CVE-2025-36630

In Tenable Nessus versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could overwrite arbitrary local system files with log content at SYSTEM privilege...

CVE-2025-36630

In Tenable Nessus versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could overwrite arbitrary local system files with log content at SYSTEM privilege...

CVE-2025-36630 Local Privilege Escalation

In Tenable Nessus versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could overwrite arbitrary local system files with log content at SYSTEM privilege...

CVE-2025-36630

CVE-2025-36630 affects Tenable Nessus on Windows, prior to version 10.8.5. A non‑administrative user could overwrite arbitrary local system files with log content, achieving SYSTEM privilege. Root cause details are not explicitly provided in the documents; exploitation status is not detailed. The...

CVE-2025-36630 Local Privilege Escalation

In Tenable Nessus versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could overwrite arbitrary local system files with log content at SYSTEM privilege...

PT-2025-27580 · Tenable · Tenable Nessus

Name of the Vulnerable Software and Affected Versions: Tenable Nessus versions prior to 10.8.5 Description: A security issue was discovered where a non-administrative user could overwrite arbitrary local system files with log content at SYSTEM privilege on a Windows host. Recommendations: For...

Tenable Nessus 安全漏洞

Tenable Nessus is a network vulnerability scanning tool developed by Tenable, Inc. to detect security vulnerabilities in networks and provide recommendations for fixing them. Tenable Nessus has a security vulnerability that can be exploited by an attacker to overwrite arbitrary local system files...

Fedora 42 : moodle (2025-83ab16425f)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-83ab16425f advisory. 4.5.5 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for these...

Fedora 42 : mediawiki (2025-01bd4e4d20)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-01bd4e4d20 advisory. https://lists.wikimedia.org/hyperkitty/list/mediawiki- [email protected]/thread/OXIGQIHBL26HFKG6TT5SWSH7K7W6RO4H/...

Fedora 42 : dotnet9.0 (2025-77d16adbcd)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-77d16adbcd advisory. This is the .NET monthly update for June 2025. Release Notes: - SDK: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.6/9.0.107.md - Runtime:...

FreeBSD : sudo -- privilege escalation vulnerability through host and chroot options (24f4b495-56a1-11f0-9621-93abbef07693)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 24f4b495-56a1-11f0-9621-93abbef07693 advisory. Todd C. Miller reports, crediting Rich Mirch from Stratascale Cyber Research Unit CRU: Sudo...

Oracle Linux 10 : grafana (ELSA-2025-7475)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7475 advisory. - Resolves RHEL-89943: CVE-2025-4123 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus h...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : yelp-xsl (SUSE-SU-2025:02168-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:02168-1 advisory. - CVE-2025-3155: JavaScript code execution and arbitrary file read through specially crafted help files...

Fedora 42 : python-pycares (2025-31830e02b0)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-31830e02b0 advisory. 4.9.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this issue but ha...

[R1] Nessus Version 10.8.5 Fixes Multiple Vulnerabilities

R1 Nessus Version 10.8.5 Fixes Multiple Vulnerabilities Arnie Cabral Mon, 06/30/2025 - 12:10 Nessus leverages third-party software to help provide underlying functionality. Several of the third-party components libxml2, libxslt were found to contain vulnerabilities, and updated versions have been...

Oracle Linux 10 : grafana (ELSA-2025-7892)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7892 advisory. - Resolves RHEL-89943: CVE-2025-4123 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus h...

Oracle Linux 10 : grafana (ELSA-2025-8666)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-8666 advisory. - Resolves RHEL-89943: CVE-2025-4123 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus h...

Fedora 41 : moodle (2025-622bed7e7a)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-622bed7e7a advisory. 4.4.9 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for these...

Oracle Linux 10 : xorg-x11-server-Xwayland (ELSA-2025-9304)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-9304 advisory. - CVE fix for: CVE-2025-49175 RHEL-97129, CVE-2025-49176 RHEL-97135, CVE-2025-49177 RHEL-97141, CVE-2025-49178 RHEL-97147, CVE-2025-49179 RHEL-97153,...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : gdm (SUSE-SU-2025:02003-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:02003-1 advisory. - CVE-2025-6018: Removes pamenv from auth stack for security reason bsc1243226. Tenable has extracted th...