SAP NetWeaver AS Java Path Traversal (CVE-2017-12637)

Binary data sapnetweaverasCVE-2017-12637.nbin...

Ingress NGINX Admission Controller Web Detection

Binary data ingressnginxadmissioncontrollerwebdetect.nbin...

Spring Security 5.7 < 5.7.16 / 5.8 < 5.8.18 / 6.0 < 6.0.16 / 6.1 < 6.1.14 / 6.2 < 6.2.10 / 6.3 < 6.3.8 / 6.4 < 6.4.4 Authentication Bypass (CVE-2025-22228)

The remote host contains a Spring Security version that is 5.7 prior to 5.7.16, 5.8 prior to 5.8.18, 6.0 prior to 6.0.16, 6.1 prior to 6.1.14, 6.2 prior to 6.2.10, or 6.3 prior to 6.3.8, 6.4 prior to 6.4.4. It may, therefore, be affected by an authentication bypass vulnerability...

GitLab 17.4 < 17.8.6 / 17.9 < 17.9.3 / 17.10 < 17.10.1 (CVE-2025-2242)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An improper access control vulnerability in GitLab CE/EE affecting all versions from 17.4 prior to 17.8.6, 17.9 prior to 17.9.3, and 17.10 prior to 17.10.1 allows a user who was an instance admin befo...

SonicWall HTTP Login Scanner

This module adds HTTP Login scanning for SonicWall NSv. It allows scanning both admin and user accounts. Module Options msf use auxiliary/scanner/sonicwall/sonicwalllogin msf auxiliarysonicwalllogin show actions ...actions... msf auxiliarysonicwalllogin set ACTION msf auxiliarysonicwalllogin show...

Podman Installed (Linux)

Binary data podmandetect.nbin...

GO-2025-3566 ingress-nginx controller - configuration injection via unsanitized auth-url annotation in k8s.io/ingress-nginx

ingress-nginx controller - configuration injection via unsanitized auth-url annotation in k8s.io/ingress-nginx. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports...

Fedora 41 : OpenIPMI (2025-ae55d50be2)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-ae55d50be2 advisory. Update to 2.0.36 Fixes CVE-2024-42934 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

ServiceNow Public Knowledge Base Detected

ServiceNow offers a knowledge management module to help organizations sharing internal or public information to help in their service usages. This informational plugin detects the presence of public knowledge bases on the target ServiceNow instance. No source data...

Drupal 8.0.x < 10.3.14 Cross-Site Scripting

According to its self-reported version, the instance of Drupal running on the remote web server is 11.1.x prior to 11.1.5, 11.0.x prior to 11.0.13, 10.4.x prior to 10.4.5 or 8.x prior to 10.3.14. Drupal core Link field attributes are not sufficiently sanitized, which can lead to a Cross-Site...

RustDesk Installed (Linux)

Binary data rustdesklinuxinstalled.nbin...

Fedora 40 : jupyterlab (2025-1d68ba6806)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-1d68ba6806 advisory. Update to 4.3.6 rhbz2352545 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...

Fedora 40 : ffmpeg (2025-34c88263fe)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-34c88263fe advisory. Backported fix for CVE-2024-12361 . Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has no...

SimpleHelp Detection

Binary data simplehelpwebuidetect.nbin...

Ollama Installed (Linux)

Binary data ollamanixinstalled.nbin...

Wordfence Intelligence Weekly WordPress Vulnerability Report (March 10, 2025 to March 16, 2025)

Did you know Wordfence runs aBug Bounty Program for all WordPress plugins and themes at no cost to vendors? Researchers can earn up to $31,200 per vulnerability , for all in-scope vulnerabilities submitted to our Bug Bounty Program! Find a vulnerability, submit the details directly to us, and we...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: opa, docker, osv-scanner, wolfictl, zarf, neuvector-scanner, linkerd2, cilium-cli, melange, envoy-gateway, kubescape, eksctl, zot, spegel, ctop, k3s, k8ssandra-client, newrelic-infrastructure-agent, dagger, opa-envoy, fuse-overlayfs-snapshotter, docker-compose,...

Fedora 41 : tigervnc (2025-96f8a2da96)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-96f8a2da96 advisory. Tigervnc 1.15.0 update. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Azure Linux 3.0 Security Update: kernel (CVE-2024-56634)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56634 advisory. - In the Linux kernel, the following vulnerability has been resolved: gpio: grgpio: Add NULL check in...

CBL Mariner 2.0 Security Update: qt5-qtbase (CVE-2023-34410)

The version of qt5-qtbase installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-34410 advisory. - An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2...