Fedora 41 : nodejs18 (2025-e330d34ecc)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-e330d34ecc advisory. Update to version 18.20.6 rhbz2341760 rhbz2340936 rhbz2300997 Resolves CVE-2025-23084 Tenable has extracted the preceding description block directly from the...

Wiesemann & Theis ComServer Series Improper Neutralization of Input During Web Page Generation (CVE-2022-42786)

Multiple W&T Products of the ComServer Series are prone to an XSS attack. An authenticated remote Attacker can execute arbitrary web scripts or HTML via a crafted payload injected into the title of the configuration webpage This plugin only works with Tenable.ot. Please visit...

Fedora 41 : libsoup3 (2025-42ee7772e3)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-42ee7772e3 advisory. Fix for CVE-2024-52531 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Elspec G5 Digital Fault Recorder Improper Handling of Insufficient Permissions or Privileges (CVE-2024-22077)

An issue was discovered in Elspec G5 digital fault recorder. The SQLite database file has weak permissions. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if descriptio...

Elspec G5 Digital Fault Recorder VsFTPd Service Denial of Service (CVE-2021-30047)

Outdated vsftpd service with known DoS issue. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid502820; scriptversion"1.2";...

Elspec G5 Digital Fault Recorder Exposure of Information Through Directory Listing (CVE-2024-22082)

An issue was discovered in Elspec G5 digital fault recorder. Unauthenticated directory listing can occur: the web interface cay be abused by an attacker get a better understanding of the operating system. This plugin only works with Tenable.ot. Please visit...

Elspec G5 Digital Fault Recorder Improper Restriction of XML External Entity Reference (CVE-2024-46603)

An issue was discovered in Elspec G5 digital fault recorder. An XML External Entity XXE vulnerability may allow an attacker to cause a Denial of Service DoS via a crafted XML payload. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : pam_u2f (SUSE-SU-2025:0167-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:0167-1 advisory. - CVE-2025-23013: Fixed problematic PAMIGNORE return values in pamsmauthenticate bsc1233517 Tenable has...

Fedora 41 : perl-Net-OAuth (2025-f0077db20c)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-f0077db20c advisory. Update to 0.30, fixes CVE-2025-22376 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : Django vulnerability (USN-7205-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has a package installed that is affected by a vulnerability as referenced in the USN-7205-1 advisory. It was discovered that Django incorrectly handled certain IPv6 strings. An attacker could possibly use this issue to cause a denia...

Fedora 41 : golang-github-aws-sdk-2 / golang-github-aws-smithy / etc (2025-0620fdebb6)

The remote Fedora 41 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2025-0620fdebb6 advisory. Fix for CVE-2024-52522 & CVE-2024-45338 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 40 : chromium (2025-52ea512fe5)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-52ea512fe5 advisory. Update to 131.0.6778.264 High CVE-2025-0291: Type Confusion in V8 Tenable has extracted the preceding description block directly from the Fedora security...

Mozilla Firefox SEoL (131.x)

According to its version, Mozilla Firefox version install on the remote host has reached end of support. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may conta...

Mozilla Firefox SEoL (132.x)

According to its version, Mozilla Firefox version install on the remote host has reached end of support. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may conta...

Mozilla Firefox SEoL (5.x)

According to its version, Mozilla Firefox version install on the remote host has reached end of support. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may conta...

FreeBSD : redis,valkey -- Remote code execution valnerability (5f19ac58-cc90-11ef-abed-08002784c58d)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 5f19ac58-cc90-11ef-abed-08002784c58d advisory. Redis core team reports: An authenticated user may use a specially crafted Lua script to manipulate the...

Mozilla Firefox ESR SEoL (78.x)

According to its version, Mozilla Firefox ESR version install on the remote host has reached end of support. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may...

Wireshark SEoL (2.0.x)

According to its version, Wireshark is 2.0.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C Tenable,...

Mozilla Firefox SEoL (20.x)

According to its version, Mozilla Firefox version install on the remote host has reached end of support. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may conta...

Wireshark SEoL (1.5.x <= x <= 1.6.x)

According to its version, Wireshark is between 1.5.x and 1.6.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVE...