Solaris 10 (sparc) : 150383-18

SunOS 5.10: wanboot patch. Date this patch was last updated by Sun : Mar/09/17 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 10 (x86) : 148072-14

SunOS 5.10x86: openssl patch. Date this patch was last updated by Sun : Oct/13/14 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

ONVIF Device Services

Nessus was able to map the enabled ONVIF services on the remote device by sending a GetCapabilities SOAP request. include"compat.inc"; if description scriptid103866; scriptversion"$Revision: 1.2 $"; scriptcvsdate"$Date: 2017/10/31 18:41:24 $"; scriptnameenglish:"ONVIF Device Services";...

TLS NPN Supported Protocol Enumeration

The remote host supports the TLS NPN Transport Layer Security Next Protocol Negotiation extension. This plugin enumerates the protocols the extension supports. TRUSTED...

Microsoft Windows SMB Registry : McAfee EPO GUID

By reading the registry key HKLM\SOFTWARE\Network Associates\ePolicy Orchestrator\Agent, it was possible to determine that the remote Windows system is managed by McAfee EPO. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid77477; scriptversion"1.7";...

Hillstone Software HS TFTP Server 1.3.2 - Denial of Service Vulnerability

No description provided by source. Title : Hillstone Software HS TFTP Server Denial Of Service Vulnerability Author : Prabhu S Angadi from SecPod Technologies www.secpod.com Vendor : http://www.hillstone-software.com/hstftpdetails.htm Advisory : http://secpod.org/blog/?p=419...

Micro CMS 1.0 b1 - Persistent XSS Vulnerability

No description provided by source. Title : Micro CMS Persistent Cross-Site Scripting Vulnerability. Author : Veerendra G.G from SecPod Technologies www.secpod.com Vendor : http://www.micro-cms.com/ Advisory : http://secpod.org/blog/?p=135 http://secpod.org/advisories/SECPODMicroCMS.txt Version :...

openSUSE Security Update : MozillaFirefox (MozillaFirefox-4201)

MozillaFirefox was updated to version 3.6.16 to fix the following security issue : MFSA 2011-11 Several invalid HTTPS certificates were placed on the certificate blacklist to prevent their misuse. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

Solaris 10 (x86) : 145342-06 (deprecated)

Oracle Solaris Cluster 3.3: HA-Tomcat Patch for Oracle Solaris 10. Date this patch was last updated by Sun : Apr/19/17 This plugin has been deprecated and either replaced with individual 145342 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security,...

Juniper NetScreen VPN Client Detection

The remote host has the Juniper NetScreen VPN Client installed. C Tenable Network Security. Inc. include"compat.inc"; if description scriptid70120; scriptversion"1.10"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06"; scriptxrefname:"IAVT", value:"0001-T-0914";...

ModSecurity Version

Based on HTTP headers, the remote host appears to be running ModSecurity, an open source web application firewall WAF. It was possible to read the version number from the banner. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid67123; scriptversion"1.6";...

Fedora 19 : anaconda-19.25-1.fc19 / pykickstart-1.99.30-1.fc19 / python-blivet-0.13-1.fc19 (2013-7834)

A giant pile of fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Advantech WebAccess HMI/SCADA Cross Site Scripting

Title : Advantech WebAccess HMI/SCADA Software Persistence Cross-Site Scripting Vulnerability Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://webaccess.advantech.com/ Advisory : http://secpod.org/blog/?p=569...

NetArt Media Pharmacy System 2.0 XSS / SQL Injection

Title : NetArt Media Pharmacy System SQL Injection and Cross-site Scripting Vulnerabilities Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://www.netartmedia.net/ Advisory : http://secpod.org/blog/?p=513 :...

Mac OS X Admin Group User List

Using the supplied credentials, Nessus was able to extract the member list of the 'Admin' and 'Wheel' groups. Members of these groups have administrative access to the remote system. TRUSTED...

Solaris 10 (sparc) : 147155-02 (deprecated)

SunOS 5.10: ldc patch. Date this patch was last updated by Sun : Jul/12/12 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/11/29. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

Privacy: Protect Your Communication Online

It’s become more important than ever to protect your privacy online. Dennis Fisher and his guest, Andrew Lewman, The Tor Project, Executive Director discuss what end-users need to know and do to keep online anonymity, reduce their risk factor and ultimately put the control back in the users hands...

Distinct TFTP Server 3.01 - Directory Traversal

Exploit Title: Distinct TFTP Server get ../../../../../...

Netmechanica NetDecision HTTP Server - Denial of Service

Netmechanica NetDecision HTTP Server - Denial of Service Title : Netmechanica NetDecision HTTP Server Denial Of Service Vulnerability Author : Prabhu S Angadi SecPod Technologies www.secpod.com Vendor : http://www.netmechanica.com Advisory : http://secpod.org/blog/?p=484...

Fedora 16 : drupal7-7.12-1.fc16 (2012-1268)

This package includes security updates from upstream 7.11 as well as additional bug fixes. Refer to upstream notes for more information : - http://drupal.org/node/1425092 - http://drupal.org/node/1425104 Note that Tenable Network Security has extracted the preceding description block directly fro...