ServiceNow Public Knowledge Base Detected

ServiceNow offers a knowledge management module to help organizations sharing internal or public information to help in their service usages. This informational plugin detects the presence of public knowledge bases on the target ServiceNow instance. No source data...

Drupal 8.0.x < 10.3.14 Cross-Site Scripting

According to its self-reported version, the instance of Drupal running on the remote web server is 11.1.x prior to 11.1.5, 11.0.x prior to 11.0.13, 10.4.x prior to 10.4.5 or 8.x prior to 10.3.14. Drupal core Link field attributes are not sufficiently sanitized, which can lead to a Cross-Site...

RockyLinux 9 : edk2:20240524 (RLSA-2024:11219)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:11219 advisory. edk2: Integer overflows in PeCoffLoaderRelocateImage CVE-2024-38796 Tenable has extracted the preceding description block directly from the RockyLinux security...

Fedora 41 : python-django4.2 (2025-da3777e8c4)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-da3777e8c4 advisory. ix for CVE-2025-26699: Potential denial-of-service vulnerability in django.utils.text.wrap Tenable has extracted the preceding description block directly fro...

Fedora 40 : python-django (2025-9c039322cf)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-9c039322cf advisory. Fix for CVE-2025-26699: Potential denial-of-service vulnerability in django.utils.text.wrap Tenable has extracted the preceding description block directly fr...

FlowiseAI Arbitrary File Upload

Flowise is vulnerable to an attack allowing an unauthenticated attacker to upload an arbitrary file. This detection is included in the AI and LLM category. Note that this plugin requires the 'File Upload' assessment option enabled in the scan configuration. No source data...

ConnectWise ScreenConnect Detected

This is an informational notice that the scanner was able to detect a ConnectWise ScreenConnect instance on the target server. Note that this detection is included in the Remote Access Tools category. No source data...

RustDesk API Admin Registration Enabled

RustDesk is a remote access and control software that enables management of computers and other devices. RustDesk API Admin is a RESTful API allowing automation and integration of RustDesk functionality into other systems. The registration is enabled on the target API Admin interface, allowing a...

GitLab Public Projects Detected

This is an informational notice that the scanner was able to detect public projects on the target GitLab instance. No source data...

Apple iOS < 18.3.2 Vulnerability (122281)

Binary data appleios1832check.nbin...

OpenVPN Access Server Detected

This is an informational notice that the scanner was able to detect an OpenVPN Access Server on the target server. Note that this detection is included in the Remote Access Tools category. No source data...

AirDroid Detected

This is an informational notice that the scanner was able to detect an AirDroid instance on the target server. Note that this detection is included in the Remote Access Tools category. No source data...

Linux Distros Unpatched Vulnerability : CVE-2014-9066

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Xen 4.4.x and earlier, when using a large number of VCPUs, does not properly handle read and write locks, which allows local x86 guest users to cause a denial o...

Amazon Linux AMI : kernel (ALAS-2025-1963)

The version of kernel installed on the remote host is prior to 4.14.352-190.569. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2025-1963 advisory. In the Linux kernel, the following vulnerability has been resolved: bonding: Fix out-of-bounds read in...

Linux Distros Unpatched Vulnerability : CVE-2024-56580

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: media: qcom: camss: fix error path on configuration of power domains There is a chance to me...

Linux Distros Unpatched Vulnerability : CVE-2024-50165

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve param-string when parsing mount options In bpfparseparam, keep the value of...

Linux Distros Unpatched Vulnerability : CVE-2024-56678

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: powerpc/mm/fault: Fix kfence page fault reporting copyfromkernelnofault can be called when...

Linux Distros Unpatched Vulnerability : CVE-2024-53081

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: media: ar0521: don't overflow when checking PLL values The PLL checks are comparing 64 bit...

Linux Distros Unpatched Vulnerability : CVE-2024-53085

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tpm: Lock TPM chip in tpmpmsuspend first Setting TPMCHIPFLAGSUSPENDED in the end of tpmpmsuspend can be racy according, as this leaves window for tpmhwrngread t...

Linux Distros Unpatched Vulnerability : CVE-2024-53146

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NFSD: Prevent a potential integer overflow If the tag length is = U32MAX - 3 then the length + 4 addition can result in an integer overflow. Address this by...