Atlassian Confluence 7.20.x < 8.5.9 Remote Code Execution

According to its self-reported version number, the Atlassian Confluence application running on the remote host is prior to 7.19.22, 7.20.x prior to 8.5.9 or 8.6.x prior to 8.9.1 It is, therefore, affected by a remote code execution vulnerability. Note that the scanner has not tested for these...

Rockwell Studio 5000 Logix Designer Installed (Windows)

Binary data rockwellstudio5000logixdesignerwininstalled.nbin...

Amazon Linux 2 : less (ALAS-2024-2547)

The version of less installed on the remote host is prior to 458-9. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2547 advisory. less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c...

JetBrains TeamCity < 2022.04.7 / 2022.05.x < 2022.10.6 / 2023.x < 2023.05.6 / 2023.06.x < 2023.11.5 / 2024.x < 2024.03.2 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2022.04.7, or prior to 2022.10.6, or prior to 2023.05.6, or prior to 2023.11.5, or prior to 2024.03.2. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6,...

gnome-shell Installed (Linux / UNIX)

Binary data gnomeshellinstallednix.nbin...

Amazon Linux 2 : uriparser (ALAS-2024-2546)

The version of uriparser installed on the remote host is prior to 0.7.5-10. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2546 advisory. An issue was discovered in uriparser through 0.9.7. ComposeQueryEngine in UriQuery.c has an integer overflow via long...

JetBrains TeamCity < 2023.05.6 / 2023.06.x < 2023.11.5 XSS (CVE-2024-36371)

The version of JetBrains TeamCity installed on the remote host is prior to 2023.05.6, or prior to 2023.11.5. It is, therefore, affected by a vulnerability: - In JetBrains TeamCity before 2023.05.6, 2023.11.5 stored XSS in Commit status publisher was possible CVE-2024-36371 Note that Nessus has no...

Amazon Linux 2 : amazon-cloudwatch-agent (ALAS-2024-2550)

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300039.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2550 advisory. An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an...

Progress WhatsUp Gold < 23.1.2 Multiple Vulnerabilities (000255428)

The version of Progress WhatsUp Gold installed on the remote host is prior to 23.1.2. It is, therefore, affected by multiple vulnerabilities as referenced in the 000255428 advisory. - In WhatsUp Gold versions released before 2023.1.2, a blind SSRF vulnerability exists in Whatsup Gold's...

JetBrains TeamCity < 2023.11.3 Authentication Bypass

JetBrains TeamCity version prior to 2023.11.3 suffer from an authentication bypass allowing an unauthenticated attacker to gain administrative control of the TeamCity server via a specially crafted URL. No source data...

Check Point Quantum Gateway Directory Traversal

Check Point Quantum Gateway has a vulnerability that allows an unauthenticated attacker to access sensitive information by sending a specifically forged request. No source data...

TensorFlow < 2.12.0 Multiple Vulnerabilities

The version of TensorFlow installed on the remote host is prior to 2.12.0. It is, therefore, affected by multiple vulnerabilities as referenced in the release notes. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

Apple TV < 17.5 Multiple Vulnerabilities (HT214102)

According to its banner, the version of Apple TV on the remote device is prior to 17.5. It is therefore affected by multiple vulnerabilities as described in the HT214102 %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid198222; scriptversion"1.3";...

JetBrains TeamCity < 2024.03.2 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2024.03.2. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2024.03.2 several stored XSS in untrusted builds settings were possible CVE-2024-36373 - In JetBrains TeamCity before...

Fedora 40 : wireshark (2024-cd1f01e5d9)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-cd1f01e5d9 advisory. New version 4.2.5. Includes fixes for CVE-2024-4853, CVE-2024-4854, CVE-2024-4855. Tenable has extracted the preceding description block directly fr...

Fedora 39 : wireshark (2024-ed93e6d44f)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-ed93e6d44f advisory. New version 4.2.5. Includes fixes for CVE-2024-4853, CVE-2024-4854, CVE-2024-4855. Tenable has extracted the preceding description block directly fr...

HP LaserJet Printers XSS (HPSBPI03940)

Certain HP LaserJet Pro devices are potentially vulnerable to a Cross-Site Scripting XSS attack via the web management interface of the device. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...

Contact Form 7 Plugin for WordPress < 5.8.4 Arbitrary File Upload

The WordPress Contact Form 7 Plugin installed on the remote host is affected by an authenticated file upload vulnerability. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...

Atlassian Confluence < 7.19.22 Remote Code Execution

According to its self-reported version number, the Atlassian Confluence application running on the remote host is prior to 7.19.22, 7.20.x prior to 8.5.9 or 8.6.x prior to 8.9.1 It is, therefore, affected by a remote code execution vulnerability. Note that the scanner has not tested for these...

GNOME Shell <= 45.7 Code Execution in Portal Helper (CVE-2024-36472)

In GNOME Shell through 45.7, a portal helper can be launched automatically without user confirmation based on network responses provided by an adversary e.g., an adversary who controls the local Wi-Fi network, and subsequently loads untrusted JavaScript code, which may lead to resource consumptio...