Tenable Agent Identification

Binary data agentidentify.nbin...

Tenable Identity Exposure < 3.59.4 Multiple Vulnerabilities (TNS-2024-04)

The version of Tenable Identity Exposure formerly Tenable.ad installed on the remote host is prior to 3.59.4. It is, therefore, affected by multiple vulnerabilities in the bundled .NET core component as referenced in the TNS-2024-04 advisory. - .NET, .NET Framework, and Visual Studio Security...

MikroTik RouterOS Out-of-bounds Write (CVE-2018-1156)

Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to stack buffer overflow through the license upgrade interface. This vulnerability could theoretically allow a remote authenticated attacker execute arbitrary code on the system. This plugin only works with Tenable.ot. Please visit...

MikroTik RouterOs Out-of-bounds Write (CVE-2020-20231)

Mikrotik RouterOs through stable version 6.48.3 suffers from a memory corruption vulnerability in the /nova/bin/detnet process. An authenticated remote attacker can cause a Denial of Service NULL pointer dereference. This plugin only works with Tenable.ot. Please visit...

CVE-2024-1683 DLL Injection in Tenable Identity Exposure Secure Relay

A DLL injection vulnerability exists where an authenticated, low-privileged local attacker could modify application files on the TIE Secure Relay host, which could allow for overriding of the configuration and running of new Secure Relay services...

CVE-2024-1683 DLL Injection in Tenable Identity Exposure Secure Relay

A DLL injection vulnerability exists where an authenticated, low-privileged local attacker could modify application files on the TIE Secure Relay host, which could allow for overriding of the configuration and running of new Secure Relay services...

Tenable Identity Exposure Secure Relay Operating System Command Injection Vulnerability

Tenable Identity Exposure Secure Relay is a schema for transferring Active Directory data from the network to Tenable Identity Exposure using Transport Layer Security TLS from Tenable USA. A security vulnerability exists in Tenable Identity Exposure Secure Relay versions prior to 3.59.4, which...

[R2] Tenable Identity Exposure Version 3.59.4 Fixes Multiple Vulnerabilities

R2 Tenable Identity Exposure Version 3.59.4 Fixes Multiple Vulnerabilities Arnie Cabral Wed, 02/21/2024 - 13:26 Tenable Identity Exposure leverages third-party software to help provide underlying functionality. One of the third-party components ASP.NET Core was found to contain vulnerabilities, a...

[R1] Tenable Identity Exposure Secure Relay Version 3.59.4 Fixes Multiple Vulnerabilities

R1 Tenable Identity Exposure Secure Relay Version 3.59.4 Fixes Multiple Vulnerabilities Arnie Cabral Wed, 02/21/2024 - 10:51 Tenable Identity Exposure Secure Relay leverages third-party software to help provide underlying functionality. One of the third-party components Envoy was found to contain...

Tenable Security Center < 6.3.0 Multiple Vulnerabilities (TNS-2024-02)

According to its self-reported version, the Tenable Security Center running on the remote host is prior to version 6.3.0. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2024-02 advisory. - Security Center leverages third-party software to help provide underlying...

CVE-2024-1367 Command Injection Vulnerability in Tenable Security Center

A command injection vulnerability exists where an authenticated, remote attacker with administrator privileges on the Security Center application could modify Logging parameters, which could lead to the execution of arbitrary code on the Security Center host...

[R1] Security Center Version 6.3.0 Fixes Multiple Vulnerabilities

R1 Security Center Version 6.3.0 Fixes Multiple Vulnerabilities Arnie Cabral Wed, 02/14/2024 - 10:00 Security Center leverages third-party software to help provide underlying functionality. One of the third-party components sqlite was found to contain vulnerabilities, and updated versions have be...

Wago 750-88X and 750-89X Cross-site Scripting (CVE-2018-16210)

WAGO 750-88X and WAGO 750-89X Ethernet Controller devices, versions 01.09.1813 and before, have XSS in the SNMP configuration via the webserv/cplcfg/snmp.ssi SNMPDESC or SNMPLOCSNMPCONT field. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for mor...

Fat Patch Tuesday, February 2024 Edition

Microsoft Corp. today pushed software updates to plug more than 70 security holes in its Windows operating systems and related products, including two zero-day vulnerabilities that are already being exploited in active attacks. Top of the heap on this Fat Patch Tuesday is CVE-2024-21412, a...

EulerOS 2.0 SP9 : curl (EulerOS-SA-2024-1192)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - This flaw allows a malicious HTTP server to set 'super cookies' in curl that are then passed back to more origins than what is otherwise allowed o...

EulerOS 2.0 SP5 : gdb (EulerOS-SA-2024-1137)

According to the versions of the gdb packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in GNU Binutils 2.34. It is a memory leak when process microblaze-dis.c. This one will consume memory on each insn...

EulerOS 2.0 SP9 : haproxy (EulerOS-SA-2024-1195)

According to the versions of the haproxy package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - HAProxy before 2.8.2 accepts as part of the URI component, which might allow remote attackers to obtain sensitive information or have unspecifie...

Tenable Nessus < 10.7.0 Multiple Vulnerabilities (TNS-2024-01)

According to its self-reported version, the Tenable Nessus application running on the remote host is prior to 10.7.0. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2024-01 advisory. - A stored XSS vulnerability exists where an authenticated, remote attacker with...

Tenable Nessus Multiple Vulnerabilities (TNS-2024-01)

Tenable Nessus is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:tenable:nessus"; ifdescripti...

EulerOS 2.0 SP11 : shim (EulerOS-SA-2024-1129)

According to the versions of the shim package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow. Impact summary:...