Tenable Nessus < 8.15.0 Multiple Vulnerabilities (TNS-2021-11) - Windows

Tenable Nessus is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:tenable:nessus"; ifdescripti...

Nessus Network Monitor < 5.13.0 Multiple Vulnerabilities (TNS-2021-02)

The version of Nessus Network Monitor NNM installed on the remote host is prior to 5.13.0. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid147729; scriptversion"1.8";...

Tenable Nessus Agent < 7.6.3 Third Party Vulnerability (OpenSSL) (TNS-2020-03)

Nessus Agent leverages third-party software to help provide underlying functionality. One of the third-party components OpenSSL was found to contain a multiple vulnerabilities, and updated versions have been made available by the providers. Out of caution and in line with good practice, Tenable...

p3survey09.tns-nipo.com Cross Site Scripting vulnerability OBB-1203643

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Google Android Buffer Overflow Vulnerability (CNVD-2019-27584)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A buffer overflow vulnerability exists in the ixheaacdaactns.c file in Android version 9 in the ixheaacdtnsarfilterdec file, which stems from a lack of boundary checking in the...

CVE-2018-9530

In ixheaacdtnsarfilterdec of ixheaacdaactns.c there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9. Android...

CVE-2018-17891

Carestream Vue RIS, RIS Client Builds: Version 11.2 and prior running on a Windows 8.1 machine with IIS/7.5. When contacting a Carestream server where there is no Oracle TNS listener available, users will trigger an HTTP 500 error, leaking technical information an attacker could use to initiate a...

Code injection

Carestream Vue RIS, RIS Client Builds: Version 11.2 and prior running on a Windows 8.1 machine with IIS/7.5. When contacting a Carestream server where there is no Oracle TNS listener available, users will trigger an HTTP 500 error, leaking technical information an attacker could use to initiate a...

CVE-2018-17891

Carestream Vue RIS, RIS Client Builds: Version 11.2 and prior running on a Windows 8.1 machine with IIS/7.5. When contacting a Carestream server where there is no Oracle TNS listener available, users will trigger an HTTP 500 error, leaking technical information an attacker could use to initiate a...

CVE-2018-17891

CVE-2018-17891 affects Carestream Vue RIS, RIS Client Builds 11.2 and earlier on Windows 8.1 with IIS/7.5. A missing Oracle TNS listener causes an HTTP 500 error that leaks technical information, enabling information exposure through error messages. The ICS-CERT advisory (ICSMA-18-277-01) confirm...

Tenable SecurityCenter < 5.7.1 Multiple Vulnerabilities (TNS-2018-12)

According to its self-reported version, the Tenable SecurityCenter application installed on the remote host is prior to 5.7.1. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported...

Oracle TNS Listener VSNNUM Version Remote Information Disclosure

It was possible to extract the version number of the remote Oracle TNS Transparent Network Substrate listener remotely by sending an unauthenticated request to the TNS listener service operating on this port. This information could aid an attacker. Note that the version of the TNS listener does n...

CVE-2017-8051

Tenable Appliance 3.5 - 4.4.0, and possibly prior versions, contains a flaw in the simpleupload.py script in the Web UI. Through the manipulation of the tnsappliancesessionuser parameter, a remote attacker can inject arbitrary commands...

tns-global.ru Open Redirect vulnerability

Vulnerable URL: http://tns-global.ru/bitrix/rk.php?goto=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 325874 VIP website status:| No Check...

CVE-2016-6146

The NameServer in SAP TREX 7.10 Revision 63 allows remote attackers to obtain sensitive TNS information via an unspecified query, aka SAP Security Note 2234226...

oracle-tns-version NSE Script

Decodes the VSNNUM version number from an Oracle TNS listener. Example Usage nmap -sV Requires shortport nmap comm stdnse string description = Decodes the VSNNUM version number from an Oracle TNS listener. local shortport = require "shortport" local nmap = require "nmap" local comm = require "com...

Tenable SecurityCenter PHP Character Handling (TNS-2015-09)

The SecurityCenter application installed on the remote host contains a bundled version of PHP that is prior to 5.4.43. It is, therefore, affected by an exclamation mark character handling issue in the escapeshellcmd and escapeshellarg PHP functions. A remote attacker can exploit this to substitut...

Tenable SecurityCenter OpenSSL ASN.1 Signature Verification Routine DoS (TNS-2016-01)

The SecurityCenter application installed on the remote host is affected by a denial of service vulnerability in the bundled OpenSSL library. The library is version 1.0.1 or later but prior to 1.0.1q. It is, therefore, affected by a NULL pointer dereference flaw in file rsaameth.c due to improper...

Oracle database vulnerability analysis: the need for a username and password to access your database-vulnerability warning-the black bar safety net

Summary General database vulnerabilities that are in a successful connection or login to the database after the invasion; this article describes two in 2 0 1 2 years of exposure to the Oracle, by these two vulnerabilities combined may not grasp the username/password of the case of the invasion of...

Oracle 8i dbsnmp Command Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3903/info Oracle 8i is an enterprise level database solution. It is available on a wide variety of platforms, including many Unix operating systems. It is possible to cause a denial of service condition in Oracle 8i. If...