CVE-2022-0862

A lack of password change protection vulnerability in a depreciated API of McAfee Enterprise ePolicy Orchestrator ePO prior to 5.10 Update 13 allows a remote attacker to change the password of a compromised session without knowing the existing user's password. This functionality was removed from...

PT-2022-13481 · Mcafee · Mcafee Enterprise Epolicy Orchestrator

Name of the Vulnerable Software and Affected Versions: McAfee Enterprise ePolicy Orchestrator versions prior to 5.10 Update 13 Description: A lack of password change protection in a depreciated API allows a remote attacker to change the password of a compromised session without knowing the existi...

Usage of deprecated Chainlink functions

Lines of code Vulnerability details Impact The Chainlink functions latestAnswer and getAnswer are deprecated. Instead, use the latestRoundData and getRoundData functions. Proof of Concept Go to and search for latestAnswer or getAnswer. You'll find the deprecation notice. Tools Used none Recommend...

Chainlink pricer is using a deprecated API

Lines of code Vulnerability details Impact According to Chainlink's documentation, the latestAnswer function is deprecated. This function might suddenly stop working if Chainlink stop supporting deprecated APIs. And the old API can return stale data. Proof of Concept Tools Used None Recommended...

Mitsubishi (CVE-2020-14521) (deprecated)

Plugin deprecated because mitsubishielectric software is not detectable in this way This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2023/03/10...

Mitsubishi (CVE-2020-14523) (deprecated)

Plugin deprecated because mitsubishielectric software is not detectable in this way This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2023/03/10...

Rockwell (CVE-2020-14478) (deprecated)

Plugin deprecated because factorytalk is not detectable in this way This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2023/03/10. Deprecated because...

Rockwell (CVE-2020-14480) (deprecated)

Plugin deprecated because factorytalk is not detectable in this way This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2023/03/10. Deprecated because...

Rockwell (CVE-2020-14481) (deprecated)

Plugin deprecated because factorytalk is not detectable in this way This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2023/03/10. Deprecated because...

Siemens (CVE-2021-45106) (deprecated)

Plugin deprecated because sicamtoolboxii is not detectable in this way This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2023/03/10. Deprecated becaus...

Sandbox escape in notevil and argencoders-notevil

This affects all versions of package notevil; all versions of package argencoders-notevil. It is vulnerable to Sandbox Escape leading to Prototype pollution. The package fails to restrict access to the main context, allowing an attacker to add or modify an object's prototype. Note: This...

GHSA-8G4M-CJM2-96WQ Sandbox escape in notevil and argencoders-notevil

This affects all versions of package notevil; all versions of package argencoders-notevil. It is vulnerable to Sandbox Escape leading to Prototype pollution. The package fails to restrict access to the main context, allowing an attacker to add or modify an object's prototype. Note: This...

Oracle Linux 8 : glibc (ELSA-2022-0896)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-0896 advisory. - CVE-2021-3999: getcwd: align stack on clone in aarch64 and fix a memory leak 2032280 - CVE-2022-23218, CVE-2022-23219: Fix buffer overflows in sunrpc...

glibc: Stack-based buffer overflow in sunrpc clnt_create via a long pathname

A stack based buffer-overflow vulnerability was found in the deprecated compatibility function clntcreate in the sunrpc's clntgen.c module of the GNU C Library aka glibc through 2.34. This vulnerability copies its hostname argument onto the stack without validating its length, which may result in...

Security Updates for Microsoft Visio Products (March 2022) (deprecated)

This plugin has been deprecated to be brought in line with Tenable's C2R plugin policy. Pleas use smbntms22marvisioc2r.nasl instead. %NASLMINLEVEL 70300 C Tenable, Inc. @DEPRECATED@ Disabled on 2022/06/09. Deprecated by smbntms22marvisioc2r.nasl. include'deprecatednasllevel.inc';...

Security Updates for Microsoft Office Products (March 2022) (deprecated)

This plugin has been deprecated to be brought in line with Tenable's C2R plugin policy. Pleas use smbntms22marofficec2r.nasl instead. %NASLMINLEVEL 70300 C Tenable, Inc. @DEPRECATED@ Disabled on 2022/06/09. Deprecated by smbntms22marofficec2r.nasl. include'deprecatednasllevel.inc';...

Adobe After Effects < 18.4.5 / 22.0 < 22.2.1 Arbitrary Code Execution (APSB22-17) (deprecated)

The version of Adobe After Effects installed on the remote Windows host is prior to 18.4.5, or 22.x prior to 22.2.1. It is, therefore, affected by multiple stack-based buffer overflow flaws which could lead to arbitrary code execution in the context of the current user. Note that Nessus has not...

Adobe Illustrator 26.x < 26.1.0 A Vulnerability (APSB22-15) (deprecated)

The version of Adobe Illustrator installed on the remote Windows host is prior to 26.1.0. It is, therefore, affected by a vulnerability as referenced in the apsb22-15 advisory. - Adobe Illustrator version 26.0.3 and earlier is affected by a buffer overflow vulnerability due to insecure handling o...

Amazon Linux 2 : containerd (ALAS-2022-016) (deprecated)

This plugin has been deprecated following detection of an issue with overlapping filenames. Deprecated by al2ALASDOCKER-2022-016.nasl plugin ID 160406 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Amazon Linux 2 Security Advisory...

Amazon Linux 2 : docker (ALAS-2022-017) (deprecated)

This plugin has been deprecated following detection of an issue with overlapping filenames. Deprecated by al2ALASDOCKER-2022-017.nasl plugin ID 160411 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Amazon Linux 2 Security Advisory...