Google Chrome < 135.0.7049.114 Vulnerability

The version of Google Chrome installed on the remote Windows host is prior to 135.0.7049.114. It is, therefore, affected by a vulnerability as referenced in the 202504stable-channel-update-for-desktop22 advisory. Note that Nessus has not tested for this issue but has instead relied only on the...

CVE-2025-36625

In Nessus versions prior to 10.8.4, a non-authenticated attacker could alter Nessus logging entries by manipulating http requests to the application...

CVE-2025-36625 Log Poisoning in Nessus

In Nessus versions prior to 10.8.4, a non-authenticated attacker could alter Nessus logging entries by manipulating http requests to the application...

CVE-2025-36625

CVE-2025-36625 affects Tenable Nessus versions prior to 10.8.4. A non-authenticated attacker could alter Nessus logging entries by manipulating HTTP requests to the application. The issue is described across multiple sources as a log-poisoning vulnerability in Nessus’s logging mechanism triggered...

CVE-2025-36625 Log Poisoning in Nessus

In Nessus versions prior to 10.8.4, a non-authenticated attacker could alter Nessus logging entries by manipulating http requests to the application...

CVE-2025-24914

When installing Nessus to a non-default location on a Windows host, Nessus versions prior to 10.8.4 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secured the directories in the non-default installation location. -...

CVE-2025-24914

When installing Nessus to a non-default location on a Windows host, Nessus versions prior to 10.8.4 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secured the directories in the non-default installation location. -...

CVE-2025-24914 Local Priviledge Escalation

When installing Nessus to a non-default location on a Windows host, Nessus versions prior to 10.8.4 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secured the directories in the non-default installation location. -...

CVE-2025-24914 Local Priviledge Escalation

When installing Nessus to a non-default location on a Windows host, Nessus versions prior to 10.8.4 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secured the directories in the non-default installation location. -...

CVE-2025-24914

Nessus on Windows installed to a non-default location is affected by CVE-2025-24914. Prior to version 10.8.4, Nessus did not enforce secure permissions on sub-directories within non-default installation paths, enabling local privilege escalation if those directories were not secured. The issue ha...

Tenable Network Security Nessus 安全漏洞

Tenable Network Security Nessus is a network vulnerability scanning tool developed by Tenable Network Security to detect security vulnerabilities and configuration errors in operating systems, network devices, and applications. Tenable Network Security Nessus contains a security vulnerability tha...

PT-2025-17331 · Nessus · Nessus

Name of the Vulnerable Software and Affected Versions: Nessus versions prior to 10.8.4 Description: The issue is related to the installation of Nessus to a non-default location on a Windows host, where secure permissions for sub-directories were not enforced in versions prior to 10.8.4. This coul...

PT-2025-17336 · Nessus · Nessus

Name of the Vulnerable Software and Affected Versions: Nessus versions prior to 10.8.4 Description: A non-authenticated attacker could alter Nessus logging entries by manipulating http requests to the application. Recommendations: For versions prior to 10.8.4, update to version 10.8.4 or later to...

Tenable Network Security Nessus 安全漏洞

Tenable Network Security Nessus is a network vulnerability scanning tool developed by Tenable Network Security to detect security vulnerabilities and configuration errors in operating systems, network devices, and applications. Tenable Network Security Nessus suffers from an elevation of privileg...

[R1] Nessus Version 10.8.4 Fixes Multiple Vulnerabilities

R1 Nessus Version 10.8.4 Fixes Multiple Vulnerabilities Arnie Cabral Thu, 04/17/2025 - 11:58 Nessus leverages third-party software to help provide underlying functionality. Several of the third-party components libxml2, expat were found to contain vulnerabilities, and updated versions have been...

Oracle WebLogic Server (April 2025 CPU)

The 12.2.1.4.0 and 14.1.1.0.0 versions of WebLogic Server installed on the remote host are affected by a vulnerability as referenced in the April 2025 CPU advisory. - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Centralized Thirdparty Jars Apache...

Fedora 41 : dotnet9.0 (2025-2edd9dc83b)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-2edd9dc83b advisory. This is the monthly update for .NET 9 for March 2025. Release Notes: - SDK: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.3/9.0.104.md -...

Fedora 40 : dotnet9.0 (2025-78dcffbaa1)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-78dcffbaa1 advisory. This is the monthly update for .NET 9 for March 2025. Release Notes: - SDK: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.3/9.0.104.md -...

SUSE SLES15 / openSUSE 15 Security Update : govulncheck-vulndb (SUSE-SU-2025:1226-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:1226-1 advisory. - Update to version 0.0.20250409T170536 2025-04-09T17:05:36Z jscPED-11136 GO-2025-3591 GO-2025-3594 GO-2025-3598 GO-2025-3599 - Update to...

CBL Mariner 2.0 Security Update: curl / mysql (CVE-2025-0167)

The version of curl / mysql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-0167 advisory. - When asked to use a .netrc file for credentials and to follow HTTP redirects, curl could leak the...