Atlassian Bitbucket < 7.6.17 / 7.17.10 / 7.21.4 / 8.0.4 / 8.1.3 / 8.2.2 / 8.3.1 RCE

The version of Atlassian Bitbucket installed on the remote host 7.0.0 prior to 7.6.17, 7.7.0 prior to 7.17.10, 7.18.0 prior to 7.21.4, 8.0 prior to 8.0.3, 8.1 prior to 8.1.3, 8.2 prior to 8.2.2 or 8.3 prior to 8.3.1. It is, therefore, affected by a remote code execution vulnerability. A remote...

Liferay Portal Remote Code Execution (direct check)

Binary data liferayportal-cve-2020-7961.nbin...

Microsoft Office Protected View Disabled

A Microsoft Office application installed on the remote host has protected view disabled. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the Microsoft Security Updates API. The text itself is copyright C Microsoft Corporation...

MS05-017: Vulnerability in MSMQ Could Allow Code Execution (892944)

The remote version of Windows is affected by a vulnerability in Microsoft Message Queuing Service MSMQ. An attacker could exploit this flaw to execute arbitrary code on the remote host with the SYSTEM privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18021;...

Oracle Java SE 1.7.0_281 / 1.8.0_271 / 1.11.0_9 / 1.15.0_1 Multiple Vulnerabilities (Oct 2020 CPU)

The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is prior to 7 Update 281, 8 Update 271, 11 Update 9, or 15 Update 1. It is, therefore, affected by multiple vulnerabilities related to the following components as referenced in the October 2020 CPU...

SSL Session Resume Supported

This script detects whether a host allows resuming SSL sessions by performing a full SSL handshake to receive a session ID, and then reconnecting with the previously used session ID. If the server accepts the session ID in the second connection, the server maintains a cache of sessions that can b...

HP StorageWorks MSA P2000 Hidden 'admin' User Default Credentials

The remote device appears to be a HP StorageWorks MSA P2000 series. There is a hidden, undocumented account named 'admin' secured with a default password of '!admin'. A remote attacker can exploit this to gain privileged access to the management interface. TRUSTED...

Django Administration Application Login Form XSS

The remote host is using Django, a high-level Python web framework designed for rapid development of database-driven websites. The administration application included with the version of Django installed on the remote host fails to sanitize the URL before using it to generate dynamic HTML output...

PostgreSQL Server Detection

The remote service is a PostgreSQL database server, or a derivative such as EnterpriseDB. C Tenable Network Security, Inc. include "compat.inc"; if description scriptid26024; scriptversion"1.26"; scriptsetattributeattribute:"pluginmodificationdate", value:"2026/08/05"; scriptnameenglish:"PostgreS...

Software Enumeration (SSH)

Nessus was able to list the software installed on the remote host by calling the appropriate command e.g., 'rpm -qa' on RPM-based Linux distributions, qpkg, dpkg, etc.. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description...

Sonatype Nexus Repository Manager 3.x < 3.21.2 RCE

The Sonatype Nexus Repository Manager server application running on the remote host is version 3.x prior to 3.21.2. It is, therefore, affected by a remote code execution vulnerability, which allows for an attacker with any type of account on NXRM to execute arbitrary code by crafting a malicious...

PHP 7.4.x < 7.4.25

The version of PHP installed on the remote host is prior to 7.4.25. It is, therefore, affected by a vulnerability as referenced in the Version 7.4.25 advisory. - In PHP versions 7.3.x up to and including 7.3.31, 7.4.x below 7.4.25 and 8.0.x below 8.0.12, when running PHP FPM SAPI with main FPM...

MS KB2962393: Update for Vulnerability in Juniper Networks Windows In-Box Junos Pulse Client (Heartbleed)

The remote host is missing KB2962393, which resolves an OpenSSL information disclosure vulnerability Heartbleed in the Juniper VPN client software shipped with Windows 8.1. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid73865; scriptversion"1.17";...

MoinMoin Detection

The remote host is running MoinMoin, a wiki written in Python. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid44382; scriptversion"1.5"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01"; scriptnameenglish:"MoinMoin Detection";...

Security Updates for Microsoft SQL Server Reporting Services (September 2020)

The Microsoft SQL Server Reporting Services installation on the remote host is missing a security update. It is, therefore, affected by a security feature bypass vulnerability in SQL Server Reporting Services SSRS due to improper validation of uploaded attachments to reports. An authenticated,...

nginx 1.x < 1.14.1 / 1.15.x < 1.15.6 Multiple Vulnerabilities

The installed version of nginx is 1.x prior to 1.14.1 or 1.15.x prior to 1.15.6. It is, therefore, affected by the following issues: - An unspecified error exists related to the module 'ngxhttpv2module' that allows excessive memory usage. CVE-2018-16843 - An unspecified error exists related to th...

Cisco AnyConnect Secure Mobility Client < 4.6.01098 Certificate Bypass Vulnerability

The version of Cisco AnyConnect Secure Mobility Client installed on the remote Windows host is prior to 4.6.01098. It is, therefore, affected by a certificate bypass vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid110563; scriptversion"1.7";...

Oracle TNS Listener VSNNUM Version Remote Information Disclosure

It was possible to extract the version number of the remote Oracle TNS Transparent Network Substrate listener remotely by sending an unauthenticated request to the TNS listener service operating on this port. This information could aid an attacker. Note that the version of the TNS listener does n...

NETGEAR DGN Remote Unauthenticated Command Execution

The remote NETGEAR DGN device is affected by a flaw in the setup.cgi script that allows an unauthenticated, remote attacker to execute arbitrary commands with root privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid104128; scriptversion"1.3";...

Portable SDK for UPnP Devices (libupnp) HTTP Arbitrary File Write

The Portable SDK for UPnP Devices libupnp running on the remote host is affected by a flaw that is triggered when handling HTTP POST or GET requests. An unauthenticated, remote attacker can exploit this to write arbitrary files to the web server file system. C Tenable Network Security, Inc...

Joomla! User-Agent Object Injection RCE

The Joomla! application running on the remote web server is affected by a remote code execution vulnerability due to improper sanitization of the User-Agent header field when saving session values. An unauthenticated, remote attacker can exploit this, via a serialized PHP object, to execute...

WEBGATE ActiveX Controls Multiple Buffer Overflows

The remote host contains one or more of the following WEBGATE ActiveX controls : - Control Center : - FileConverter.FileConverterCtrl.1 - LoginContoller.LoginControllerCtrl.1 - WESPDiscovery.WESPDiscoveryCtrl.1 - WESPPlayback.WESPPlaybackCtrl.1 - eDVR Manager : - WESPDiscovery.WESPDiscoveryCtrl.1...

Apache Tomcat 9.0.0.M1 < 9.0.68

The version of Tomcat installed on the remote host is prior to 9.0.68. It is, therefore, affected by a vulnerability as referenced in the fixedinapachetomcat9.0.68security-9 advisory. - If Apache Tomcat 8.5.0 to 8.5.82, 9.0.0-M1 to 9.0.67, 10.0.0-M1 to 10.0.26 or 10.1.0-M1 to 10.1.0 was configure...

Apache Tomcat 8.5.0 < 8.5.34

The version of Tomcat installed on the remote host is prior to 8.5.34. It is, therefore, affected by a vulnerability as referenced in the fixedinapachetomcat8.5.34security-8 advisory. - When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90...

ISC BIND 9.x.x < 9.9.13-P1 / 9.10.x < 9.10.8-P1 / 9.11.x < 9.11.4-P1 / 9.12.x < 9.12.2-P1 deny-answer-aliases DoS Vulnerability

According to its self-reported version number, the instance of ISC BIND running on the remote name server is 9.x.x prior to 9.9.13-P1, 9.10.x prior to 9.10.8-P1, 9.11.x prior to 9.11.4-P1, or 9.12.x prior to 9.12.2-P1. It is, therefore, affected by a denial of service vulnerability in the...

Arista Networks EOS Multiple Vulnerabilities (SA0024) (SWEET32)

The version of Arista Networks EOS running on the remote device is affected by multiple vulnerabilities in the included OpenSSL library : - An information disclosure vulnerability exists in the dsasignsetup function in dsaossl.c due to a failure to properly ensure the use of constant-time...

r57shell Backdoor Detection

At least one instance of r57shell is hosted on the remote web server. This is a PHP script that acts as a backdoor and provides a convenient set of tools for attacking the affected host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

PHP 8.3.x < 8.3.12 Multiple Vulnerabilities

The version of PHP installed on the remote host is prior to 8.3.12. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.3.12 advisory. - In PHP versions 8.1. before 8.1.30, 8.2. before 8.2.24, 8.3. before 8.3.12, when using a certain non- standard configurations ...

Apache OFBiz Default Credentials

Nessus was able to login to the remote Apache OFBiz application by providing default credentials. A remote attacker can exploit this issue to perform administrative actions. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Cisco Secure Client for Linux with ISE Posture Module Privilege Escalation (cisco-sa-secure-privesc-sYxQO6ds)

According to its self-reported version, Cisco Secure Client for Linux with ISE Posture Module is affected by a privilege escalation vulnerability. - A vulnerability in the ISE Posture System Scan module of Cisco Secure Client for Linux could allow an authenticated, local attacker to elevate...

Azul Zulu Java Multiple Vulnerabilities (2022-07-19)

The version of Azul Zulu installed on the remote host is prior to 6 6.49 / 7 7.55 / 8 8.63 / 11 11.57 / 13 13.49 / 15 15.41 / 17 17.35 / 18 18.32. It is, therefore, affected by multiple vulnerabilities as referenced in the 2022-07-19 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM...

CGI Generic Injectable Parameter

Nessus was able to to inject innocuous strings into CGI parameters and read them back in the HTTP response. The affected parameters are candidates for extended injection tests like cross-site scripting attacks. This is not a weakness per se, the main purpose of this test is to speed up other...

KB5021233: Windows 10 Version 20H2 / 21H1 / 21H2 / 22H2 Security Update (December 2022)

The remote Windows host is missing security update 5021233. It is, therefore, affected by multiple vulnerabilities - PowerShell Remote Code Execution Vulnerability CVE-2022-41076 - Windows Subsystem for Linux WSL2 Kernel Elevation of Privilege Vulnerability CVE-2022-44689 - A remote code executio...

OpenSSL 3.0.0 < 3.0.7 Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 3.0.7. It is, therefore, affected by multiple vulnerabilities as referenced in the 3.0.7 advisory. - A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs...

Default Password 'admin123' for 'admin' Account

The account 'admin' on the remote host has the default password 'admin123'. A remote attacker can exploit this issue to gain administrative access to the affected system. TRUSTED...

Pulse Connect Secure Multiple Vulnerabilities (SA43730)

According to its self-reported version, the version of Pulse Connect Secure running on the remote host is affected by multiple vulnerabilities. Refer to the vendor advisory for additional information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

MS14-026: Vulnerability in .NET Framework Could Allow Elevation of Privilege (2958732)

The remote Windows host has a version of the Microsoft .NET Framework that is affected by a privilege escalation vulnerability due to the way that .NET Framework handles TypeFilterLevel checks for some malformed objects. Note that this vulnerability only affects applications that use .NET Remotin...

OpenSSH < 10.3 Multiple Vulnerabilities

The version of OpenSSH installed on the remote host is prior to 10.3. It is, therefore, affected by multiple vulnerabilities as referenced in the release-10.3 advisory. - In OpenSSH before 10.3, validation of shell metacharacters in user names supplied on the command-line was performed too late,...

IBM BigFix Platform 9.2.x < 9.2.15 / 9.5.x < 9.5.10 Multiple Vulnerabilities

According to its self-reported version, the IBM BigFix Platform application running on the remote host is 9.2.x prior to 9.2.15, or 9.5.x prior to 9.5.10. It is, therefore, affected by multiple vulnerabilities : - IBM BigFix Platform is vulnerable to HTTP response splitting attacks, caused by...

Windows Server 2012 June 2017 Security Updates

The remote Windows host is missing security update 4022718 or cumulative update 4022724. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in Windows Hyper-V instruction emulation due to a failure to properly enforce privilege levels. An...

Samba 3.x < 4.2.10 / 4.2.x < 4.2.10 / 4.3.x < 4.3.7 / 4.4.x < 4.4.1 Multiple Vulnerabilities (Badlock)

The version of Samba running on the remote host is 3.x or 4.2.x prior to 4.2.10, 4.3.x prior to 4.3.7, or 4.4.x prior to 4.4.1. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in the DCE-RPC client when handling specially crafted DCE-RPC packets. A man-in-the-middle MitM...

Apache Tomcat 8.5.x < 8.5.23 Remote Code Execution via JSP Upload

The version of Apache Tomcat installed on the remote host is 8.5.x prior to 8.5.23. It is, therefore, affected by an unspecified vulnerability when running with HTTP PUTs enabled e.g. via setting the readonly initialization parameter of the Default to false that makes it possible to upload a JSP...

PostNuke < 0.7.2.3 Multiple Script XSS

The remote host is running a version of PostNuke that is vulnerable to various cross-site scripting attacks. An attacker may use these flaws to steal the cookies of the legitimate users of this website. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Additional DNS Hostnames

Hostnames different from the current hostname have been collected by miscellaneous plugins. Nessus has generated a list of hostnames that point to the remote host. Note that these are only the alternate hostnames for vhosts discovered on a web server. Different web servers may be hosted on...

Microsoft Visual Studio Team Foundation Server / Azure DevOps Server Detection

The remote host is running Microsoft Visual Studio Team Foundation Server or Azure DevOps Server. This software is a suite of tools for collaborative software development. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description...

JBoss Enterprise Application Platform (EAP) Status Servlet Request Remote Information Disclosure

The version of JBoss Enterprise Application Platform EAP running on the remote host allows unauthenticated access to a status servlet, which is used to monitor sessions and requests sent to the server. This vulnerability CVE-2008-3273 was fixed in versions 4.2.0.CP03 and 4.3.0.CP01, but was later...

Security Updates for Microsoft Office Products C2R (February 2024)

The Microsoft Office Products are missing a security update. It is, therefore, affected by multiple vulnerabilities, as follows: - A remote code execution vulnerability. CVE-2024-21413 - A remote code execution vulnerability. CVE-2024-20673 Note that Nessus has not tested for these issues but has...

OpenSSL 1.1.1 < 1.1.1d Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 1.1.1d. It is, therefore, affected by multiple vulnerabilities as referenced in the 1.1.1d advisory. - In situations where an attacker receives automated notification of the success or failure of a decryption attempt an attacker, aft...

HP System Management Homepage < 7.2.5 / 7.4.1 Multiple Vulnerabilities (POODLE)

According to the web server's banner, the version of HP System Management Homepage SMH hosted on the remote web server is prior to 7.2.5 or 7.4.1. It is, therefore, affected by the following vulnerabilities : - An information disclosure vulnerability exists exists in OpenSSL due to the pretty...

POP3 Service STLS Plaintext Command Injection

The remote POP3 service contains a software flaw in its STLS implementation that could allow a remote, unauthenticated attacker to inject commands during the plaintext protocol phase that will be executed during the ciphertext protocol phase. Successful exploitation could allow an attacker to ste...