11757 matches found
Siemens SIMATIC Devices Out-of-bounds Read (CVE-2024-26982)
In the Linux kernel, the following vulnerability has been resolved: Squashfs: check the inode number is not the invalid value of zero This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...
Brother HL Printers Cross-site Scripting (CVE-2018-11581)
Cross-site scripting XSS vulnerability on Brother HL series printers allows remote attackers to inject arbitrary web script or HTML via the url parameter to etc/loginerror.html. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...
Siemens SIMATIC Devices NULL Pointer Dereference (CVE-2024-57981)
usb: xhci: NULL pointer dereference on certain command aborts. If a command is queued to the final usable TRB of a ring segment, the enqueue pointer is advanced to the subsequent link TRB and no further. If the command is later aborted, when the abort completion is handled the dequeue pointer is...
Siemens SIMATIC Devices Improper Input Validation (CVE-2025-21762)
In the Linux kernel, the following vulnerability has been resolved: arp: use RCU protection in arpxmit arpxmit can be called without RTNL or RCU protection. Use RCU protection to avoid potential UAF. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot...
Brother Printers NULL Pointer Dereference (CVE-2023-29984)
Null pointer dereference vulnerability exists in multiple vendors MFPs and printers which implement Debut web server 1.2 or 1.3. Processing a specially crafted request may lead an affected product to a denial-of- service DoS condition. As for the affected products/models/versions, see the detaile...
Tenable Identity Exposure < 3.93.4 Multiple Vulnerabilities (TNS-2025-22)
The version of the Tenable Identity Exposure running on the remote host is prior to 3.93.4. It is, therefore, affected by multiple vulnerabilities according to advisory TNS-2025-07, including the following: - Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NE...
[R1] Tenable Identity Exposure Version 3.93.4 Fixes Multiple Vulnerabilities
R1 Tenable Identity Exposure Version 3.93.4 Fixes Multiple Vulnerabilities Arnie Cabral Fri, 10/17/2025 - 10:02 Tenable Identity Exposure leverages third-party software to help provide underlying functionality. One of the third-party components .NET was found to contain vulnerabilities, and updat...
[R1] Tenable Identity Exposure Version 3.93.4 Fixes Multiple Vulnerabilities
R1 Tenable Identity Exposure Version 3.93.4 Fixes Multiple Vulnerabilities Arnie Cabral Fri, 10/17/2025 - 10:02 Tenable Identity Exposure leverages third-party software to help provide underlying functionality. One of the third-party components .NET was found to contain vulnerabilities, and updat...
Tenable Security Center < 6.7.0 (TNS-2025-21)
According to its self-reported version, the Tenable Security Center running on the remote host is prior to 6.7.0. It is, therefore, affected by a vulnerability as referenced in the TNS-2025-21 advisory. - In Tenable Security Center versions prior to 6.7.0, an improper access control vulnerability...
Barco ClickShare Devices Improper Certificate Validation (CVE-2019-18826)
Barco ClickShare Button R9861500D01 devices before 1.9.0 have Improper Following of a Certificate's Chain of Trust. The embedded 'donglebridge' program used to expose the functionalities of the ClickShare Button to a USB host, does not properly validate the whole certificate chain. This plugin on...
Fedora 41 : ibus-bamboo (2025-e3f99bf558)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-e3f99bf558 advisory. Rebuild with golang-1.24.7-1.fc41 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
CVE-2025-36636
In Tenable Security Center versions prior to 6.7.0, an improper access control vulnerability exists where an authenticated user could access areas outside of their authorized scope...
EUVD-2025-33302
In Tenable Security Center versions prior to 6.7.0, an improper access control vulnerability exists where an authenticated user could access areas outside of their authorized scope...
CVE-2025-36636
CVE-2025-36636 affects Tenable Security Center before version 6.7.0. The issue is an improper access control that allows an authenticated user to access areas outside their authorized scope, with impact described as none to confidentiality, and low integrity impact (CVSS 3.1: 4.3). Remediation is...
CVE-2025-36636 Improper Access Control
In Tenable Security Center versions prior to 6.7.0, an improper access control vulnerability exists where an authenticated user could access areas outside of their authorized scope...
CVE-2025-36636 Improper Access Control
In Tenable Security Center versions prior to 6.7.0, an improper access control vulnerability exists where an authenticated user could access areas outside of their authorized scope...
Tenable Security Center 安全漏洞
Tenable Security Center is a security center from Tenable USA. A security vulnerability exists in Tenable Security Center versions prior to 6.7.0 that stems from improper access control and could lead to unauthorized access...
PT-2025-41272
Name of the Vulnerable Software and Affected Versions Tenable Security Center versions prior to 6.7.0 Description An improper access control issue exists where an authenticated user can access areas outside of their authorized scope. This could lead to potential data exposure. Recommendations...