Yokogawa Controller Asset Information

It is possible to obtain attributes of the remote Yokogawa Controller device. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Siemens SIMATIC S7-1200 Improper Input Validation (CVE-2014-2256)

Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers to cause a denial of service defect-mode transition via crafted ISO-TSAP packets, a different vulnerability than CVE-2014-2257. This plugin only works with Tenable.ot. Please visit...

Tenable.ot Asset Information

Integrates Tenable.ot into Nessus via the API. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. TRUSTED...

EulerOS 2.0 SP9 : kernel (EulerOS-SA-2022-1030)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the Linux kernel netfilter implementation in versions prior to 5.5-rc7. A user with root CAPSYSADMIN access is able to panic...

EulerOS 2.0 SP9 : gd (EulerOS-SA-2022-1004)

According to the versions of the gd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The GD Graphics Library aka LibGD through 2.3.2 has an out-of-bounds read because of the lack of certain gdGetBuf and gdPutBuf return value checks...

Tenable Network Security Tenable.Sc Remote Code Execution Vulnerability

Tenable Network Security Tenable.Sc is a vulnerability analysis solution from Tenable Network Security, Inc. The product supports real-time vulnerability assessment and management, etc. Tenable Network Security Tenable.Sc has a remote code execution vulnerability that can be exploited by attacker...

EulerOS Virtualization 3.0.2.6 : binutils (EulerOS-SA-2021-2903)

According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in bfdpefparsefunctionstubs of bfd/pef.c in binutils which could allow an attacker who is able to submit a crafte...

EulerOS Virtualization 3.0.2.6 : dhcp (EulerOS-SA-2021-2860)

According to the versions of the dhcp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In ISC DHCP 4.1-ESV-R1 - 4.1-ESV-R16, ISC DHCP 4.4.0 - 4.4.2 Other branches of ISC DHCP i.e., releases in the 4.0.x series or lower...

EulerOS 2.0 SP9 : shim (EulerOS-SA-2021-2927)

According to the versions of the shim package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - ASN.1 strings are represented internally within OpenSSL as an ASN1STRING structure which contains a buffer holding the string data and a field...

EulerOS 2.0 SP8 : cockpit (EulerOS-SA-2021-2797)

According to the versions of the cockpit packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Cockpit and its plugins do not seem to protect itself against clickjacking. It is possible to render a page from a cockpit server via another...

EulerOS 2.0 SP8 : ntfs-3g (EulerOS-SA-2021-2807)

According to the versions of the ntfs-3g packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In NTFS-3G versions 2021.8.22, when a specially crafted NTFS attribute is supplied to the function ntfsgetattributevalue, a heap buffer overflo...

EulerOS Virtualization 2.9.1 : krb5 (EulerOS-SA-2021-2743)

According to the versions of the krb5 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - ecverify in kdc/kdcpreauthec.c in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 before 1.18.4 and 1.19.x before 1.19.2...

EulerOS 2.0 SP9 : haproxy (EulerOS-SA-2021-2712)

According to the versions of the haproxy package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in HAProxy 2.0 before 2.0.24, 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. An HTTP method name may contai...

EulerOS 2.0 SP9 : libsndfile (EulerOS-SA-2021-2690)

According to the versions of the libsndfile package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A heap buffer overflow vulnerability in msadpcmdecodeblock of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV...

EulerOS 2.0 SP9 : sqlite (EulerOS-SA-2021-2697)

According to the versions of the sqlite package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - DISPUTED A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0 via the idxGetTableInfo function when there is...

EulerOS 2.0 SP8 : curl (EulerOS-SA-2021-2627)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - When curl is instructed to download content using the metalink feature, thecontents is verified against a hash provided in the metalink XML file.T...

Oracle Cloud Infrastructure Instance Metadata Enumeration (Linux / Unix)

The remote host is an OCI Oracle Cloud Infrastructure instance for which metadata could be retrieved. TRUSTED...

EulerOS 2.0 SP9 : binutils (EulerOS-SA-2021-2521)

According to the versions of the binutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this flaw and pass a large section to...

EulerOS 2.0 SP8 : systemd (EulerOS-SA-2021-2487)

According to the versions of the systemd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - basic/unit-name.c in systemd prior to 246.15, 247.8, 248.5, and 249.1 has a Memory Allocation with an Excessive Size Value involving strdupa an...

EulerOS 2.0 SP2 : pki-core (EulerOS-SA-2021-2424)

According to the versions of the pki-core packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in pki-core. A specially crafted POST request can be used to reflect a DOM-based cross-site scripting XSS attack to inject co...