Apache MINA JAR Detection

Binary data apacheminainstalled.nbin...

GitHub Workflow Detected

GitHub Actions are a feature from the popular GitHub platform for automating software development workflows directly within a GitHub source code repository. By defining one or more workflows files in the /.github/ directory of their repositories, developers can customize their applications build...

Envoy Admin Interface Exposed

The Envoy Admin interface is an optional Envoy component that lets you view configuration and statistics, modify server behavior and filter traffic according to specific filter rules. But this unauthenticated interface can expose private information about the running service, allows modification ...

Ollama Multiples Vulnerabilities

According to the self-reported version in its response header, the version of Ollama hosted on the remote is, affected by a Multiples Vulnerabilities : - File existence disclosure through the api. When calling the CreateModel route with a path parameter that does not exist - A Denial Of Service...

mySCADA PRO Manager Detection

Binary data myscadapromanagerdetect.nbin...

Microsoft Remote Desktop Web Access Detected

This is an informational plugin to inform the user that the scanner has detected a publicly accessible Microsoft Remote Desktop Web Access instance on the target application. No source data...

Ollama < 0.4.0 Remote Code Execution

According to the self-reported version in its response header, the version of Ollama hosted on the remote web server is 0.4.0. It is, therefore, affected by a Remote Code Execution. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reporte...

Fedora 40 : rsync (2025-b28759cb95)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-b28759cb95 advisory. New version 3.4.1, a couple of fixes for the 3.4.0 release. Tenable has extracted the preceding description block directly from the Fedora security advisory...

FreeBSD : electron32 -- multiple vulnerabilities (ef303b6a-7d9e-4e28-b92e-21f39d519d9e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the ef303b6a-7d9e-4e28-b92e-21f39d519d9e advisory. Electron developers report: This update fixes the following vulnerabilities: Tenable has...

CBL Mariner 2.0 Security Update: rsync (CVE-2024-12087)

The version of rsync installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-12087 advisory. - A path traversal vulnerability exists in rsync. It stems from behavior enabled by the --inc-recursive option,...

Vim < 9.1.1043 Out-of-bounds Write

A segmentation fault was found in Vim before 9.1.1043. In silent Ex mode -s -e, Vim typically doesn't show a screen and just operates silently in batch mode. However, it is still possible to trigger the function that handles the scrolling of a gui version of Vim by feeding some binary characters ...

Oracle Linux 9 : kernel (ELSA-2025-0578)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-0578 advisory. - arm64/sve: Discard stale CPU state when handling SVE traps Mark Salter RHEL-72218 CVE-2024-50275 - i40e: fix race condition by adding filter's...

Fedora 41 : git-lfs (2025-1de066b8af)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-1de066b8af advisory. Update to latest version Fix CVE-2024-53263 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

Golang 1.22 < 1.22.11 / 1.23 < 1.23.5 Multiple Vulnerabilities

The version of Golang running on the remote host is 1.24 prior to 1.24rc2. It is, therefore, is affected by multiple vulnerabilities: - net/http: Sensitive headers are incorrectly sent after cross-domain redirect CVE-2024-45336 - crypto/x509: usage of IPv6 zone IDs can bypass URI name constraints...

Fedora 40 : git-lfs (2025-50deb0acd5)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-50deb0acd5 advisory. Update to latest version Fix CVE-2024-53263 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

ServiceNow Platform Web Interface Detection

Binary data servicenowplatformwebdetect.nbin...

SAP NetWeaver AS ABAP (3550708)

The remote SAP NetWeaver ABAP server may be affected by a improper access control vulnerability. The ABAP Application Server of SAP NetWeaver as well as ABAP Platform allows an attacker to access restricted information due to weak access controls. This can have a significant impact on the...

CVE-2025-22723

Unrestricted Upload of File with Dangerous Type vulnerability in Dmitry V. CEO of "UKR Solution" Barcode Scanner with Inventory & Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders allows Upload a Web Shell to a Web Server.This issue affects Barcode Scanner with...

CVE-2025-22723

CVE-2025-22723 concerns the UkrSolution Barcode Scanner with Inventory & Order Manager (Barcode Scanner plugin). The issue is an unrestricted upload of a file with a dangerous type, enabling an attacker to upload a web shell to the web server. Impact is described as high/high in the CVE metrics (...

CVE-2025-22723 WordPress Barcode Scanner and Inventory manager plugin <= 1.6.7 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Dmitry V. CEO of "UKR Solution" Barcode Scanner with Inventory & Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders allows Upload a Web Shell to a Web Server.This issue affects Barcode Scanner with...