CVE-2024-3290

CVE-2024-3290 is a race-condition vulnerability affecting Nessus on Windows. An authenticated, local attacker could modify installation parameters during installation, potentially enabling arbitrary code execution on the Nessus host. Multiple connected sources confirm the root cause as a paramete...

CVE-2024-3290 Race Condition

A race condition vulnerability exists where an authenticated, local attacker on a Windows Nessus host could modify installation parameters at installation time, which could lead to the execution of arbitrary code on the Nessus host...

CVE-2024-3290 Race Condition

A race condition vulnerability exists where an authenticated, local attacker on a Windows Nessus host could modify installation parameters at installation time, which could lead to the execution of arbitrary code on the Nessus host...

CVE-2024-3289

When installing Nessus to a directory outside of the default location on a Windows host, Nessus versions prior to 10.7.3 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secured the directories in the non-default installation...

CVE-2024-3289

When installing Nessus to a directory outside of the default location on a Windows host, Nessus versions prior to 10.7.3 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secured the directories in the non-default installation...

CVE-2024-3289

CVE-2024-3289 affects Nessus on Windows where installing to a non-default directory did not enforce secure permissions for sub-directories in versions prior to 10.7.3, enabling local privilege escalation for users who did not secure installation folders. The issue is local (attack vector: LOCAL) ...

GitLab 12.4 < 15.6.7 / 15.7 < 15.7.6 / 15.8 < 15.8.1 (CVE-2023-0886)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-3411. Reason: This candidate is a reservation duplicate of CVE-2022-3411. Notes: All CVE users should reference CVE-2022-3411...

Tenable Network Security Nessus 安全漏洞

Tenable Network Security Nessus is a network vulnerability scanning tool developed by Tenable Network Security to detect security vulnerabilities and configuration errors in operating systems, network devices, and applications. Tenable Network Security Nessus suffers from an elevation of privileg...

SolarWinds ARM < 2023.2.4 (2023-2-4_CVE-2024-23473)

The version of SolarWinds ARM installed on the remote host is prior to 2023.2.4. It is, therefore, affected by a vulnerability as referenced in the 2023-2-4 advisory. - The SolarWinds Access Rights Manager was found to contain a hard-coded credential authentication bypass vulnerability. If...

GitLab 16.9 < 16.9.7 / 16.10 < 16.10.5 / 16.11 < 16.11.2 (CVE-2023-6682)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.9 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2. A problem with t...

Security Updates for Microsoft Visual Studio Products (May 2024)

The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by multiple vulnerabilities, including: - Recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Execution. CVE-2024-32002 - Remote Code Execution while...

Tenable Nessus Agent < 10.6.4 Multiple Vulnerabilities (TNS-2024-09)

According to its self-reported version, the Tenable Nessus Agent running on the remote host is prior to 10.6.4. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2024-09 advisory. - Two separate vulnerabilities were discovered, reported and fixed:When installing Ness...

GitLab 11.9 < 15.9.6 / 15.10 < 15.10.5 / 15.11 < 15.11.1 (CVE-2023-1265)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab affecting all versions starting from 11.9 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. The...

Oracle Linux 9 : nodejs:20 (ELSA-2024-2853)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-2853 advisory. - Backport nghttp2 patch for CVE-2024-28182 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Not...

GitLab 13.9 < 16.3.6 / 16.4.0 < 16.4.2 / 16.5.0 < 16.5.1 (CVE-2023-5963)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab EE with Advanced Search affecting all versions from 13.9 to 16.3.6, 16.4 prior to 16.4.2 and 16.5 prior to 16.5.1 that could allow a denial of service in the...

GitLab 8.14 < 13.3.9 / 13.4 < 13.4.5 / 13.5 < 13.5.2 (CVE-2020-13355)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.14. A path traversal is found in LFS Upload that allows attacker to overwrite certain specific paths on the server...

PT-2024-24963 · Tenable · Nessus Agent

Name of the Vulnerable Software and Affected Versions: Nessus Agent versions prior to 10.6.4 Description: The issue concerns the installation of Nessus Agent to a non-default directory on a Windows host, where secure permissions for sub-directories were not enforced in versions prior to 10.6.4...

GitLab 14.0 < 15.6.7 / 15.7 < 15.7.6 / 15.8 < 15.8.1 (CVE-2023-0885)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-0518. Reason: This candidate is a reservation duplicate of CVE-2023-0518. Notes: All CVE users should reference CVE-2023-0518...

Tenable Network Security Nessus 安全漏洞

The Tenable Network Security Nessus Agent is a component of the Nessus Vulnerability Scanning Tool developed by Tenable to extend scanning capabilities to other devices on the network. A competitive condition vulnerability exists in the Tenable Network Security Nessus Agent, which can be exploite...

Tenable Network Security Nessus 安全漏洞

The Tenable Network Security Nessus Agent is a component of the Nessus Vulnerability Scanning Tool developed by Tenable to extend scanning capabilities to other devices on the network. An elevation of privilege vulnerability exists in Tenable Network Security Nessus Agent that stems from a failur...