renderers.rb +1 -1
  124. data/lib/risu/renderers/csvrenderer.rb +1 -1
  125. data/lib/risu/renderers/nilrenderer.rb +1 -1
  126. data/lib/risu/renderers/pdfrenderer.rb +1 -1
  127. data/lib/risu/template_helpers.rb +1 -1
  128. data/lib/risu/templates/assets.rb +1 -1
  129. data/lib/risu/templates/authentication_summary.rb +1 -1
  130. data/lib/risu/templates/cover_sheet.rb +1 -1
  131. data/lib/risu/templates/exec_summary.rb +1 -1
  132. data/lib/risu/templates/executive_summary_detailed.rb +1 -1
  133. data/lib/risu/templates/exploitablity_summary.rb +1 -1
  134. data/lib/risu/templates/failed_audits.rb +1 -1
  135. data/lib/risu/templates/finding_statistics.rb +1 -1
  136. data/lib/risu/templates/findings_host.rb +1 -1
  137. data/lib/risu/templates/findings_summary.rb +1 -1
  138. data/lib/risu/templates/findings_summary_with_pluginid.rb +1 -1
  139. data/lib/risu/templates/graphs.rb +1 -1
  140. data/lib/risu/templates/host_findings_csv.rb +1 -1
  141. data/lib/risu/templates/host_summary.rb +1 -1
  142. data/lib/risu/templates/malicious_process_detection.rb +1 -1
  143. data/lib/risu/templates/missing_root_causes.rb +1 -1
  144. data/lib/risu/templates/ms_patch_summary.rb +1 -1
  145. data/lib/risu/templates/ms_update_summary.rb +1 -1
  146. data/lib/risu/templates/ms_wsus_findings.rb +1 -1
  147. data/lib/risu/templates/notable.rb +1 -1
  148. data/lib/risu/templates/notable_detailed.rb +1 -1
  149. data/lib/risu/templates/pci_compliance.rb +1 -1
  150. data/lib/risu/templates/rollup_summary.rb +82 -0
  151. data/lib/risu/templates/stig_findings_summary.rb +1 -1
  152. data/lib/risu/templates/talking_points.rb +1 -1
  153. data/lib/risu/templates/technical_findings.rb +1 -1
  154. data/lib/risu/templates/template.rb +1 -1
  155. data/lib/risu/templates/top_25.rb +1 -1
  156. data/lib/risu/version.rb +2 -2
  157. data/risu.gemspec +5 -5
  158. metadata +59 -56
  159. metadata.gz.sig +0 -0
  160. data/lib/risu/parsers/nessus/postprocess/flash_player.rb +0 -145
  161. data/lib/risu/parsers/nessus/postprocess/windows.rb +0 -976
@@ -0,0 +1,28 @@
1
+ # Copyright (c) 2010-2020 Jacob Hammack.
2
+ #
3
+ # Permission is hereby granted, free of charge, to any person obtaining a copy
4
+ # of this software and associated documentation files (the "Software"), to deal
5
+ # in the Software without restriction, including without limitation the rights
6
+ # to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
7
+ # copies of the Software, and to permit persons to whom the Software is
8
+ # furnished to do so, subject to the following conditions:
9
+ #
10
+ # The above copyright notice and this permission notice shall be included in
11
+ # all copies or substantial portions of the Software.
12
+ #
13
+ # THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
14
+ # IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
15
+ # FITNESS FOR A PARTICULAR PURPOSE AND NON INFRINGEMENT. IN NO EVENT SHALL THE
16
+ # AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
17
+ # LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
18
+ # OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
19
+ # THE SOFTWARE.
20
+
21
+
22
+ module Risu
23
+ module Models
24
+
25
+ class NessusPluginMetadata < ActiveRecord::Base
26
+ end
27
+ end
28
+ end
@@ -1,4 +1,4 @@
1
- # Copyright (c) 2010-2017 Jacob Hammack.
1
+ # Copyright (c) 2010-2020 Jacob Hammack.
2
2
  #
3
3
  # Permission is hereby granted, free of charge, to any person obtaining a copy
4
4
  # of this software and associated documentation files (the "Software"), to deal
@@ -1,4 +1,4 @@
1
- # Copyright (c) 2010-2017 Jacob Hammack.
1
+ # Copyright (c) 2010-2020 Jacob Hammack.
2
2
  #
3
3
  # Permission is hereby granted, free of charge, to any person obtaining a copy
4
4
  # of this software and associated documentation files (the "Software"), to deal
@@ -1,4 +1,4 @@
1
- # Copyright (c) 2010-2017 Jacob Hammack.
1
+ # Copyright (c) 2010-2020 Jacob Hammack.
2
2
  #
3
3
  # Permission is hereby granted, free of charge, to any person obtaining a copy
4
4
  # of this software and associated documentation files (the "Software"), to deal
@@ -1,4 +1,4 @@
1
- # Copyright (c) 2010-2017 Jacob Hammack.
1
+ # Copyright (c) 2010-2020 Jacob Hammack.
2
2
  #
3
3
  # Permission is hereby granted, free of charge, to any person obtaining a copy
4
4
  # of this software and associated documentation files (the "Software"), to deal
@@ -1,4 +1,4 @@
1
- # Copyright (c) 2010-2017 Jacob Hammack.
1
+ # Copyright (c) 2010-2020 Jacob Hammack.
2
2
  #
3
3
  # Permission is hereby granted, free of charge, to any person obtaining a copy
4
4
  # of this software and associated documentation files (the "Software"), to deal
@@ -1,4 +1,4 @@
1
- # Copyright (c) 2010-2017 Jacob Hammack.
1
+ # Copyright (c) 2010-2020 Jacob Hammack.
2
2
  #
3
3
  # Permission is hereby granted, free of charge, to any person obtaining a copy
4
4
  # of this software and associated documentation files (the "Software"), to deal
@@ -1,4 +1,4 @@
1
- # Copyright (c) 2010-2017 Jacob Hammack.
1
+ # Copyright (c) 2010-2020 Jacob Hammack.
2
2
  #
3
3
  # Permission is hereby granted, free of charge, to any person obtaining a copy
4
4
  # of this software and associated documentation files (the "Software"), to deal
@@ -1,4 +1,4 @@
1
- # Copyright (c) 2010-2017 Jacob Hammack.
1
+ # Copyright (c) 2010-2020 Jacob Hammack.
2
2
  #
3
3
  # Permission is hereby granted, free of charge, to any person obtaining a copy
4
4
  # of this software and associated documentation files (the "Software"), to deal
@@ -1,4 +1,4 @@
1
- # Copyright (c) 2010-2017 Jacob Hammack.
1
+ # Copyright (c) 2010-2020 Jacob Hammack.
2
2
  #
3
3
  # Permission is hereby granted, free of charge, to any person obtaining a copy
4
4
  # of this software and associated documentation files (the "Software"), to deal
@@ -1,4 +1,4 @@
1
- # Copyright (c) 2010-2017 Jacob Hammack.
1
+ # Copyright (c) 2010-2020 Jacob Hammack.
2
2
  #
3
3
  # Permission is hereby granted, free of charge, to any person obtaining a copy
4
4
  # of this software and associated documentation files (the "Software"), to deal
@@ -1,4 +1,4 @@
1
- # Copyright (c) 2010-2017 Jacob Hammack.
1
+ # Copyright (c) 2010-2020 Jacob Hammack.
2
2
  #
3
3
  # Permission is hereby granted, free of charge, to any person obtaining a copy
4
4
  # of this software and associated documentation files (the "Software"), to deal
@@ -1,4 +1,4 @@
1
- # Copyright (c) 2010-2017 Jacob Hammack.
1
+ # Copyright (c) 2010-2020 Jacob Hammack.
2
2
  #
3
3
  # Permission is hereby granted, free of charge, to any person obtaining a copy
4
4
  # of this software and associated documentation files (the "Software"), to deal
@@ -375,7 +375,8 @@ module Risu
375
375
  :cm_compliance_output => @vals["cm:compliance-output"],
376
376
  :cm_compliance_reference => @vals["cm:compliance-reference"],
377
377
  :cm_compliance_see_also => @vals["cm:compliance-see-also" ],
378
- :cm_compliance_solution => @vals["cm:compliance-solution"]
378
+ :cm_compliance_solution => @vals["cm:compliance-solution"],
379
+ :rollup_finding => false
379
380
  )
380
381
 
381
382
  @plugin.update(:solution => @vals["solution"],
@@ -1,4 +1,4 @@
1
- # Copyright (c) 2010-2017 Jacob Hammack.
1
+ # Copyright (c) 2010-2020 Jacob Hammack.
2
2
  #
3
3
  # Permission is hereby granted, free of charge, to any person obtaining a copy
4
4
  # of this software and associated documentation files (the "Software"), to deal
@@ -1,4 +1,4 @@
1
- # Copyright (c) 2010-2017 Jacob Hammack.
1
+ # Copyright (c) 2010-2020 Jacob Hammack.
2
2
  #
3
3
  # Permission is hereby granted, free of charge, to any person obtaining a copy
4
4
  # of this software and associated documentation files (the "Software"), to deal
@@ -31,11 +31,13 @@ module Risu
31
31
  {
32
32
  :description => "7-Zip Patch Rollup",
33
33
  :plugin_id => -99954,
34
- :plugin_name => "Update to the latest 7-Zip",
34
+ :plugin_name => "Missing the latest 7-Zip Patches",
35
35
  :item_name => "Update to the latest 7-Zip",
36
36
  :plugin_ids => [
37
- 91230,
38
-
37
+ 91230, #7-Zip < 16.00 Multiple Vulnerabilities
38
+ 109730, #7-Zip < 18.05 Memory Corruption Arbitrary Code Execution
39
+ 109799, #7-Zip < 16.03 NULL Pointer Dereference DoS
40
+ 109800, #7-Zip < 18.00 Multiple Vulnerabilities
39
41
  ]
40
42
  }
41
43
  end
@@ -1,4 +1,4 @@
1
- # Copyright (c) 2010-2017 Jacob Hammack.
1
+ # Copyright (c) 2010-2020 Jacob Hammack.
2
2
  #
3
3
  # Permission is hereby granted, free of charge, to any person obtaining a copy
4
4
  # of this software and associated documentation files (the "Software"), to deal
@@ -31,61 +31,55 @@ module Risu
31
31
  {
32
32
  :description => "Adobe Acrobat Patch Rollup",
33
33
  :plugin_id => -99975,
34
- :plugin_name => "Update to the latest Adobe Acrobat",
34
+ :plugin_name => "Missing the latest Adobe Acrobat Patches",
35
35
  :item_name => "Update to the latest Adobe Acrobat",
36
36
  :plugin_ids => [
37
- 79855,
38
- 83470,
39
- 40803,
40
- 40804,
41
- 40805,
42
- 40806,
43
- 42119,
44
- 43875,
45
- 44643,
46
- 45504,
47
- 47164,
48
- 48374,
49
- 49172,
50
- 50613,
51
- 51924,
52
- 52671,
53
- 53450,
54
- 55143,
55
- 56197,
56
- 57042,
57
- 77813,
58
- 57483,
59
- 58682,
60
- 61561,
61
- 64785,
62
- 63453,
63
- 66409,
64
- 74011,
65
- 84801,
66
- 84800,
67
- 77176,
68
- 77711,
69
- 69845,
70
- 71946,
71
- 86402,
72
- 91096,
73
- 87917,
74
- 89830,
75
- 92034,
76
- 40802,
77
- 40801,
78
- 40800,
79
- 48323,
80
- 49260,
81
- 51062,
82
- 96452,
83
- 99373,
84
- 94071,
85
-
86
-
87
-
88
-
37
+ 79855, #Adobe Acrobat < 10.1.13 / 11.0.10 Multiple Vulnerabilities (APSB14-28)
38
+ 83470, #Adobe Acrobat < 10.1.14 / 11.0.11 Multiple Vulnerabilities (APSB15-10)
39
+ 40803, #Adobe Acrobat < 9.1 / 8.1.4 / 7.1.1 Multiple Vulnerabilities
40
+ 40804, #Adobe Acrobat < 9.1.1 / 8.1.5 / 7.1.2 getAnnots() JavaScript Method PDF Handling Memory Corruption (APSB09-06)
41
+ 40805, #Adobe Acrobat < 9.1.2 / 8.1.6 / 7.1.3 Multiple Vulnerabilities
42
+ 40806, #Adobe Acrobat < 9.1.3 Flash Handling Unspecified Arbitrary Code Execution
43
+ 42119, #Adobe Acrobat < 9.2 / 8.1.7 / 7.1.4 Multiple Vulnerabilities (APSB09-15)
44
+ 43875, #Adobe Acrobat < 9.3 / 8.2 Multiple Vulnerabilities (APSB10-02)
45
+ 44643, #Adobe Acrobat < 9.3.1 / 8.2.1 Multiple Vulnerabilities (APSB10-07)
46
+ 45504, #Adobe Acrobat < 9.3.2 / 8.2.2 Multiple Vulnerabilities (APSB10-09)
47
+ 47164, #Adobe Acrobat < 9.3.3 / 8.2.3 Multiple Vulnerabilities (APSB10-15)
48
+ 48374, #Adobe Acrobat < 9.3.4 / 8.2.4 Multiple Vulnerabilities (APSB10-17)
49
+ 49172, #Adobe Acrobat < 9.4 / 8.2.5 Multiple Vulnerabilities (APSB10-21)
50
+ 50613, #Adobe Acrobat 9.x < 9.4.1 Multiple Vulnerabilities (APSB10-28)
51
+ 51924, #Adobe Acrobat < 10.0.1 / 9.4.2 / 8.2.5 Multiple Vulnerabilities (APSB11-03)
52
+ 52671, #Adobe Acrobat 9.x / 10.x Unspecified Memory Corruption (APSB11-06)
53
+ 53450, #Adobe Acrobat 9.x / 10.x Multiple Vulnerabilities (APSB11-08)
54
+ 55143, #Adobe Acrobat < 10.1 / 9.4.5 / 8.3 Multiple Vulnerabilities (APSB11-16)
55
+ 56197, #Adobe Acrobat < 10.1.1 / 9.4.6 / 8.3.1 Multiple Vulnerabilities (APSB11-21, APSB11-24)
56
+ 57042, #Adobe Acrobat < 9.4.7 Multiple Memory Corruption Vulnerabilities (APSB11-30)
57
+ 77813, #Adobe Acrobat Help Page XSS
58
+ 57483, #Adobe Acrobat < 10.1.2 / 9.5 Multiple Vulnerabilities (APSB12-01)
59
+ 58682, #Adobe Acrobat < 10.1.3 / 9.5.1 Multiple Vulnerabilities (APSB12-08)
60
+ 61561, #Adobe Acrobat < 10.1.4 / 9.5.2 Multiple Vulnerabilities (APSB12-16)
61
+ 64785, #Adobe Acrobat < 11.0.2 / 10.1.6 / 9.5.4 Multiple Vulnerabilities (APSB13-07)
62
+ 63453, #Adobe Acrobat < 11.0.1 / 10.1.5 / 9.5.3 Multiple Vulnerabilities (APSB13-02)
63
+ 66409, #Adobe Acrobat < 11.0.3 / 10.1.7 / 9.5.5 Multiple Vulnerabilities (APSB13-15)
64
+ 74011, #Adobe Acrobat < 10.1.10 / 11.0.07 Multiple Vulnerabilities (APSB14-15)
65
+ 84801, #Adobe Reader < 10.1.15 / 11.0.12 / 2015.006.30060 / 2015.008.20082 Multiple Vulnerabilities (APSB15-15)
66
+ 84800, #Adobe Acrobat < 10.1.15 / 11.0.12 / 2015.006.30060 / 2015.008.20082 Multiple Vulnerabilities (APSB15-15)
67
+ 77176, #Adobe Acrobat < 10.1.11 / 11.0.08 Sandbox Bypass (APSB14-19)
68
+ 77711, #Adobe Acrobat < 10.1.12 / 11.0.09 Multiple Vulnerabilities (APSB14-20)
69
+ 69845, #Adobe Acrobat < 11.0.4 / 10.1.8 Multiple Vulnerabilities (APSB13-22)
70
+ 71946, #Adobe Acrobat < 10.1.9 / 11.0.6 Multiple Vulnerabilities (APSB14-01)
71
+ 86402, #Adobe Acrobat <= 10.1.15 / 11.0.12 / 2015.006.30060 / 2015.008.20082 Multiple Vulnerabilities (APSB15-24)
72
+ 91096, #Adobe Acrobat < 11.0.16 / 15.006.30172 / 15.016.20039 Multiple Vulnerabilities (APSB16-14)
73
+ 87917, #Adobe Acrobat < 11.0.14 / 15.006.30119 / 15.010.20056 Multiple Vulnerabilities (APSB16-02)
74
+ 89830, #Adobe Acrobat < 11.0.15 / 15.006.30121 / 15.010.20060 Multiple Vulnerabilities (APSB16-09)
75
+ 92034, #Adobe Acrobat < 11.0.17 / 15.006.30198 / 15.017.20050 Multiple Vulnerabilities (APSB16-26)
76
+ 40802, #Adobe Acrobat < 8.1.3 Multiple Vulnerabilities
77
+ 40801, #Adobe Acrobat < 7.1.0 / 8.1.2 Unspecified JavaScript Method Handling Arbitrary Code Execution
78
+ 40800, #Adobe Acrobat < 8.1.2 / 7.1.0 Multiple Vulnerabilities
79
+ 96452, #Adobe Acrobat < 11.0.19 / 15.006.30279 / 15.023.20053 Multiple Vulnerabilities (APSB17-01)
80
+ 99373, #Adobe Acrobat < 11.0.20 / 2015.006.30306 / 2017.009.20044 Multiple Vulnerabilities (APSB17-11)
81
+ 94071, #Adobe Acrobat < 11.0.18 / 15.006.30243 / 15.020.20039 Multiple Vulnerabilities (APSB16-33)
82
+ 102427, #Adobe Acrobat < 11.0.21 / 2015.006.30355 / 2017.011.30066 / 2017.012.20098 Multiple Vulnerabilities (APSB17-24)
89
83
  ]
90
84
  }
91
85
  end
@@ -1,4 +1,4 @@
1
- # Copyright (c) 2010-2017 Jacob Hammack.
1
+ # Copyright (c) 2010-2020 Jacob Hammack.
2
2
  #
3
3
  # Permission is hereby granted, free of charge, to any person obtaining a copy
4
4
  # of this software and associated documentation files (the "Software"), to deal
@@ -31,71 +31,66 @@ module Risu
31
31
  {
32
32
  :description => "Adobe Air Patch Rollup",
33
33
  :plugin_id => -99994,
34
- :plugin_name => "Update to the latest Adobe Air",
34
+ :plugin_name => "Missing the latest Adobe Air Patches",
35
35
  :item_name => "Update to the latest Adobe Air",
36
36
  :plugin_ids => [
37
- 52755,
38
- 53474,
39
- 55805,
40
- 55806,
41
- 66444,
42
- 66871,
43
- 69865,
44
- 70214,
45
- 70857,
46
- 71350,
47
- 71947,
48
- 71950,
49
- 73432,
50
- 73993,
51
- 74430,
52
- 73432,
53
- 73993,
54
- 74430,
55
- 58537,
56
- 59425,
57
- 61624,
58
- 62835,
59
- 62479,
60
- 63449,
61
- 64583,
62
- 65218,
63
- 65909,
64
- 66444,
65
- 66871,
66
- 63241,
67
- 77171,
68
- 77576,
69
- 78440,
70
- 79139,
71
- 80483,
72
- 34815,
73
- 40447,
74
- 43069,
75
- 46858,
76
- 48299,
77
- 50604,
78
- 44595,
79
- 84155,
80
- 84156,
81
- 84157,
82
- 84158,
83
- 84641,
84
- 85325,
85
- 86059,
86
- 86368,
87
- 86850,
88
- 87243,
89
- 87656,
90
- 88638,
91
- 89868,
92
- 91162,
93
- 93523,
94
-
95
-
96
-
37
+ 56959, #Adobe AIR <= 3.0 Multiple Vulnerabilities (APSB11-28)
38
+ 52755, #Adobe AIR < 2.6 Unspecified Memory Corruption (APSB11-05)
39
+ 53474, #Adobe AIR < 2.6.0.19140 ActionScript Predefined Class Prototype Addition Remote Code Execution (APSB11-07)
40
+ 55805, #Adobe AIR < 2.7.1 Multiple Vulnerabilities (APSB11-21)
41
+ 66444, #Adobe AIR <= 3.7.0.1530 Multiple Vulnerabilities (APSB13-14)
42
+ 66871, #Adobe AIR <= 3.7.0.1860 Memory Corruption (APSB13-16)
43
+ 69865, #Adobe AIR <= 3.8.0.870 Memory Corruptions (APSB13-21)
44
+ 70214, #Adobe AIR <= 3.7.0.2090 Multiple Vulnerabilities (APSB13-17)
45
+ 70857, #Adobe AIR <= 3.9.0.1030 Memory Corruptions (APSB13-26)
46
+ 71350, #Adobe AIR <= AIR 3.9.0.1210 Multiple Vulnerabilities (APSB13-28)
47
+ 71950, #Adobe AIR <= AIR 3.9.0.1380 Multiple Vulnerabilities (APSB14-02)
48
+ 73432, #Adobe AIR <= AIR 4.0.0.1628 Multiple Vulnerabilities (APSB14-09)
49
+ 73993, #Adobe AIR <= AIR 13.0.0.83 Multiple Vulnerabilities (APSB14-14)
50
+ 74430, #Adobe AIR <= AIR 13.0.0.111 Multiple Vulnerabilities (APSB14-16)
51
+ 73432, #Adobe AIR <= AIR 4.0.0.1628 Multiple Vulnerabilities (APSB14-09)
52
+ 73993, #Adobe AIR <= AIR 13.0.0.83 Multiple Vulnerabilities (APSB14-14)
53
+ 74430, #Adobe AIR <= AIR 13.0.0.111 Multiple Vulnerabilities (APSB14-16)
54
+ 58537, #Adobe AIR 3.x <= 3.1.0.4880 Multiple Memory Corruption Vulnerabilities (APSB12-07)
55
+ 59425, #Adobe AIR 3.x <= 3.2.0.2070 Multiple Vulnerabilities (APSB12-14)
56
+ 61624, #Adobe AIR 3.x <= 3.3.0.3670 Multiple Vulnerabilities (APSB12-19)
57
+ 62835, #Adobe AIR 3.x <= 3.4.0.2710 Multiple Vulnerabilities (APSB12-24)
58
+ 62479, #Adobe AIR 3.x <= 3.4.0.2540 Multiple Vulnerabilities (APSB12-22)
59
+ 63449, #Adobe AIR 3.x <= 3.5.0.880 Buffer Overflow (APSB13-01)
60
+ 64583, #Adobe AIR 3.x <= 3.5.0.1060 Buffer Overflow (APSB13-05)
61
+ 65218, #Adobe AIR 3.x <= 3.6.0.597 Buffer Overflow (APSB13-09)
62
+ 65909, #Adobe AIR 3.x <= 3.6.0.6090 Multiple Vulnerabilities (APSB13-11)
63
+ 66444, #Adobe AIR <= 3.7.0.1530 Multiple Vulnerabilities (APSB13-14)
64
+ 66871, #Adobe AIR <= 3.7.0.1860 Memory Corruption (APSB13-16)
65
+ 63241, #Adobe AIR 3.x <= 3.5.0.600 Multiple Vulnerabilities (APSB12-27)
66
+ 77171, #Adobe AIR <= AIR 14.0.0.110 Multiple Vulnerabilities (APSB14-18)
67
+ 77576, #Adobe AIR <= AIR 14.0.0.178 Multiple Vulnerabilities (APSB14-21)
68
+ 78440, #Adobe AIR <= AIR 15.0.0.249 Multiple Vulnerabilities (APSB14-22)
69
+ 79139, #Adobe AIR <= 15.0.0.293 Multiple Vulnerabilities (APSB14-24)
70
+ 80483, #Adobe AIR <= 15.0.0.356 Multiple Vulnerabilities (APSB15-01)
71
+ 34815, #Adobe AIR < 1.5 Multiple Vulnerabilities (APSB08-23)
72
+ 40447, #Adobe AIR < 1.5.2 Multiple Vulnerabilities (APSB09-10)
73
+ 43069, #Adobe AIR < 1.5.3 Multiple Vulnerabilities (APSB09-19)
74
+ 46858, #Adobe AIR < 2.0.2.12610 Multiple Vulnerabilities (ASPB10-14)
75
+ 48299, #Adobe AIR < 2.0.3 Multiple Vulnerabilities (APSB10-16)
76
+ 50604, #Adobe AIR < 2.5.1 Multiple Vulnerabilities (APSB10-26)
77
+ 44595, #Adobe AIR < 1.5.3.9130 Multiple Vulnerabilities (APSB10-06)
78
+ 84155, #Adobe AIR <= 17.0.0.124 Multiple Vulnerabilities (APSB15-05)
79
+ 84156, #Adobe AIR <= 17.0.0.144 Multiple Vulnerabilities (APSB15-06)
80
+ 84157, #Adobe AIR <= 17.0.0.144 Multiple Vulnerabilities (APSB15-09)
81
+ 84158, #Adobe AIR <= 17.0.0.172 Multiple Vulnerabilities (APSB15-11)
82
+ 84641, #Adobe AIR <= 18.0.0.144 Multiple Vulnerabilities (APSB15-16)
83
+ 85325, #Adobe AIR <= 18.0.0.180 Multiple Vulnerabilities (APSB15-19)
84
+ 86059, #Adobe AIR <= 18.0.0.199 Multiple Vulnerabilities (APSB15-23)
85
+ 86368, #Adobe AIR <= 19.0.0.190 Multiple Vulnerabilities (APSB15-25)
86
+ 86850, #Adobe AIR <= 19.0.0.213 Multiple Vulnerabilities (APSB15-28)
87
+ 87243, #Adobe AIR <= 19.0.0.241 Multiple Vulnerabilities (APSB15-32)
88
+ 87656, #Adobe AIR <= 20.0.0.204 Multiple Vulnerabilities (APSB16-01)
89
+ 88638, #Adobe AIR <= 20.0.0.233 Multiple Vulnerabilities (APSB16-04)
90
+ 89868, #Adobe AIR <= 20.0.0.260 Multiple Vulnerabilities (APSB16-08)
91
+ 91162, #Adobe AIR <= 21.0.0.198 Multiple Vulnerabilities (APSB16-15)
92
+ 93523, #Adobe AIR <= 22.0.0.153 Android Applications Runtime Analytics MitM (APSB16-31)
97
93
  ]
98
-
99
94
  }
100
95
 
101
96
  end
@@ -0,0 +1,47 @@
1
+ # Copyright (c) 2010-2020 Jacob Hammack.
2
+ #
3
+ # Permission is hereby granted, free of charge, to any person obtaining a copy
4
+ # of this software and associated documentation files (the "Software"), to deal
5
+ # in the Software without restriction, including without limitation the rights
6
+ # to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
7
+ # copies of the Software, and to permit persons to whom the Software is
8
+ # furnished to do so, subject to the following conditions:
9
+ #
10
+ # The above copyright notice and this permission notice shall be included in
11
+ # all copies or substantial portions of the Software.
12
+ #
13
+ # THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
14
+ # IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
15
+ # FITNESS FOR A PARTICULAR PURPOSE AND NON INFRINGEMENT. IN NO EVENT SHALL THE
16
+ # AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
17
+ # LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
18
+ # OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
19
+ # THE SOFTWARE.
20
+
21
+
22
+ module Risu
23
+ module Parsers
24
+ module Nessus
25
+ module PostProcess
26
+ class AdobeColdfusionPatchRollup < Risu::Base::PostProcessBase
27
+
28
+ #
29
+ def initialize
30
+ @info =
31
+ {
32
+ :description => "Adobe Coldfusion Patch Rollup",
33
+ :plugin_id => -99950,
34
+ :plugin_name => "Missing the latest Adobe Coldfusion Patches",
35
+ :item_name => "Update to the latest Adobe Coldfusion",
36
+ :plugin_ids => [
37
+ 64689, #Adobe ColdFusion Authentication Bypass (APSB13-03)
38
+ 72091, #Adobe ColdFusion Unsupported Version Detection
39
+ 99731, #Adobe ColdFusion BlazeDS Java Object Deserialization RCE
40
+ ]
41
+ }
42
+ end
43
+ end
44
+ end
45
+ end
46
+ end
47
+ end