Lucene search
+L

60117 matches found

Tenable Nessus
Tenable Nessus
added 2024/10/17 12:00 a.m.30 views

Nagios XI < 2024R1 API Key Security

According to the self-reported version of Nagios XI, the remote host is affected by a vulnerability related to the generation of API keys. Nagios XI before 5.11.3 2024R1 was discovered to improperly handle API keys generation randomly-generated, allowing attackers to possibly generate the same se...

9.1CVSS5.7AI score0.01542EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2024/10/17 12:00 a.m.32 views

SolarWinds Platform 2024.2.0 < 2024.4 Multiple Vulnerabilities XSS

The version of SolarWinds Platform installed on the remote host is prior to 2024.4. It is, therefore, affected by multiple vulnerabilities as referenced in the solarwindsplatform20244 advisory. - SolarWinds Platform is susceptible to an Uncontrolled Search Path Element Local Privilege Escalation...

7.8CVSS5.6AI score0.00334EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2024/10/17 12:00 a.m.7 views

Fedora 39 : python-virtualenv (2024-f7d6b76677)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-f7d6b76677 advisory. - Prevent command injection by quoting template strings in activation scripts Tenable has extracted the preceding description block directly from the Fedora...

5.7AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2024/10/17 12:00 a.m.8 views

Fedora 40 : dnsdist (2024-4ffc26d8cb)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-4ffc26d8cb advisory. Update to latest upstream Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

7.5CVSS5.5AI score0.01078EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/10/17 12:00 a.m.64 views

Remote Desktop client for Windows RCE (October 2024)

The Windows Remote Desktop client for Windows installed on the remote host is missing security updates. It is, therefore, affected by a remote-code execution vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

8.8CVSS5.7AI score0.01496EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2024/10/17 12:00 a.m.25 views

Oracle Linux 8 / 9 : java-21-openjdk (ELSA-2024-8127)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-8127 advisory. 1:21.0.5.0.10-3.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:21.0.5.0.10-3 - Sync the copy of the portable specfile with the latest update -...

7.1CVSS6.7AI score0.01149EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
added 2024/10/17 12:00 a.m.24 views

CBL Mariner 2.0 Security Update: OpenIPMI (CVE-2024-42934)

The version of OpenIPMI installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42934 advisory. - OpenIPMI before 2.0.36 has an out-of-bounds array access for authentication type in the ipmisim simulator,...

5CVSS5.6AI score0.00392EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/10/17 12:00 a.m.52 views

Oracle MySQL Server 8.0.x < 8.0.40 (January 2025 CPU)

The versions of MySQL Server installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2025 CPU advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Packaging Kerberos. Supported versions that are affected are 8.0.39 and...

9.1CVSS6.5AI score0.17301EPSS
SaveExploits2References33
Tenable Nessus
Tenable Nessus
added 2024/10/17 12:00 a.m.25 views

CBL Mariner 2.0 Security Update: reaper (CVE-2024-43800)

The version of reaper installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-43800 advisory. - serve-static serves static files. serve-static passes untrusted user input - even after sanitizing it - to...

5CVSS6.9AI score0.00631EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/10/17 12:00 a.m.36 views

Oracle WebCenter Sites (October 2024 CPU)

The 12.2.1.4.0 versions of WebCenter Sites installed on the remote host are affected by a vulnerability as referenced in the October 2024 CPU advisory. - Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware component: WebCenter Sites jose4j. The supported version that i...

6.5CVSS6.9AI score0.00879EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2024/10/17 12:00 a.m.49 views

SolarWinds Web Help Desk < 12.8.3 HF 3 Java Deserialization RCE

The version of SolarWinds Web Help Desk installed on the remote host is prior to 12.8.3 HF3. It is, therefore, affected by a Java deserialization remote-code execution vulnerability, that, if exploited, would allow an attacker to run commands on the host machine. Note that Nessus has not tested f...

9.8CVSS6.3AI score0.39351EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2024/10/17 12:00 a.m.149 views

Oracle WebLogic Server (October 2024 CPU)

The 12.2.1.4.0 and 14.1.1.0.0 versions of WebLogic Server installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2024 CPU advisory: - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions tha...

9.8CVSS6.6AI score0.01939EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2024/10/16 12:00 a.m.15 views

Qnap QTS Cross-site Scripting (CVE-2018-19943)

If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. QNAP has already fixed these issues in the following QTS versions. QTS 4.4.2.1270 build 20200410 and later QTS 4.4.1.1261 build 20200330 and later QTS 4.3.6.1263 build 20200330 and later Q...

8CVSS5.3AI score0.17705EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/10/16 12:00 a.m.17 views

Qnap QTS NULL Pointer Dereference (CVE-2018-14747)

NULL Pointer Dereference vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.2.6 build 20180829 and earlier versions could allow remote attackers to crash the NAS media server. This plugin only works with Tenable.ot. Please visit...

7.5CVSS7.7AI score0.01258EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/10/16 12:00 a.m.16 views

Qnap QTS Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2017-17032)

A buffer overflow vulnerability in password function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 Beta 2 build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices. This plugin only works with Tenable.ot. Please visit...

9.8CVSS9.2AI score0.03284EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2024/10/16 12:00 a.m.13 views

Qnap QTS Classic Buffer Overflow (CVE-2023-50362)

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network. We have already fixed the vulnerability in the following versions: QTS...

8.8CVSS5.9AI score0.00759EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/10/16 12:00 a.m.27 views

Qnap QTS Server-Side Request Forgery (SSRF) (CVE-2023-39301)

A server-side request forgery SSRF vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to read application data via a network. We have already fixed the vulnerability in the following versions: QTS...

4.3CVSS5.2AI score0.00335EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/10/16 12:00 a.m.4 views

SUSE Linux Enterprise Server For SAP SEoL (12.3.x)

According to its version, SUSE Linux Enterprise Server For SAP is 12.3.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities...

5.5AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2024/10/16 12:00 a.m.17 views

Qnap QTS Cross-site Scripting (CVE-2015-5664)

Cross-site scripting XSS vulnerability in File Station in QNAP QTS before 4.2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

6.1CVSS6.4AI score0.01021EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2024/10/16 12:00 a.m.8 views

SUSE Linux Enterprise Server For SAP SEoL (15.0.x)

According to its version, SUSE Linux Enterprise Server For SAP is 15.0.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities...

5.5AI score
SaveExploits0References1
Rows per page
Query Builder