Lucene search
+L

60116 matches found

Tenable Nessus
Tenable Nessus
added 2024/10/17 12:00 a.m.49 views

SolarWinds Web Help Desk < 12.8.3 HF 3 Java Deserialization RCE

The version of SolarWinds Web Help Desk installed on the remote host is prior to 12.8.3 HF3. It is, therefore, affected by a Java deserialization remote-code execution vulnerability, that, if exploited, would allow an attacker to run commands on the host machine. Note that Nessus has not tested f...

9.8CVSS6.3AI score0.39351EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2024/10/17 12:00 a.m.25 views

CBL Mariner 2.0 Security Update: reaper (CVE-2024-43800)

The version of reaper installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-43800 advisory. - serve-static serves static files. serve-static passes untrusted user input - even after sanitizing it - to...

5CVSS6.9AI score0.00631EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/10/17 12:00 a.m.36 views

Oracle WebCenter Sites (October 2024 CPU)

The 12.2.1.4.0 versions of WebCenter Sites installed on the remote host are affected by a vulnerability as referenced in the October 2024 CPU advisory. - Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware component: WebCenter Sites jose4j. The supported version that i...

6.5CVSS6.9AI score0.00879EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2024/10/17 12:00 a.m.52 views

Oracle MySQL Server 8.0.x < 8.0.40 (January 2025 CPU)

The versions of MySQL Server installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2025 CPU advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Packaging Kerberos. Supported versions that are affected are 8.0.39 and...

9.1CVSS6.5AI score0.17301EPSS
SaveExploits2References33
Tenable Nessus
Tenable Nessus
added 2024/10/17 12:00 a.m.149 views

Oracle WebLogic Server (October 2024 CPU)

The 12.2.1.4.0 and 14.1.1.0.0 versions of WebLogic Server installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2024 CPU advisory: - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions tha...

9.8CVSS6.6AI score0.01939EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2024/10/17 12:00 a.m.17 views

PT-2024-33357 · Unknown · Cookie Scanner

Name of the Vulnerable Software and Affected Versions: Cookie Scanner versions 1.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that also allows Stored XSS in Cookie Scanner. This means an attacker can perform unintended actions on a user's account without...

7.1CVSS6.2AI score0.00161EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2024/10/17 12:00 a.m.8 views

Fedora 40 : dnsdist (2024-4ffc26d8cb)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-4ffc26d8cb advisory. Update to latest upstream Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

7.5CVSS5.5AI score0.01078EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/10/17 12:00 a.m.64 views

Remote Desktop client for Windows RCE (October 2024)

The Windows Remote Desktop client for Windows installed on the remote host is missing security updates. It is, therefore, affected by a remote-code execution vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

8.8CVSS5.7AI score0.01496EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2024/10/17 12:00 a.m.24 views

CBL Mariner 2.0 Security Update: OpenIPMI (CVE-2024-42934)

The version of OpenIPMI installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42934 advisory. - OpenIPMI before 2.0.36 has an out-of-bounds array access for authentication type in the ipmisim simulator,...

5CVSS5.6AI score0.00392EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/10/17 12:00 a.m.7 views

Fedora 39 : python-virtualenv (2024-f7d6b76677)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-f7d6b76677 advisory. - Prevent command injection by quoting template strings in activation scripts Tenable has extracted the preceding description block directly from the Fedora...

5.7AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2024/10/17 12:00 a.m.25 views

Oracle Linux 8 / 9 : java-21-openjdk (ELSA-2024-8127)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-8127 advisory. 1:21.0.5.0.10-3.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:21.0.5.0.10-3 - Sync the copy of the portable specfile with the latest update -...

7.1CVSS6.7AI score0.01149EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
added 2024/10/16 12:00 a.m.27 views

Qnap QTS Server-Side Request Forgery (SSRF) (CVE-2023-39301)

A server-side request forgery SSRF vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to read application data via a network. We have already fixed the vulnerability in the following versions: QTS...

4.3CVSS5.2AI score0.00335EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/10/16 12:00 a.m.13 views

Qnap QTS Classic Buffer Overflow (CVE-2023-50362)

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network. We have already fixed the vulnerability in the following versions: QTS...

8.8CVSS5.9AI score0.00759EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/10/16 12:00 a.m.15 views

Qnap QTS Cross-site Scripting (CVE-2018-19943)

If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. QNAP has already fixed these issues in the following QTS versions. QTS 4.4.2.1270 build 20200410 and later QTS 4.4.1.1261 build 20200330 and later QTS 4.3.6.1263 build 20200330 and later Q...

8CVSS5.3AI score0.17705EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/10/16 12:00 a.m.15 views

Qnap QTS OS Command Injection (CVE-2023-34979)

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 4.5.4.2790...

7.2CVSS5.5AI score0.01073EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/10/16 12:00 a.m.19 views

Qnap QTS OS Command Injection (CVE-2023-23368)

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2376 build 20230421 and later...

9.8CVSS8.7AI score0.18833EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/10/16 12:00 a.m.28 views

Qnap QTS Cross-site Scripting (CVE-2024-21897)

A cross-site scripting XSS vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.6.2722...

8.9CVSS5.1AI score0.00326EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/10/16 12:00 a.m.17 views

Qnap QTS NULL Pointer Dereference (CVE-2018-14747)

NULL Pointer Dereference vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.2.6 build 20180829 and earlier versions could allow remote attackers to crash the NAS media server. This plugin only works with Tenable.ot. Please visit...

7.5CVSS7.7AI score0.01258EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/10/16 12:00 a.m.16 views

Qnap QTS Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2017-17032)

A buffer overflow vulnerability in password function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 Beta 2 build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices. This plugin only works with Tenable.ot. Please visit...

9.8CVSS9.2AI score0.03284EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2024/10/16 12:00 a.m.17 views

Qnap QTS Command Injection (CVE-2020-2492)

If exploited, the command injection vulnerability could allow remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. QTS versions prior to 4.4.3.1421 on build 20200907. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot...

7.2CVSS7.5AI score0.01703EPSS
SaveExploits0References2
Rows per page
Query Builder