The version of Adobe Reader installed on the remote Windows host is a version prior or equal to 2015.006.30505, 2017.011.30152, or 2019.021.20056. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Adobe Acrobat installed on the remote Windows host is a version prior or equal to 2015.006.30505, 2017.011.30152, or 2019.021.20056. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Steam Client has been detected on the remote Windows host.

The version of Adobe Photoshop CC installed on the remote Windows host is prior to 20.0.8 (2019.0.8), 21.0.2 (2020.0.2).
It is, therefore, affected by multiple unspecified memory corruption vulnerabilities exist. An attacker can exploit this to execute arbitrary code.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Adobe ColdFusion installed on the remote Windows host is prior to 2018.x update 7. It is, therefore, affected by a vulnerability as referenced in the APSB19-58 advisory.

  - Insecure inherited permissions of default installation     directory potentially leading to Privilege Escalation     (CVE-2019-8256)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Thunderbird installed on the remote Windows host is prior to 68.3. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2019-38 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote Windows host is prior to 79.0.3945.79. It is, therefore, affected by multiple vulnerabilities as referenced in the 2019_12_stable-channel-update-for-desktop advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote Windows host is prior to 2.6.13. It is, therefore, affected by a vulnerability as referenced in the wireshark-2.6.13 advisory.

  - The CMS dissector could crash. It may be possible to     make Wireshark crash by injecting a malformed packet     onto the wire or by convincing someone to read a     malformed packet trace file. (CVE-2019-19553)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote Windows host is prior to 3.0.7. It is, therefore, affected by a vulnerability as referenced in the wireshark-3.0.7 advisory.

  - The CMS dissector could crash. It may be possible to     make Wireshark crash by injecting a malformed packet     onto the wire or by convincing someone to read a     malformed packet trace file. (CVE-2019-19553)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to its self-reported version, the Foxit Studio Photo application installed on the remote Windows host is affected by an out-of-bounds read error in the preview creation of EPS files due to improper validation of user-supplied              data. An unauthenticated, remote attacker can exploit this, to disclose potentially sensitive information or cause the application to stop responding.

According to its self-reported version, the Foxit Studio Photo application installed on the remote Windows host is affected by multiple vulnerabilities: 

  - An out-of-bounds read error exist in the TIF file handler when processing InkNames of TIFFSetField due to     improper validation of user-supplied data. An unauthenticated, remote attacker can exploit this, by     convincing a user to open a specially crafted file to execute arbitrary code in the context of the current     process.

  - An out-of-bounds write error exists in the TIF file handler due to improper validation of user-supplied     data. An unauthenticated, remote attacker can exploit this, by convincing a user to open a specially     crafted file to execute arbitrary code in the context of the current process or cause the application to     stop responding.

  - An out-of-bounds read error exists in the EPS file handler due to improper validation of user-supplied     data. An unauthenticated, remote attacker can exploit this, by convincing a user to open a specially     crafted file to disclose potentially sensitive information or cause the application to stop responding.

Adobe Media Encoder, software for working with multimedia files, was found on the remote Windows host.

The remote Windows host is running a version of Microsoft Windows Admin Center that is missing a security update. It is, therefore, affected by an elevation of privilege vulnerability due to improper impersonating of operations in certain situations. An unauthenticated, remote attacker can exploit this issue to gain privileged or administrator access to the system.

The version of Firefox installed on the remote Windows host is prior to 71.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2019-36 advisory.

  - When encrypting with a block cipher, if a call to     NSC_EncryptUpdate was made with data smaller than the block     size, a small out of bounds write could occur. This could     have caused heap corruption and a potentially exploitable     crash. (CVE-2019-11745)

  - Improper refcounting of soft token session objects could     cause a use-after-free and crash (likely limited to a denial     of service). (CVE-2019-11756)

  - When setting a thread name on Windows in WebRTC, an     incorrect number of arguments could have been supplied,     leading to stack corruption and a potentially exploitable     crash.
    Note: this issue only occurs on Windows. Other operating     systems are unaffected. (CVE-2019-13722)

  - When using nested workers, a use-after-free could occur     during worker destruction. This resulted in a potentially     exploitable crash. (CVE-2019-17008)

  - When running, the updater service wrote status and log     files to an unrestricted location; potentially allowing     an unprivileged process to locate and exploit a     vulnerability in file handling in the updater service.
  - Note: This attack requires local system access and only     affects Windows. Other operating systems are not affected.
    (CVE-2019-17009)

  - Under certain conditions, when checking the Resist     Fingerprinting preference during device orientation checks,     a race condition could have caused a use-after-free and a     potentially exploitable crash. (CVE-2019-17010)

  - Under certain conditions, when retrieving a document from     a DocShell in the antitracking code, a race condition     could cause a use-after-free condition and a potentially     exploitable crash. (CVE-2019-17011)

  - Mozilla developers Christoph Diehl, Nathan Froyd, Jason     Kratzer, Christian Holler, Karl Tomlinson, Tyson Smith     reported memory safety bugs present in Firefox 70 and     Firefox ESR 68.2. Some of these bugs showed evidence of     memory corruption and we presume that with enough effort     some of these could have been exploited to run arbitrary code.
    (CVE-2019-17012)

  - Mozilla developers and community members Philipp, Diego     Calleja, Mikhail Gavrilov, Jason Kratzer, Christian     Holler, Markus Stange, Tyson Smith reported memory safety     bugs present in Firefox 70. Some of these bugs showed     evidence of memory corruption and we presume that with     enough effort some of these could have been exploited to     run arbitrary code. (CVE-2019-17013)

  - If an image had not loaded correctly (such as when it is     not actually an image), it could be dragged and dropped     cross-domain, resulting in a cross-origin information leak.
    (CVE-2019-17014)     Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox ESR installed on the remote Windows host is prior to 68.3. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2019-37 advisory, including the following:

  - When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the     block size, a small out of bounds write could occur. This could have caused heap corruption and a     potentially exploitable crash. (CVE-2019-11745)

  - When using nested workers, a use-after-free could occur during worker destruction. This resulted in a     potentially exploitable crash. (CVE-2019-17008)

  - Mozilla developers Christoph Diehl, Nathan Froyd, Jason Kratzer, Christian Holler, Karl Tomlinson, Tyson     Smith reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. Some of these bugs showed     evidence of memory corruption and we presume that with enough effort some of these could have been     exploited to run arbitrary code. (CVE-2019-17012)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Symantec Critical System Protection (SCSP) installed on the remote Windows host is 8.0 prior to 8.0 MP2. It is, therefore, affected by an unspecified authentication bypass vulnerability.

The version of Google Chrome installed on the remote Windows host is prior to 73.0.3683.103. It is, therefore, affected by an heap corruption vulnerability as referenced in the 2019_04_stable-channel-update-for-desktop advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Sophos Anti-Virus, a commercial antivirus software package for Windows, is installed on the remote host.

The version of Microsoft Visual Studio Code installed on the remote Windows host is prior to 1.39.1. It is, therefore, affected by the following vulnerability:

  - An elevation of privilege vulnerability exists in Visual Studio Code when it exposes a debug listener to     users of a local computer. A local attacker who successfully exploited the vulnerability could inject     arbitrary code to run in the context of the current user. If the current user is logged on with     administrative user rights, an attacker could take control of the affected system. An attacker could then     install programs; view, change, or delete data; or create new accounts with full user rights.

Windows Admin Center, a browser-based management platform, is installed on the remote Windows host.

Foxit Studio Photo has been detected on the remote Windows host.

The remote host is running a version of Fortinet FortiClient prior to 6.2.0. It is, therefore, affected by an information disclosure man-in-the-middle vulnerability in the FortiGuard services communication protocol due to the use of a hardcoded cryptographic key. A remote attacker with knowledge of the hardcoded key can exploit this via the network to eavesdrop and modify information sent and received from FortiGuard servers.

The version of Symantec Endpoint Protection (SEP) Client installed on the remote host is 12.x prior to 12.1.7454.7000 or 14.x prior to 14.2.5323.2000.  It is, therefore, affected by multiple vulnerabilities.

  - An authentication bypass vulnerability exists in the second layer     of password protection. An authenticated, local attacker can     exploit this to bypass authentication and execute arbitrary     actions with local administrator privileges. (CVE-2019-12756)

  - A privilege escalation vulnerability exists. An unauthenticated,     local attacker can exploit this to gain privileged access to the     system. (CVE-2019-12757, CVE-2019-18372)

  - A remote command execution vulnerability exists due to an unsigned     code execution vulnerability. An unauthenticated, remote attacker     can exploit this to execute code without a resident proper digital     signature. (CVE-2019-12758)   Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to its self-reported version, Cisco Webex Teams is affected by a DLL hijacking vulnerability. An authenticated, local attacker can exploit this, by crafting a malicious DLL file and placing it in a specific location, to execute arbitrary code on the target machine with the privileges of another user account. Please refer to the Cisco BIDs and Cisco Security Advisory for more information.

Atlassian JIRA, issue tracking software, was detected on the remote Windows host.

According to its version, the Foxit PhantomPDF application (formally known as Phantom) installed on the remote Windows host is prior to 9.7. It is, therefore affected by  multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote Windows host is prior to 78.0.3904.108. It is, therefore, affected by multiple vulnerabilities as referenced in the 2019_11_stable-channel-update-for-desktop_18 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Microsoft Visual Studio Integrated Shell, a base IDE to build tools  and applications on top of Visual Studio, is installed on the remote  Windows host.

The version of Apple iTunes installed on the remote Windows host is prior to 12.10.2. It is, therefore, affected by multiple vulnerabilities as referenced in the HT210726 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of VMware Workstation installed on the remote Windows host is 15.0.x prior to 15.5.1. It is, therefore, affected by multiple vulnerabilities:

  - An unspecified information disclosure vulnerability in vmnetdhcp. (CVE-2019-5540)

  - An unspecified out-of-bounds write vulnerability in the e1000e virtual network adapter. (CVE-2019-5541)

  - An unspecified denial-of-service vulnerability in the RPC handler. (CVE-2019-5542)

  - Unspecified vulnerabilities related to hypervisor-specific mitigations for TSX Asynchronous Abort (TAA).
    (CVE-2019-11135)

According to its version, the Foxit Reader application installed on the remote Windows host is prior to 9.5. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to its version, the Foxit PhantomPDF application (formally known as Phantom) installed on the remote Windows host is prior to 9.5. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Windows Defender, an antivirus component of Microsoft Windows is installed  on the remote Windows host.

The version of Google Chrome installed on the remote Windows host is prior to 78.0.3904.97. It is, therefore, affected by a vulnerability as referenced in the 2019_11_stable-channel-update-for-desktop advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Symantec SONAR installed on the remote host is prior to 12.0.2. It is, therefore, affected by a security bypass vulnerability due to a flaw the tamper protection. An authenticated attacker can exploit this, to circumvent tamper protection on the resident system.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to its version, the Foxit PhantomPDF application (formally known as Phantom) installed on the remote Windows host is prior to 8.x < 8.3.12 / 9.x < 9.7. It is, therefore affected by multiple vulnerabilities: 

  - An out-of-bounds error exists in the V8 JavaScript engine. An unauthenticated, remote attacker can exploit     this, by tricking a user into opening a malicious file to execute arbitrary commands. (CVE-2019-5031)

  - A denial of service (DOS) vulnerability exists in the V8 JavaScript engine due to two unique RecursiveCall     bugs. An unauthenticated, remote attacker can exploit this, to exhaust the available stack memory.     (CVE-2019-13123, CVE-2019-13124)

  - A denial of service (DOS) vulnerability exists due to a potential issue where the application could be     exposed to an access violation vulnerability. An unauthenticated, remote attacker could exploit this, by     launching the application under conditions where there is not enough memory in the system, to cause the     application to stop responding.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Jenkins, an open source automation server software, is installed on the remote Windows host.

Citrix Workspace App, software that gives users access to their SaaS, web, mobile, and virtual apps and desktops, was found on the remote Windows host.

The version of Oracle Business Intelligence Publisher running on the remote host is 11.1.1.9.x prior to 11.1.1.9.191015 or 12.2.1.3.x prior to 12.2.1.3.191015 or 12.2.1.4.x prior to 12.2.1.4.191015. It is, therefore, affected by  multiple vulnerabilities as noted in the October 2019 Critical Patch Update advisory:

  - An unspecified vulnerability in the Installation     component of Oracle BI Publisher that allows     unauthenticated attacker with network access via HTTP     to compromise Oracle BI Publisher. While the     vulnerability is in Oracle BI Publisher, attacks     may significantly impact additional products.
    Successful attacks of this vulnerability can result in     unauthorized access to critical data or complete access     to all Oracle BI Publisher accessible data.
    (CVE-2019-2905)

  - An unspecified vulnerability in the MobileService     component of Oracle BI Publisher could allow an     unauthenticated attacker with network access via HTTP     to compromise BI Publisher. A successful attack requires     human interaction from a person other than the attacker     and while the vulnerability is in BI Publisher, attacks     may significantly impact additional products.
    (CVE-2019-2906)

  - An unspecified vulnerability in the BI PublisherSecurity     component of Oracle BI Publisher could allow a low     privileged attacker with networkaccess via HTTP to     compromise Oracle BI Publisher. A successful attack of     this vulnerability canresult in unauthorized read access     to a subset of BIPublisher accessible data     (CVE-2019-2898)

  - An unspecified vulnerability in the Analytics Actions   component of Oracle BI Publisher could allow a low   privileged attacker with network access via HTTP to   compromise Oracle BI Publisher. While the vulnerability   is in Oracle BI Publisher, attacks may significantly   impact additional products. Successful attacks of this   vulnerability can result in unauthorized update, insert   or delete access to some of Oracle BI Publisher   accessible data as well as unauthorized read access to   a subset of Oracle BI Publisher accessible data.
  (CVE-2019-2897)

  - An unspecified vulnerability in the Secure Store     (OpenSSL) component of Oracle BI Publisher could allow     an unauthenticated attacker with network access via     HTTPS to compromise Oracle BI Publisher. Successful     attacks of this vulnerability can result in     unauthorized access to critical data or complete     access to all Oracle BI Publisher data.
    (CVE-2019-1559)   
  - An unspecified vulnerability in the BI Platform     Security (JQuery) component of Oracle BI Publisher     could allow an unauthenticated attacker with network     access via HTTP to compromise Oracle BI Publisher.
    Successful attacks require human interaction from a     person other than the attacker and while the     vulnerability is in Oracle BI Publisher, attacks may     significantly impact additional products.
    (CVE-2016-7103)

  - An unspecified vulnerability in the Analytics Actions     component of Oracle BI Publisher could allow an     unauthenticated attacker with network access via HTTP to     compromise Oracle BI Publisher. Successful attacks of     this vulnerability can result in unauthorized access to     critical data or complete access to all Oracle BI     Publisher accessible data. (CVE-2019-2900)

  - An unspecified vulnerability in the BI Platform     Security component of Oracle BI Publisher could allow     an unauthenticated attacker with network access via     HTTP to compromise Oracle BI Publisher. Successful     attacks of this vulnerability can result in     unauthorized read access to a subset of Oracle BI     Publisher accessible data. (CVE-2019-3012)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote Windows host is prior to 78.0.3904.87. It is, therefore, affected by multiple vulnerabilities as referenced in the 2019_10_stable-channel-update-for-desktop_31 advisory. 

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The SolarWinds Dameware Mini Remote Control Client Agent running on the remote host is affected by a remote code execution vulnerability due to improper validation of user-supplied data. An unauthenticated, remote attacker can exploit this, via a series of requests, to execute arbitrary code.

The version of Thunderbird installed on the remote Windows host is prior to 68.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2019-35 advisory.

  - In libexpat before 2.2.8, crafted XML input could fool     the parser into changing from DTD parsing to document     parsing too early; a consecutive call to     XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber)     then resulted in a heap-based buffer over-read.
    (CVE-2019-15903)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Oracle Business Intelligence Publisher running on the remote host is 11.1.1.7.x prior to 11.1.1.7.160719, 11.1.1.9.x prior to 11.1.1.9.161018, or 12.2.1.0.x prior to 12.2.1.0.161018. It is, therefore, affected by an unspecified vulnerability in the BI Publisher component in Oracle Fusion Middleware which allows remote, authenticated users to affect confidentiality via unknown vectors.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote Windows host is prior to 78.0.3904.70. It is, therefore, affected by multiple vulnerabilities as referenced in the 2019_10_stable-channel-update-for-desktop_22 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Artifex Ghostscript installed on the remote Windows host is prior to 9.50. It is, therefore, affected by multiple security bypass vulnerabilities. An attacker could exploit one of these vulnerabilities to gain access to the file system and execute arbitrary commands.

The version of the McAfee Endpoint Security (ENS) for Windows installed on the remote Windows host is 10.5.x prior to 10.5.5 October 2019 Update or 10.6.x prior to 10.6.1 October 2019 Update. It is, therefore, affected by multiple vulnerabilities:

  - Code Injection vulnerability in EPSetup.exe in McAfee Endpoint Security (ENS) Prior to 10.6.1 October 2019     Update allows local user to get their malicious code installed by the ENS installer via code injection into     EPSetup.exe by an attacker with access to the installer. (CVE-2019-3652)

  - Improper access control vulnerability in Configuration tool in McAfee Endpoint Security (ENS) Prior to     10.6.1 October 2019 Update allows local user to gain access to security configuration via unauthorized use     of the configuration tool. (CVE-2019-3653)

The version of Oracle Business Intelligence Publisher running on the remote host is 11.1.1.7.x prior to 11.1.1.7.160719, 11.1.1.9.x prior to 11.1.1.9.160719, or 12.2.1.0.x prior to 12.2.1.0.160719. It is, therefore, affected by multiple vulnerabilities as noted in the July 2016 Critical Patch Update advisory, including the following:

  - An unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle     Fusion Middleware which allows remote, authenticated users to affect confidentiality and integrity via     vectors related to Analytics Web General (CVE-2016-3544).

  - An unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle     Fusion Middleware which allows remote attackers to affect confidentiality, integrity, and availability via     vectors related to Analytics Web Administration (CVE-2016-3446).

  - An unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle     Fusion Middleware which allows remote, authenticated attackers to affect confidentiality and integrity via     vectors related to Analytics Web Administration (CVE-2016-3433).

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Oracle Business Intelligence Publisher running on the remote host is 11.1.1.7.x prior to 11.1.1.7.160119, 11.1.1.9.x prior to 11.1.1.9.160119, or 12.2.1.0.x prior to 12.2.1.0.160419. It is, therefore, affected by multiple vulnerabilities as noted in the April 2016 Critical Patch Update advisory. These vulnerabilities are as follows:

  - An unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle     Fusion Middleware which allows remote, authenticated users to affect confidentiality and integrity via     vectors related to Analytics Web General (CVE-2016-0468).

  - An unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle     Fusion Middleware which allows remote attackers to affect confidentiality and integrity via vectors     related to Analytics Scorecard (CVE-2016-0479).

  - The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ before 5.11.0,     used by Oracle Business Intelligence Publisher, allows remote attackers to cause a denial of service     (shutdown) via a shutdown command (CVE-2014-3567).

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

One or more Cisco Webex Teams installations have been detected on the remote Windows host.

The version of Firefox ESR installed on the remote Windows host is prior to 68.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2019-33 advisory, including the following:

  - In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to     document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or     XML_GetCurrentColumnNumber) could then result in a heap-based buffer over-read. (CVE-2019-15903)

  - A use-after-free vulnerability exists in IndexedDB when creating updates. When following the value's     prototype chain, it was possible to retain a reference to a locale, delete it, and subsequently reference     it. This resulted in a use-after-free and a potentially exploitable crash. (CVE-2019-11757)

  - A potential memory corruption vulnerability is present in the accessibility engine when 360 Total     Security is installed, resulting in a potentially exploitable crash. (CVE-2019-11758)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Severity
132037	Adobe Reader <= 2015.006.30505 / 2017.011.30152 / 2019.021.20056 Multiple Vulnerabilities (APSB19-55)	High
132036	Adobe Acrobat <= 2015.006.30505 / 2017.011.30152 / 2019.021.20056 Multiple Vulnerabilities (APSB19-55)	High
132025	Steam Client Installed (Windows)	Info
132022	Adobe Photoshop CC 20.x <= 20.0.7 / 21.x <= 21.0.1 Multiple Vulnerabilities (APSB19-56)	High
132019	Adobe ColdFusion < 2018.x < 2018u7 Vulnerability (APSB19-58)	Medium
131956	Mozilla Thunderbird < 68.3	Medium
131954	Google Chrome < 79.0.3945.79 Multiple Vulnerabilities	Medium
131950	Wireshark 2.6.x < 2.6.13 A Vulnerability	High
131948	Wireshark 3.0.x < 3.0.7 A Vulnerability	High
131942	Foxit Studio Photo < 3.6.6.916 Out-of-Bounds Read Vulnerability	High
131941	Foxit Studio Photo < 3.6.6.913 Multiple Vulnerabilities	High
131836	Adobe Media Encoder Installed (Windows)	Info
131835	Security Update for Microsoft Windows Admin Center (March 2019)	High
131773	Mozilla Firefox < 71.0	Critical
131767	Mozilla Firefox ESR 68.x < 68.3 Multiple vulnerabilities	High
131765	Symantec Critical System Protection 8.0 < 8.0 MP2 Authentication Bypass (SYMSA1498)	High
131738	Google Chrome < 73.0.3683.103 Heap Corruption	Medium
131725	Sophos Anti-Virus Installed (Windows)	Info
131318	Security Update for Microsoft Visual Studio Code (CVE-2019-1414)	Medium
131317	Windows Admin Center Installed	Info
131316	Foxit Studio Photo Installed (Windows)	Info
131285	Fortinet FortiClient < 6.2.0 Information Disclosure MitM (FG-IR-18-100)	Medium
131233	Symantec Endpoint Protection Client 12.x < 12.1.7454.7000 / 14.x < 14.2.5323.2000 Multiple Vulnerabilities (SYMSA1488)	High
131232	Cisco Webex Teams for Windows DLL Hijacking Vulnerability (cisco-sa-20191120-webex-teams-dll)	Medium
131193	Atlassian JIRA Installed (Windows)	Info
131191	Foxit PhantomPDF < 9.7 Multiple Vulnerabilities	Medium
131190	Google Chrome < 78.0.3904.108 Multiple Vulnerabilities	Medium
131186	Microsoft Visual Studio Integrated Shell Installed	Info
131132	Apple iTunes < 12.10.2 Multiple Vulnerabilities (credentialed check)	High
131129	VMware Workstation 15.0.x < 15.5.1 Multiple Vulnerabilities (VMSA-2019-0020, VMSA-2019-0021)	Medium
131078	Foxit Reader < 9.5 Multiple Vulnerabilities	High
131077	Foxit PhantomPDF < 9.5 Multiple Vulnerabilities	High
131023	Windows Defender Installed	Info
131022	Google Chrome < 78.0.3904.97 Vulnerability	High
130630	Symantec SONAR < 12.0.2 Security Bypass (SYMSA1494)	Medium
130625	Foxit PhantomPDF 8.x < 8.3.12 / 9.x < 9.7 Multiple Vulnerabilities	Medium
130596	Jenkins Installed (Windows)	Info
130592	Citrix Workspace App Installed (Windows)	Info
130589	Oracle Business Intelligence Publisher Multiple Vulnerabilities (Oct 2019 CPU)	Medium
130463	Google Chrome < 78.0.3904.87 Multiple Vulnerabilities	Medium
130458	SolarWinds Dameware Mini Remote Control Unauthenticated RCE	Critical
130365	Mozilla Thunderbird < 68.2	Medium
130277	Oracle Business Intelligence Publisher Information Disclosure (Oct 2016 CPU)	Medium
130275	Google Chrome < 78.0.3904.70 Multiple Vulnerabilities	Medium
130273	Artifex Ghostscript < 9.50 Multiple Vulnerabilities	High
130271	McAfee Endpoint Security for Windows 10.5.x < 10.5.5 October 2019 Update / 10.6.x < 10.6.1 October 2019 Update Multiple Vulnerabilities (SB10299)	Medium
130269	Oracle Business Intelligence Publisher Multiple Vulnerabilities (Jul 2016 CPU)	High
130268	Oracle Business Intelligence Publisher Multiple Vulnerabilities (April 2016 CPU)	Medium
130173	Cisco Webex Teams Installed (Windows)	Info
130172	Mozilla Firefox ESR 68.x < 68.2 Multiple vulnerabilities	Medium

Windows Family for Nessus