Relative Path Traversal

Overview Affected versions of this package are vulnerable to Relative Path Traversal via the ToolConfigModel tool and config name handling in the Ruby and Python models. An attacker can write or delete arbitrary files within the shared /plugins directory by supplying tool or config names containi...

Nessus Local Elevation of Privilege Vulnerability (CNVD-2017-06240)

Tenable Network Security Nessus is an open source vulnerability scanner from Tenable Network Security, USA. A local lift vulnerability exists in Tenable Network Security Nessus version 6.10.x prior to 6.10.5. A local attacker can exploit this vulnerability to gain privileges...