Wago CODESYS V2 Web-Server Unchecked Return Value (CVE-2021-34585)

In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests can trigger a parser error. Since the parser result is not checked under all conditions, a pointer dereference with an invalid address can occur. This leads to a denial of service situation. This plugin only works with...

Wago CODESYS V2 Web-Server Out-of-bounds Read (CVE-2021-30194)

CODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Read. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503315; scriptversion"1.2";...

Wago CODESYS V2 Runtime Toolkit Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2021-34595)

A crafted request with invalid offsets may cause an out-of-bounds read or write access in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting in a denial-of-service condition or local memory overwrite. This plugin only works with Tenable.ot. Please visit...

Wago CODESYS V2 Web-Server Stack-based Buffer Overflow (CVE-2021-30189)

CODESYS V2 Web-Server before 1.1.9.20 has a Stack-based Buffer Overflow. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503317; scriptversion"1.3...

poc

Proof of Concepts As the result of plugin writing or just general bug hunting, researchers at Tenable often stumble upon new and interesting vulnerabilities. These vulnerabililities are shared with the community on our company blog, Medium, or through our research advisories. We've decided to...

SUSE SLES15 Security Update : container-suseconnect (SUSE-SU-2025:02889-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:02889-1 advisory. This update for container-suseconnect rebuilds it with the last go1.24 security release. Tenable has extracted the preceding description...

Amazon Linux 2023 : nginx, nginx-all-modules, nginx-core (ALAS2023-2025-1152)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1152 advisory. NGINX Open Source and NGINX Plus have a vulnerability in the ngxmailsmtpmodule that might allow an unauthenticated attacker to over-read NGINX SMTP authentication process memory; as a result, the serve...

EulerOS 2.0 SP11 : emacs (EulerOS-SA-2025-1949)

According to the versions of the emacs package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point for code completion on untrusted Emacs Lisp source...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2025-101 (ALASKERNEL-5.10-2025-101)

The version of kernel installed on the remote host is prior to 5.10.240-238.959. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2025-101 advisory. In the Linux kernel, the following vulnerability has been resolved: net: tap: NULL pointer derefence in...

Fedora 42 : incus (2025-2edb6773ed)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-2edb6773ed advisory. New release of Incus. Release information: https://github.com/lxc/incus/releases/tag/v6.15.0 Tenable has extracted the preceding description block...

[R1] Tenable Identity Exposure Versions 3.93.2 and 3.77.13 Fix One Vulnerability

R1 Tenable Identity Exposure Versions 3.93.2 and 3.77.13 Fix One Vulnerability Arnie Cabral Wed, 08/06/2025 - 10:48 Tenable Identity Exposure leverages third-party software to help provide underlying functionality. One of the third-party components nodeJS was found to contain vulnerabilities, and...

Tenable Identity Exposure < 3.77.13(LTS) / 3.93.2 Vulnerable Nodejs (TNS-2025-16)

The version of Tenable Identity Exposure formerly Tenable.ad installed on the remote host is prior to 3.77.13LTS or 3.93.2. It therefore contains a version of Nodejs that could be vulnerable. Tenable has upgrade these components to address the potential impact of the issues. Note that Nessus has...

Tenable Patch Management Client Installed (macOS)

Binary data tenablepatchmanagementclientmacosinstalled.nbin...

Tenable Patch Management Client Installed (Linux)

Binary data tenablepatchmanagementclientnixinstalled.nbin...

Tenable Patch Management Client Installed (Windows)

Binary data tenablepatchmanagementclientwininstalled.nbin...

Tenable Patch Management Server < 9.3.968.19 SQLi

The version of Tenable Patch Management Server installed on the remote host is prior to 9.3.968.19. It is, therefore, affected by an SQL injection vulnerability due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this to inject or manipulate SQL...

[R1] Tenable Patch Management Fixes One Vulnerability

R1 Tenable Patch Management Fixes One Vulnerability Arnie Cabral Tue, 07/29/2025 - 09:34 A SQL injection vulnerability exists in Tenable Patch Management versions prior to 9.3.968.19 due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this to inject ...

Tenable Patch Management Server Admin Portal Detection

Binary data tenablepatchmanagementserverwebdetect.nbin...

Tenable Patch Management Server Installed (Windows)

Binary data tenablepatchmanagementserverwininstalled.nbin...

NewStart CGSL MAIN 7.02 : yajl Vulnerability (NS-SA-2025-0202)

The remote NewStart CGSL host, running version MAIN 7.02, has yajl packages installed that are affected by a vulnerability: - There's a memory leak in yajl 2.1.0 with use of yajltreeparse function. which will cause out-of-memory in server and cause crash. CVE-2023-33460 Note that Nessus has not...