遠端 Windows 主機上執行的 Apple iTunes 版本比 12.4.2 舊。因此，會受到多個弱點影響：

- libxslt 元件中存有多個記憶體損毀問題，這是因為不當驗證使用者提供的輸入所致。未經驗證的遠端攻擊者可惡意利用此弱點，藉此引發拒絕服務情形或執行任意程式碼。(CVE-2016-1684、CVE-2016-4607、CVE-2016-4608、CVE-2016-4609、CVE-2016-4610、CVE-2016-4612)

- libxml2 元件中存在多個記憶體損毀問題，可允許遠端攻擊者造成拒絕服務情形或執行任意程式碼。
 (CVE-2016-1836、CVE-2016-4447、CVE-2016-4448、CVE-2016-4483、CVE-2016-4614、CVE-2016-4615、CVE-2016-4616、CVE-2016-4619)

- 在 libxml2 元件中存在一個 XXE (Xml 外部實體) 插入弱點，這是因為不正確地設定接受來自未受信任來源之 XML 外部實體的 XML 剖析器所致。遠端攻擊者可惡意利用此弱點，透過特製的 XML 檔案洩漏任意檔案和使用者資訊。(CVE-2016-4449)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼。

遠端主機執行的 Mac OS X 10.11.x 版比 10.11.6 版舊。因此受到下列元件中的多個弱點影響：

- apache_mod_php
 - Audio
 - bsdiff
 - CFNetwork
 - CoreGraphics
 - FaceTime
 - Graphics Drivers
 - ImageIO
 - Intel Graphics Driver
 - IOHIDFamily
 - IOKit
 - IOSurface
 - Kernel
 - libc++abi
 - libexpat
 - LibreSSL
 - libxml2
 - libxslt
 - Login Window
 - OpenSSL
 - QuickTime
 - Safari Login AutoFill
 - Sandbox Profiles

請注意，如果成功惡意利用多數嚴重問題，將會導致任意程式碼執行。

遠端主機上安裝的 Tenable Log Correlation Engine (LCE) 版本比 4.8.1 舊。因此，會受到以下弱點影響：- Handlebars 程式庫的 lib/handlebars/utils.js 指令碼中，有多個跨網站指令碼 (XSS) 弱點存在，這是因為將取消引用的屬性傳送至範本時，未正確逸出輸入所致。未經驗證的遠端攻擊者可惡意利用這些弱點，透過特製要求在使用者的瀏覽器工作階段內執行任意指令碼。(CVE-2015-8861、CVE-2015-8862) - Perl-Compatible Regular Expressions (PCRE) 元件中有堆積型緩衝區溢位情形存在，會在處理重複命名群組中的巢狀向後參照時遭到觸發。未經驗證的遠端攻擊者可加以惡意利用，藉此引發拒絕服務情形或執行任意程式碼。(CVE-2016-1283) - 在 libxml2 元件的 parserInternals.c 中有一個超出邊界讀取錯誤存在，這是因為不當剖析 XML 檔案中的字元所致。未經驗證的遠端攻擊者可惡意利用此弱點，洩露敏感資訊或造成拒絕服務情形。(CVE-2016-1833) - 在 libxml2 元件的 xmlstring.c 中有溢位情形存在，這是因為在處理含有 NULL 的字串時，不當驗證使用者提供的輸入所致。未經驗證的遠端攻擊者可惡意利用此問題，透過特製的檔案，造成拒絕服務情形，或是執行任意程式碼。(CVE-2016-1834) - 在 libxml2 元件的 parser.c 中有多個釋放後使用錯誤存在，會在剖析複雜名稱時遭到觸發。未經驗證的遠端攻擊者可加以惡意利用，透過特製的檔案解除參照已釋放的記憶體，甚或執行任意程式碼。(CVE-2016-1835, CVE-2016-1836) - 在 libxml2 元件的 HTMLparser.c 及 xmlregexp.c 中有多個堆積型緩衝區溢位情形存在，這是因為剖析某個範圍內的字元時，不當驗證使用者提供的輸入所致。未經驗證的遠端攻擊者可利用這些問題，透過特製的網頁，引發拒絕服務情形，或是執行任意程式碼。(CVE-2016-1837、CVE-2016-1839、CVE-2016-1840) - 在 libxml2 元件的 parser.c 的 中有多個超出邊界讀取錯誤存在。未經驗證的遠端攻擊者可惡意利用這些問題，以洩露敏感資訊或造成拒絕服務情形。(CVE-2016-1838、CVE-2016-4447) - 在 OpenSSL 元件中，檔案 crypto/evp/encode.c 內的 EVP_EncodeUpdate() 函式內有堆積緩衝區溢位情形存在，會在處理大量輸入資料時遭到觸發。未經驗證的遠端攻擊者可加以惡意利用，進而引發拒絕服務情形。(CVE-2016-2105) - OpenSSL 元件中 crypto/evp/evp_enc.c 檔案內的 EVP_EncryptUpdate() 函式中存在堆積緩衝區溢位情形，含有部分區塊的相同函式發生上一次呼叫後，會在處理大量輸入資料時遭到觸發。未經驗證的遠端攻擊者可加以惡意利用，進而引發拒絕服務情形。(CVE-2016-2106) - crypto/evp/e_aes_cbc_hmac_sha1.c 檔案中的 aesni_cbc_hmac_sha1_cipher() 函式和 crypto/evp/e_aes_cbc_hmac_sha256.c 檔案中的 aesni_cbc_hmac_sha256_cipher() 函式有多個缺陷存在，連線使用伺服器支援的 AES-CBC 密碼和 AES-NI 時，會觸發這些缺陷。攔截式攻擊者可惡意利用這些弱點，發動 padding oracle 攻擊，進而解密網路流量。(CVE-2016-2107) - 在 OpenSSL 元件中，ASN.1 編碼器有一個遠端程式碼執行弱點存在，此弱點是因為嘗試編碼以負整數表示的零值時，發生反向溢位情形所致。未經驗證的遠端攻擊者可惡意利用此弱點損毀記憶體，進而導致任意程式碼執行。(CVE-2016-2108) - d2i BIO 函式從 BIO 讀取 ASN.1 資料時存在多個不明缺陷，這是因為無效編碼造成配置大量記憶體所致。未經驗證的遠端攻擊者可惡意利用這些缺陷，透過資源耗盡造成拒絕服務情形。(CVE-2016-2109) - 檔案 crypto/x509/x509_obj.c 的 X509_NAME_oneline() 函式處理極長的 ASN1 字串時，有一個超出邊界讀取錯誤存在。未經驗證的遠端攻擊者可加以惡意利用洩露堆疊記憶體的內容。(CVE-2016-2176) - Perl-Compatible Regular Expressions (PCRE) 元件中有溢位情形存在，這是因為在處理 (*ACCEPT) 動詞命令時，不當驗證使用者提供的輸入所致。未經驗證的遠端攻擊者可加以惡意利用，藉此引發拒絕服務情形或執行任意程式碼。(CVE-2016-3191) - 以復原模式處理 XML 內容時，libxml2 元件的 parser.c 中有一個缺陷存在。未經驗證的遠端攻擊者可加以惡意利用，造成堆疊耗盡，進而導致拒絕服務情形。(CVE-2016-3627) - libxml2 元件的 parser.c 中有一個缺陷存在，這是因為不當驗證使用者提供的輸入所致。未經驗證的遠端攻擊者可加以惡意利用，造成堆疊耗盡，進而導致拒絕服務情形。(CVE-2016-3705) - libxml2 元件中有一個格式字串缺陷存在，這是因為不當使用字串格式指定名稱 (例如，%s 和 %x) 所致。未經驗證的遠端攻擊者可加以惡意利用，藉此引發拒絕服務情形或執行任意程式碼。(CVE-2016-4448) - parser.c 中有一個 XML 外部實體插入弱點存在，這是因為不當剖析 XML 資料所致。未經驗證的遠端攻擊者可加以惡意利用，透過特製 XML 資料洩露任意檔案，或是造成拒絕服務情形。(CVE-2016-4449) - 以復原模式處理 XML 內容時，libxml2 的 xmlsave.c 元件中有一個超出邊界讀取錯誤存在。未經驗證的遠端攻擊者可惡意利用此弱點，洩露敏感資訊或造成拒絕服務情形。(CVE-2016-4483) - libcurl 元件中有一個安全性繞過弱點存在，這是因為即使用戶端憑證失敗，程式還是會嘗試恢復 TLS 工作階段所致。未經驗證的遠端攻擊者可加以惡意利用，繞過驗證機制。(CVE-2016-5419) - libcurl 元件中有一個資訊洩露弱點存在，這是因為程式重複使用具有不同用戶端憑證的 TLS 連線所致。未經驗證的遠端攻擊者可惡意利用此弱點洩露敏感的跨領域資訊。(CVE-2016-5420) - libcurl 元件中有一個釋放後使用錯誤存在，會在未正確清除連線指標以便處理時遭到觸發。未經驗證的遠端攻擊者可加以惡意利用，解除參照已釋放的記憶體，進而可能導致執行任意程式碼。(CVE-2016-5421) - 有多個已儲存跨網站指令碼 (XSS) 弱點存在，這是因不當驗證使用者提供的輸入所致。經驗證的遠端攻擊者可加以惡意利用，透過特製的要求，在使用者的瀏覽器工作階段中執行任意指令碼。(CVE-2016-9261)

行動裝置上執行的 iOS 版本比 9.3.3 舊。因而會受到多個弱點影響，其中最嚴重的弱點可導致在下列元件中執行遠端程式碼：

  - 日曆
  - CoreGraphics
  - FaceTime
  - ImageIO
  - IOAcceleratorFamily
  - IOHIDFamily
  - Kernel
  - libxml2
  - libxslt
  - Safari
  - Sandbox Profiles
  - Siri Contacts
  - Web Media
  - WebKit
  - WebKit JavaScript Bindings
  - WebKit 頁面載入

The remote host is running a version of iOS that is prior to version 9.3.2 and the following components contain vulnerabilities :

 - Accessibility
 - CFNetwork Proxies
 - CommonCrypto
 - CoreCapture
 - Disk Images
 - ImageIO
 - IOAcceleratorFamily
 - IOHIDFamily
 - Kernel
 - libc
 - libxml2
 - libxslt
 - MapKit
 - OpenGL
 - Safari
 - Siri
 - WebKit
 - WebKit Canvas

The remote host is running a version of Mac OS X version 10.11.x prior to 10.11.5 and is affected by multiple vulnerabilities in the following components :

 - AMD
 - apache_mod_php
 - AppleGraphicsControl
 - AppleGraphicsPowerManagement
 - ATS
 - Audio
 - Captive Network Assistant
 - CFNetwork Proxies
 - CommonCrypto
 - CoreCapture
 - CoreStorage
 - Crash Reporter
 - Disk Images
 - Disk Utility
 - Graphics Drivers
 - ImageIO
 - Intel Graphics Driver
 - IOAcceleratorFamily
 - IOAudioFamily
 - IOFireWireFamily
 - IOHIDFamilyKernel
 - libc
 - libxml2
 - libxslt
 - MapKit
 - Messages
 - Multi-Touch
 - NVIDIA Graphics Drivers
 - OpenGL
 - QuickTime
 - SceneKit
 - Screen Lock
 - Tcl

Versions of Apple TV earlier than 9.2.1 are unpatched for vulnerabilities in the following components :

 - CFNetwork Proxies
 - CommonCrypto
 - CoreCapture
 - Disk Images
 - ImageIO
 - IOAcceleratorFamily
 - IOHIDFamily
 - Kernel
 - libc
 - libxml2
 - libxslt
 - OpenGL
 - WebKit
 - WebKit Canvas
 

The specific version of Mac OS X that the system is running is reportedly affected by the following vulnerabilities:

- Apple Mac OS X contains a use-after-free error in the WindowServer process that is triggered when handling CFData objects in memory. This may allow a local attacker to dereference already freed memory and gain elevated privileges. (CVE-2016-1804)

- Apple Mac OS X contains an array indexing flaw in the blit3d_submit_commands() function within the IOAcceleratorFamily component. This may allow a local attacker to corrupt memory and potentially execute arbitrary code with kernel privileges. (CVE-2016-1815)

- Multiple Apple products contains a flaw as HTTP and HTTPS requests are not properly handled. This may allow an attacker with the ability to intercept network traffic (e.g. MitM, DNS cache poisoning) to disclose transmitted data. (CVE-2016-1801)

- Multiple Apple products contain a flaw that is triggered when handling return values related to key lengths in CommonCrypto (CCCrypt). This may allow a local attacker to gain unauthorized access to sensitive user information. (CVE-2016-1802)

- Multiple Apple products contain a NULL pointer dereference flaw in CoreCapture that is triggered as input is not properly validated. This may allow a local attacker to cause a crash or potentially execute arbitrary code with kernel privileges. (CVE-2016-1803)

- Multiple Apple products contain a flaw related to disk images that is triggered by a race condition related to locking. This may allow a local attacker to gain unauthorized access to kernel memory information. (CVE-2016-1807)

- Multiple Apple products contain a flaw that is triggered as user-supplied input is not properly validated when handling disk images. This may allow a local attacker to corrupt memory to cause a denial of service or potentially execute arbitrary code. (CVE-2016-1808)

- Multiple Apple products contain a NULL pointer dereference flaw in ImageIO that is triggered when handling a specially crafted image. This may allow a context-dependent attacker to cause a denial of service. (CVE-2016-1811)

- Multiple Apple products contain an overflow condition in the IOAcceleratorFamily component that is triggered as user-supplied input is not properly validated. This may allow a local attacker to cause a buffer overflow and potentially execute arbitrary code with kernel privileges. (CVE-2016-1817)

- Multiple Apple products contains a flaw in the IOAcceleratorFamily component that is triggered as user-supplied input is not properly validated. This may allow a local attacker to corrupt memory and potentially execute arbitrary code with kernel privileges. (CVE-2016-1818)

- Multiple Apple products contain a use-after-free condition in the IOAcceleratorFamily component that is triggered as user-supplied input is not properly validated. This may allow a local attacker to dereference already freed memory and potentially execute arbitrary code with kernel privileges. (CVE-2016-1819)

- Multiple Apple products contain a NULL pointer dereference in IOAcceleratorFamily related to improper locking. This may allow a local attacker to cause a denial of service. (CVE-2016-1814)

- Multiple Apple products contain a NULL pointer dereference in the IOAccelSharedUserClient2::page_off_resource() function that is triggered as user-supplied input is not properly sanitized. This may allow a local attacker to cause a crash or potentially execute arbitrary code with kernel privileges. (CVE-2016-1813)

- Multiple Apple products contains an out-of-bounds access flaw in the IOHIDFamily component that is triggered as user-supplied input is not properly validated. This may allow a local attacker to corrupt memory and potentially execute arbitrary code with kernel privileges. (CVE-2016-1823)

- Multiple Apple products contains a flaw in the IOHIDFamily component. The issue is triggered as user-supplied input is not properly validated. This may allow a local attacker to corrupt memory to cause a denial of service or potentially execute arbitrary code with kernel privileges. (CVE-2016-1824)

- Multiple Apple products contain a flaw in the kernel. The issue is triggered as user-supplied input is not properly validated. This may allow a local attacker to corrupt memory and cause a denial of service or potentially execute arbitrary code with kernel privileges. (CVE-2016-1827, CVE-2016-1828, CVE-2016-1829, CVE-2016-1830, CVE-2016-1831)

- Multiple Apple products contains a flaw in libc. The issue is triggered as user-supplied input is not properly validated. This may allow a local attacker to corrupt memory and cause a denial of service or potentially execute arbitrary code. (CVE-2016-1832)

- Libxml2 contains an overflow condition in the xmlStrncatNew() function of xmlstring.c . The issue is triggered as user-supplied input is not properly validated when handling a string with a NULL. With a specially crafted file, a context-dependent attacker can cause a heap-based buffer overflow, resulting in a denial of service or potentially allowing the execution of arbitrary code. (CVE-2016-1834)

- Libxml2 contains a use-after-free error in the xmlParseStartTag2() function of parser.c. The issue is triggered when parsing complex names. With a specially crafted file, a context-dependent attacker can dereference already freed memory and potentially execute arbitrary code. (CVE-2016-1835)

- Libxml2 contains a use-after-free error in the xmlParseNCNameComplex() function of parser.c. The issue is triggered when parsing complex names. With a specially crafted file, a context-dependent attacker can dereference already freed memory and potentially execute arbitrary code. (CVE-2016-1836)

- Libxml2 contains an overflow condition in the htmlParseSystemLiteral() and htmlParsePubidLiteral() functions of HTMLparser.c. The issue is triggered as user-supplied input is not properly validated when parsing characters in a range. With a specially crafted file, a context-dependent attacker can cause a heap-based buffer overflow, resulting in a denial of service or potentially allowing the execution of arbitrary code. (CVE-2016-1837)

- Libxml2 contains an overflow condition in the xmlFAParseCharRange() function of xmlregexp.c. The issue is triggered as user-supplied input is not properly validated when parsing characters in a range. With a specially crafted file, a context-dependent attacker can cause a heap-based buffer overflow, resulting in a denial of service or potentially allowing the execution of arbitrary code. (CVE-2016-1840)

- Multiple Apple products contains a flaw in libxslt. The issue is triggered as user-supplied input is not properly validated when handling a specially crafted website. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code. (CVE-2016-1841)

- Multiple Apple products contain a flaw in MapKit that is triggered as shared links are transferred insecurely over HTTP. This may potentially allow a man-in-the-middle attacker to gain unauthorized access to sensitive information in these links. (CVE-2016-1842)

- Multiple Apple products contains a flaw in the OpenGL component. The issue is triggered as user-supplied input is not properly validated when handling specially crafted web content. This may allow a context-dependent attacker to corrupt memory and cause a denial of service or potentially execute arbitrary code. (CVE-2016-1847)

- Apple Mac OS X contains a flaw in the AMD component. The issue is triggered as user-supplied input is not properly validated. This may allow a local attacker to corrupt memory and potentially execute arbitrary code with kernel privileges. (CVE-2016-1792)

- Apple Mac OS X contains a flaw in the AMD component. The issue is triggered as bounds are not properly checked. This may allow a local attacker to determine kernel memory layout. (CVE-2016-1791)

- Apple Mac OS X contains a NULL pointer dereference flaw in the AppleGraphicsControl component that is triggered as user-supplied input is not properly validated. This may allow a local attacker to cause a crash or potentially execute arbitrary code with kernel privileges. (CVE-2016-1793)

- Apple Mac OS X contains a NULL pointer dereference flaw in the AppleGraphicsControlClient::checkArguments() function in AppleMuxControl.kext that is triggered as user-supplied input is not properly validated. This may allow a local attacker to cause a crash or potentially execute arbitrary code with kernel privileges. (CVE-2016-1794)

- Apple Mac OS X contains a flaw in the AppleGraphicsPowerManagement component. The issue is triggered as user-supplied input is not properly validated. This may allow a local attacker to corrupt memory and potentially execute arbitrary code with kernel privileges. (CVE-2016-1795)

- Apple Mac OS X contains an out-of-bounds read flaw in the ATS component. This may allow a local attacker to potentially disclose kernel memory layout. (CVE-2016-1796)

- Apple Mac OS X contains a flaw in the ATS component that is triggered the sandbox policy is not properly implemented for FontValidator. This may allow a local attacker to potentially execute arbitrary code with system privileges. (CVE-2016-1797)

- Apple Mac OS X contains a NULL pointer dereference flaw in the Audio component that is triggered as user-supplied input is not properly validated. This may allow a local attacker to cause a denial of service. (CVE-2016-1798)

- Apple Mac OS X contains a flaw in the Audio component. The issue is triggered as user-supplied input is not properly validated. This may allow a local attacker to corrupt memory and potentially execute arbitrary code with kernel privileges. (CVE-2016-1799)

- Apple Mac OS X contains a flaw in the Captive Network Assistant component that is triggered as URL schemes are not properly validated. This may allow a user-assisted, man-in-the-middle attacker to potentially execute arbitrary code. (CVE-2016-1800)

- Apple Mac OS X contains an unspecified configuration flaw in the CoreStorage component. This may allow a local attacker to potentially execute arbitrary code with kernel privileges. (CVE-2016-1805)

- Apple Mac OS X contains a flaw in the Crash Reporter component (com.apple.SubmitDiagInfo) that is triggered when handling user-supplied paths when creating directories. This may allow a local attacker to execute arbitrary code with root privileges. (CVE-2016-1806)

- Apple Mac OS X contains a flaw in the Disk Utility component that is triggered as the incorrect keys were used to encrypt disk images. This may result in disk images not being properly compressed and encrypted. (CVE-2016-1809)

- Apple Mac OS X contains a NULL pointer dereference flaw in the ImageIO component that is triggered when handling a specially crafted image. This may allow a context-dependent attacker to cause a denial of service. (CVE-2016-1810)

- Apple Mac OS X contains an overflow condition in the Intel Graphics Driver component. The issue is triggered as user-supplied input is not properly validated. This may allow a local attacker to cause a buffer overflow, resulting in a denial of service or potentially allowing the execution of arbitrary code with kernel privileges. (CVE-2016-1812)

- Apple Mac OS X contains a NULL pointer dereference in IOAcceleratorFamily that is triggered as user-supplied input is not properly sanitized. This may allow a local attacker to execute arbitrary code with kernel privileges. (CVE-2016-1816)

- Apple Mac OS X contains an overflow condition in the IOAudioFamily component. The issue is triggered as user-supplied input is not properly validated. This may allow a local attacker to cause a buffer overflow, resulting in a denial of service or potentially allowing the execution of arbitrary code with kernel privileges. (CVE-2016-1820)

- Apple Mac OS X contains a NULL pointer dereference in the IOAudioFamily component. This may allow a local attacker to cause a crash or potentially execute arbitrary code with kernel privileges. (CVE-2016-1821)

- Apple Mac OS X contains a flaw in the IOFireWireFamily component. The issue is triggered as user-supplied input is not properly validated. This may allow a local attacker to corrupt memory and cause a denial of service or potentially execute arbitrary code with kernel privileges. (CVE-2016-1822)

- Apple Mac OS X contains multiple flaws in the IOHIDFamily component. These issues are triggered as user-supplied input is not properly validated. This may allow a local attacker to corrupt memory and cause a denial of service or potentially execute arbitrary code with kernel privileges. (CVE-2016-1825)

- Apple Mac OS X contains an integer overflow condition in its dtrace implementation. The issue is triggered as user-supplied input is not properly validated. This may allow a local attacker to execute arbitrary code with kernel privileges. (CVE-2016-1826)

- Apple Mac OS X contains a flaw in the Messages component that is triggered by a failure to properly validate roster changes. This may allow an authenticated remote attacker, or a malicious server, to manipulate another user's contact list. (CVE-2016-1844)

- Apple Mac OS X contains a flaw in the Messages component that is triggered by an encoding issue in filename parsing. This may allow a remote attacker to gain unauthorized access to potentially sensitive user information. (CVE-2016-1843)

- Apple Mac OS X contains a NULL pointer dereference flaw in the nvCommandQueue::GetHandleIndex() function in the NVIDIA Graphics Driver (GeForce.kext). This may allow a local attacker to cause a crash or potentially execute arbitrary code with kernel privileges. (CVE-2016-1846)

- Apple Mac OS X contains a flaw in the QuickTime component. The issue is triggered as user-supplied input is not properly validated when handling a specially crafted file. This may allow a context-dependent attacker to corrupt memory and cause a denial of service or potentially execute arbitrary code. (CVE-2016-1848)

- Apple Mac OS X contains a flaw in the SceneKit component. The issue is triggered as user-supplied input is not properly validated when handling a specially crafted file. This may allow a context-dependent attacker to corrupt memory and cause a denial of service or potentially execute arbitrary code. (CVE-2016-1850)

- Apple Mac OS X contains a flaw in the management of password profiles. This may allow a physically present attacker to bypass the screen lock and reset an expired password. (CVE-2016-1851)

- Apple Mac OS X contains a flaw in the Tcl component related to the usage of SSLv2. This may potentially allow an attacker with the ability to intercept network traffic (e.g. MitM, DNS cache poisoning) to disclose transmitted data. (CVE-2016-1853)

- Apple Mac OS X contains an overflow condition in the NVIDIA Graphics Driver (GeForce.kext). This may allow a local attacker to cause a stack-based buffer overflow and potentially execute arbitrary code with kernel privileges. (CVE-2016-1861)

- No description supplied (CVE-2016-1833, CVE-2016-1839, CVE-2016-1815, CVE-2016-1804)

ID	Name	Product	Family	Published	Updated	Severity
92411	Apple iTunes < 12.4.2 多個弱點 (未經認證的檢查)	Nessus	Peer-To-Peer File Sharing	7/19/2016	11/19/2019	critical
92496	Mac OS X 10.11.x < 10.11.6 多個弱點	Nessus	MacOS X Local Security Checks	7/21/2016	5/28/2024	critical
97893	Tenable Log Correlation Engine (LCE) < 4.8.1 Multiple Vulnerabilities	Nessus	Misc.	3/22/2017	10/25/2021	critical
92359	Apple iOS < 9.3.3 多個弱點	Nessus	Mobile Devices	7/19/2016	7/14/2025	critical
9332	Apple iOS < 9.3.2 Multiple Vulnerabilities	Nessus Network Monitor	Mobile Devices	5/26/2016	3/6/2019	high
9392	Mac OS X 10.11.x < 10.11.5 Multiple Vulnerabilities	Nessus Network Monitor	Operating System Detection	7/13/2016	3/6/2019	high
9337	Apple TV < 9.2.1 Multiple Vulnerabilities	Nessus Network Monitor	Internet Services	5/27/2016	3/6/2019	high
802004	macOS < 10.11.5 Multiple Vulnerabilities	Log Correlation Engine	Operating System Detection	8/23/2016		high

Detections

Analytics

Plugins Search

critical

critical

critical

critical

high

high

high

high