Schneider Electric Discontinued Devices Detection

The current plugin identifies Schneider devices that are currently discontinued. Schneider Lifecycle Statuses: - Active: Most current offering within a product category. - End of Life: Discontinued date announced - actively execute migrations and last time buys. Product generally orderable until...

RockyLinux 9 : doxygen (RLSA-2025:1329)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:1329 advisory. jquery: Untrusted code execution via tag in HTML passed to DOM manipulation methods CVE-2020-11023 Tenable has extracted the preceding description block directly...

RockyLinux 9 : gcc (RLSA-2025:1346)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:1346 advisory. jquery: Untrusted code execution via tag in HTML passed to DOM manipulation methods CVE-2020-11023 Tenable has extracted the preceding description block directly...

FlowiseAI Arbitrary File Upload

Flowise is vulnerable to an attack allowing an unauthenticated attacker to upload an arbitrary file. This detection is included in the AI and LLM category. Note that this plugin requires the 'File Upload' assessment option enabled in the scan configuration. No source data...

Pritunl Client Installed (MacOSX)

Binary data pritunlclientmacosinstalled.nbin...

PHP 8.4.x < 8.4.5 Multiple Vulnerabilities

According to its self-reported version number, the version of PHP installed on the remote host is 8.1.x prior to 8.1.32, 8.2.x prior to 8.2.28, 8.3.x prior to 8.3.19, or 8.4.x prior to 8.4.5. It is, therefore, affected by multiple vulnerabilities: - libxml streams use wrong content-type header wh...

SEO Automatic Seo Tools Plugin for WordPress Cross-Site Scripting

The WordPress SEO Automatic Seo Tools Plugin installed on the remote host is affected by a Cross-Site Scripting. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...

Exploit for Deserialization of Untrusted Data in Apache Tomcat

CVE-2025-24813-Scanner CVE-2025-24813 - Apache Tomcat Vulner...

Apache Camel JAR Detection

Binary data apachecameljardetect.nbin...

Microsoft HPC Node Installed (Linux)

Binary data microsofthpcnodenixinstalled.nbin...

Google Chrome Remote Desktop Installed (macOS)

Binary data googlechromeremotedesktopmacinstalled.nbin...

Fedora 41 : ffmpeg (2025-ab5fe60520)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-ab5fe60520 advisory. Latest maintenance release from 7.1 branch. Changelog: https://github.com/FFmpeg/FFmpeg/blob/n7.1.1/Changelog . Contains backported fix for...

openSUSE 15 Security Update : chromium (openSUSE-SU-2025:0089-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025:0089-1 advisory. Chromium 134.0.6998.88 stable released 2025-03-11 boo1239216 CVE-2025-1920: Type Confusion in V8 CVE-2025-2135: Type Confusion in V8 CVE-2025-213...

Unity Parsec Installed (Linux / Unix)

Binary data unityparsecnixinstalled.nbin...

HPE Insight Remote Support Detection

Binary data hpeinsightremotesupportdetect.nbin...

GoTo LogMeIn Installed (macOS)

Binary data gotologmeinmacinstalled.nbin...

ConnectWise ScreenConnect Detected

This is an informational notice that the scanner was able to detect a ConnectWise ScreenConnect instance on the target server. Note that this detection is included in the Remote Access Tools category. No source data...

Unity Parsec Installed (Windows)

Binary data unityparsecwininstalled.nbin...

HPE Insight Remote Support XXE (CVE-2024-53675)

Binary data hpeinsightremotesupportcve-2024-53675.nbin...

RealVNC Connect Server Installed (macOS)

Binary data realvncconnectservermacinstalled.nbin...