Tenable Patch Management Client Installed (Windows)

Binary data tenablepatchmanagementclientwininstalled.nbin...

Tenable Patch Management Server < 9.3.968.19 SQLi

The version of Tenable Patch Management Server installed on the remote host is prior to 9.3.968.19. It is, therefore, affected by an SQL injection vulnerability due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this to inject or manipulate SQL...

[R1] Tenable Patch Management Fixes One Vulnerability

R1 Tenable Patch Management Fixes One Vulnerability Arnie Cabral Tue, 07/29/2025 - 09:34 A SQL injection vulnerability exists in Tenable Patch Management versions prior to 9.3.968.19 due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this to inject ...

Tenable Patch Management Server Installed (Windows)

Binary data tenablepatchmanagementserverwininstalled.nbin...

Tenable Patch Management Server Admin Portal Detection

Binary data tenablepatchmanagementserverwebdetect.nbin...

NewStart CGSL MAIN 7.02 : yajl Vulnerability (NS-SA-2025-0202)

The remote NewStart CGSL host, running version MAIN 7.02, has yajl packages installed that are affected by a vulnerability: - There's a memory leak in yajl 2.1.0 with use of yajltreeparse function. which will cause out-of-memory in server and cause crash. CVE-2023-33460 Note that Nessus has not...

GitLab 15.4 < 18.0.5 / 18.1 < 18.1.3 / 18.2 < 18.2.1 (CVE-2025-1299)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Missing Authorization in GitLab CVE-2025-1299 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenabl...

[R1] Tenable Identity Exposure Version 3.77.12 Fixes Multiple Vulnerabilities

R1 Tenable Identity Exposure Version 3.77.12 Fixes Multiple Vulnerabilities Arnie Cabral Wed, 07/23/2025 - 16:31 Tenable Identity Exposure leverages third-party software to help provide underlying functionality. Several of the third-party components Erlang OTP, Curl, nodeJS and .NET were found to...

SUSE SLES15 Security Update : python311 (SUSE-SU-2025:02358-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:02358-1 advisory. - CVE-2025-6069: Avoid worst case quadratic complexity when processing certain crafted malformed inputs with HTMLParser bsc1244705. Tenable...

Fedora 42 : vim (2025-9395406660)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-9395406660 advisory. The newest upstream commit Security fixes for CVE-2025-53906, CVE-2025-53905 Tenable has extracted the preceding description block directly from the...

Tenable Agent Code Execution Vulnerability

Tenable Agent is a vulnerability scanning program from Tenable USA. Tenable Agent suffers from a code execution vulnerability that originates from a non-administrative user being able to execute code with SYSTEM privileges. No details of the vulnerability are provided at this time...

Tenable Agent Elevation of Privilege Vulnerability

Tenable Agent is a vulnerability scanning program from Tenable USA. Tenable Agent has an elevation of privilege vulnerability, which originates from a non-administrative user deleting arbitrary local system files with SYSTEM privileges, and can be exploited by an attacker to tamper with the syste...

Unspecified Vulnerability in Tenable Agent

Tenable Agent is a vulnerability scanning program from Tenable USA. Tenable Agent suffers from a security vulnerability that originates from a non-administrative user being able to overwrite arbitrary local system files with SYSTEM privileges. No details of the vulnerability are provided at this...

RHEL 9 : kernel-rt (RHSA-2025:10829)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:10829 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism...

Security Updates for Microsoft PowerPoint Products (July 2025)

The Microsoft PowerPoint Products are missing a security update. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2025-49705 Note that Nessus h...

Unspecified Vulnerability in Tenable Nessus

Tenable Nessus is a network vulnerability scanning tool developed by Tenable, Inc. to detect security vulnerabilities in networks and provide recommendations for fixing them. Tenable Nessus has a security vulnerability that can be exploited by an attacker to overwrite arbitrary local system files...

Tenable Nessus <= 10.8.4 File Overwrite (TNS-2025-13)

According to its self-reported version, the Tenable Nessus application running on the remote host is prior or equal to 10.8.4. It is, therefore, affected by a file overwrite vulnerability as referenced in the TNS-2025-13 advisory. - In Tenable Nessus versions prior to 10.8.5 on a Windows host, it...

CVE-2025-36630

In Tenable Nessus versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could overwrite arbitrary local system files with log content at SYSTEM privilege...

Tenable Nessus Multiple Vulnerabilities (TNS-2025-13)

Tenable Nessus is prone to multiple vulnerabilities in various third-party components libxml2, libxslt. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Tenable Nessus Privilege Escalation Vulnerability (TNS-2025-13)

Tenable Nessus is prone to a local privilege escalation vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...