357771 matches found
Microsoft Windows SMB Server (2017-10) Multiple Vulnerabilities (uncredentialed check)
The remote Windows host is affected by the following vulnerabilities : - A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 SMBv1 server handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to...
CodeMeter < 7.10a Multiple Vulnerabilities
According to its self-reported version, the CodeMeter WebAdmin server installed on the remote host is prior to 7.10a. It is, therefore, affected by multiple vulnerabilities : - Multiple memory corruption vulnerabilities exist where the packet parser mechanism does not verify length fields. An...
MS15-058: Vulnerabilities in SQL Server Could Allow Remote Code Execution (3065718) (uncredentialed check)
The remote Microsoft SQL Server installation is affected by multiple vulnerabilities : - A privilege escalation vulnerability exists due to the casting of pointers to an incorrect class. An authenticated, remote attacker can exploit this, via a specially crafted SQL query, to gain elevated...
News Desk newsdesk.cgi t Parameter Traversal Arbitrary File Access
The 'newsdesk.cgi' CGI is installed. This CGI has a well known security flaw that lets an attacker read arbitrary files with the privileges of the http daemon usually root or nobody. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid10586;...
OpenSSL 1.1.1 < 1.1.1k Multiple Vulnerabilities
The version of OpenSSL installed on the remote host is prior to 1.1.1k. It is, therefore, affected by multiple vulnerabilities as referenced in the 1.1.1k advisory. - The X509VFLAGX509STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set ...
Matt Wright guestbook.pl Arbitrary Command Execution
The 'guestbook.pl' is installed. This CGI has a well known security flaw that lets anyone execute arbitrary commands with the privileges of the HTTP daemon root or nobody. %NASLMINLEVEL 70300 This script was written by Mathieu Perrin See the Nessus Scripts License for details Changes by Tenable: ...
Oracle Java SE 1.7.0_251 / 1.8.0_241 / 1.11.0_6 / 1.13.0_2 Multiple Vulnerabilities (Jan 2020 CPU)
The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is prior to 7 Update 251, 8 Update 241, 11 Update 6, or 13 Update 2. It is, therefore, affected by multiple vulnerabilities: - Oracle Java SE and Java SE Embedded are prone to a severe division by zero,...
F5 Networks BIG-IP : Java commons-collections library vulnerability (K30518307)
CVE-2015-4852 Java applications that have an endpoint that accepts serialized Java objects, an attacker can combine serializable collections to create arbitrary remote code execution. Based on the FoxGlove, an attack can be done via RMI or HTTP. The vulnerability is actually in InvokerTransformer...
Microsoft Exchange Server Unsupported Version Detection (Uncredentialed)
According to its self-reported version number, the installation of Microsoft Exchange Server on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilitie...
Microsoft Windows XP Unsupported Installation Detection
The remote host is running Microsoft Windows XP. Support for this operating system by Microsoft ended April 8th, 2014. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities. Furthermore,...
LDAP User Enumeration
By using the search base gathered by plugin ID 25701, Nessus was able to enumerate the list of users in the remote LDAP directory. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid45478; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate",...
phpCOIN Multiple Script _CCFG Parameter Remote File Inclusion
The remote host is running phpCOIN, a software package for web-hosting resellers to handle clients, orders, helpdesk queries, and the like. The version of phpCOIN installed on the remote host fails to sanitize input to the 'CCFG' array parameter before using it in several scripts to include PHP...
Inconsistent Hostname and IP Address
The name of this machine either does not resolve or resolves to a different IP address. This may come from a badly configured reverse DNS or from a host file in use on the Nessus scanning host. As a result, URLs in plugin output may not be directly usable in a web browser and some web tests may b...
SizerOne ActiveX Control AddTab Method Remote Buffer Overflow
The SizerOne ActiveX control is installed on the remote system. It is included with ComponentOne Studio Enterprise as well as other applications such as TSC2 Help Desk and SAP GUI. The installed version of the control is affected by a heap-based buffer overflow vulnerability that can be triggered...
Cisco IOS XE Version
The remote host is running IOS XE, an operating system for Cisco routers. Nessus was able to read the IOS XE version number via an SSH connection to the router or via SNMP. C Tenable, Inc. include"compat.inc"; if description scriptid67217; scriptversion"1.47";...
AutoLinks Pro 'al_initialize.php alpath Parameter Remote File Inclusion
The remote host is running AutoLinks Pro, a commercial link management package. The version of AutoLinks Pro installed on the remote host allows attackers to control the 'alpath' parameter used when including PHP code in the 'alinitialize.php' script. By leveraging this flaw, an unauthenticated...
Oracle Fusion Middleware Oracle HTTP Server Multiple Vulnerabilities (January 2018 CPU)
The version of Oracle HTTP Server installed on the remote host is affected by multiple vulnerabilities as noted in the January 2018 CPU advisory. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid106299;...
OpenSSH S/KEY Authentication Account Enumeration
When OpenSSH has S/KEY authentication enabled, it is possible to remotely determine if an account configured for S/KEY authentication exists. Note that Nessus has not attempted to exploit the issue but has instead only checked if OpenSSH is running on the remote host. As a result, it will not...
Apache HTTP Server 2.4.6, 2.4.7, 2.4.9 Vulnerability
Binary data 700213.prm...
KB4103715: Windows 8.1 and Windows Server 2012 R2 May 2018 Security Update
The remote Windows host is missing security update 4103715 or cumulative update 4103725. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully...
phpCOIN < 1.2.4 Multiple Script _CCFG[_PKG_PATH_INCL] Parameter Remote File Inclusion
Binary data 3735.prm...
MySQL 5.7.x < 5.7.35 Multiple Vulnerabilities (Jul 2021 CPU)
The version of MySQL running on the remote host is 5.7.x prior to 5.7.35. It is, therefore, affected by multiple vulnerabilities, including the following, as noted in the July 2021 Critical Patch Update advisory: - curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting i...
NCR Aloha POS VNC Server 'aloha' Default Password
The VNC server running on the remote NCR Aloha POS device is secured with a default password. Nessus was able to login using VNC authentication with a password of 'aloha'. A remote, unauthenticated attacker could exploit this to take control of the system. C Tenable Network Security, Inc...
Xerver Double Slash Authentication Bypass
The version of Xerver installed on the remote host is affected by an authentication bypass vulnerability. It is possible to access protected web directories without authentication by prepending the directory with an extra '/' character, as long as the directory is not recursively protected. A...
WordPress 6.4.x < 6.4.5 Multiple Vulnerabilities
According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A Cross-Site Scripting XSS vulnerability affecting the HTML API. - A Cross-Site Scripting XSS vulnerability affecting the Template Part block. - A path traversal issue...
KB4056890: Windows 10 Version 1607 and Windows Server 2016 January 2018 Security Update (Meltdown)(Spectre)
The remote Windows host is missing security update 4056890 or 4057142. It is, therefore, affected by multiple vulnerabilities : - An vulnerability exists within microprocessors utilizing speculative execution and indirect branch prediction, which may allow an attacker with local user access to...
Oracle WebLogic Server Multiple Vulnerabilities (April 2018 CPU)
The version of Oracle WebLogic Server installed on the remote host is affected by multiple vulnerabilities %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid109201; scriptversion"1.22";...
MS KB3118753: Update for ActiveX Kill Bits
The remote Windows host is missing one or more kill bits for ActiveX controls that are known to contain vulnerabilities. If any of these ActiveX controls are ever installed on the remote host, either now or in the future, they would expose the host to various security issues. Note that the affect...
Apache on Windows mod_alias URL Validation Canonicalization CGI Source Disclosure
The version of Apache for Windows running on the remote host can be tricked into disclosing the source of its CGI scripts because of a configuration issue. Specifically, if the CGI directory is located within the document root, then requests that alter the case of the directory name will bypass t...
RHEL 8 : kernel (RHSA-2024:5101)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:5101 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: powerpc: Fix access beyond end...
Oracle Fusion Middleware Oracle HTTP Server Multiple Vulnerabilities (January 2019 CPU)
The version of Oracle HTTP Server installed on the remote host is affected by vulnerabilities as noted in the January 2019 CPU advisory: - This vulnerability is in the Oracle HTTP server component of Oracle Fusion Middleware subcomponent: Web Listener. The affected version is 12.1.2.3. This is an...
Default Password 'xc3511' for 'root' Account
The account 'root' on the remote host has the default password 'xc3511'. A remote attacker can exploit this issue to gain administrative access to the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; password = "xc3511"; include'deprecatednasllevel.inc';...
ArubaOS-Switch Ripple20 Multiple Vulnerabilities (ARUBA-PSA-2020-006)
The version of ArubaOS-Switch installed on the remote host is affected by multiple vulnerabilities in the Treck IP stack implementation. The vulnerabilities are collectively known as Ripple20, and can result in remote code execution, denial of service DoS, and information disclosure by remote,...
Oracle Java SE 1.7.0_241 / 1.8.0_231 / 1.11.0_5 / 1.13.0_1 Multiple Vulnerabilities (Oct 2019 CPU) (Unix)
The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is prior to 7 Update 241, 8 Update 231, 11 Update 5, or 13 Update 1. It is, therefore, affected by multiple vulnerabilities related to the following components : - 2D - Libraries - Kerberos - Networking -...
VMware vCenter Server 6.5 / 6.7 / 7.0 Multiple Vulnerabilities (VMSA-2021-0002)
The version of VMware vCenter Server installed on the remote host is 6.5 prior to 6.5 U3n, 6.7 prior to 6.7 U3l or 7.0 prior to 7.0 U1c. It is, therefore, affected by multiple vulnerabilities, as follows: - The vSphere Client HTML5 contains a remote code execution vulnerability in a vCenter Serve...
MySQL 5.6.x < 5.6.33 Multiple Vulnerabilities
The version of MySQL running on the remote host is 5.6.x prior to 5.6.33. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists in the InnoDB subcomponent that allows an authenticated, remote attacker to cause a denial of service condition. CVE-2016-5507 - A flaw...
Web Server Error Page Information Disclosure
The default error page sent by the remote web server discloses information that can aid an attacker, such as the server version and languages used by the web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
PHP 5.5.x < 5.5.29 Multiple Vulnerabilities
According to its banner, the version of PHP running on the remote web server is 5.5.x prior to 5.5.29. It is, therefore, affected by the following vulnerabilities : - A directory traversal vulnerability in the ZipArchive::extractTo function in ext/zip/phpzip.c could allow a remote attacker to...
Oracle Java Runtime Environment (JRE) Detection (Unix)
One or more instances of Oracle's formerly Sun's Java Runtime Environment JRE are installed on the remote host. This may include private JREs bundled with the Java Development Kit JDK. Notes: - Addition information provided in plugin Java Detection and Identification Unix - To discover instances ...
Backported Security Patch Detection (SSH)
Security patches may have been 'backported' to the remote SSH server without changing its version number. Banner-based checks have been disabled to avoid false positives. Note that this test is informational only and does not denote any security problem. C Tenable Network Security, Inc...
Microsoft 365 (Office) App Code Execution (December 2021)
The Windows 'Microsoft 365 Office' app installed on the remote host is affected by a code execution vulnerability. An attacker who successfully exploited the vulnerability could execute arbitrary code. Exploitation of the vulnerability requires that a program process a specially crafted file. Not...
OpenSSH < 7.2p2 X11Forwarding xauth Command Injection
According to its banner, the version of OpenSSH running on the remote host is prior to 7.2p2. It is, therefore, affected by a security bypass vulnerability due to improper sanitization of X11 authentication credentials. An authenticated, remote attacker can exploit this, via crafted credentials, ...
Microsoft DNS Server Remote Code Execution (SIGRed)
According to its self-reported version number, the Microsoft DNS Server running on the remote host is affected by a remote code execution vulnerability. An unauthenticated, remote attacker who successfully exploited the vulnerability could run arbitrary code in the context of the Local System...
Dropbear SSH Server < 2013.59 Multiple Vulnerabilities
According to its self-reported banner, the version of Dropbear SSH running on this port is earlier than 2013.59. As such, it is potentially affected by multiple vulnerabilities : - A denial of service vulnerability caused by the way the 'bufdecompress' function handles compressed files...
Web Application Information Disclosure
At least one web application hosted on the remote web server discloses the physical path to its directories when a malformed request is sent to it. Leaking this kind of information may help an attacker fine-tune attacks against the application and its backend. %NASLMINLEVEL 70300 C Tenable Networ...
Discard Service Detection
The remote host is running a 'discard' service. This service typically sets up a listening socket and will ignore all the data which it receives. This service is unused these days, so it is advised that you disable it. This script was written by Vincent Renardias See the Nessus Scripts License fo...
Adobe Dreamweaver dwsync.xml Remote Information Disclosure
Adobe's Dreamweaver is known to produce 'dwsync.xml' files. These contain synchronization information that may include the list of files and directories synchronised. This can lead to information disclosure. %NASLMINLEVEL 70300 Changes by Tenable: - Revised plugin title 4/15/009...
Apache Tomcat XSRF Token Disclosure
The remote Apache Tomcat web server is affected by an information disclosure vulnerability in the index page of the Manager and Host Manager applications. An unauthenticated, remote attacker can exploit this vulnerability to obtain a valid cross-site request forgery XSRF token during the redirect...
mDNS Detection (Local Network)
The remote service understands the Bonjour also known as ZeroConf or mDNS protocol, which allows anyone to uncover information from the remote host such as its operating system type and exact version, its hostname, and the list of services it is running. This plugin attempts to discover mDNS used...
RHEL 7 : sqlite (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - sqlite: Heap-buffer overflow in the getNodeSize function CVE-2017-10989 - sqlite: Out of bounds access...