346916 matches found
Default Password 'St0r@ge!' for 'administrator' Account
The account 'administrator' on the remote host has the default password 'St0r@ge!'. A remote attacker can exploit this issue to gain administrative access to the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. var account = "administrator"; var password = "St0r@ge!";...
Default Password '54321' for 'admin' Account
The account 'admin' on the remote host has the default password '54321'. A remote attacker can exploit this issue to gain administrative access to the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "admin"; password = "54321"; include'deprecatednasllevel.inc';...
DNS Server Detection
The remote service is a Domain Name System DNS server, which provides a mapping between hostnames and IP addresses. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11002; scriptversion"$Revision: 1.22 $"; scriptcvsdate"$Date: 2017/05/16 19:35:38 $";...
KB5015807: Windows 10 Version 20H2 / 21H1 / 21H2 Security Update (July 2022)
The remote Windows host is missing security update 5015807. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2022-22024, CVE-2022-22027,...
CentOS 7 : kernel (RHSA-2021:3327)
The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3327 advisory. - A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down usually due to Secure Boot guest syst...
openSUSE Security Update : the Linux Kernel (openSUSE-2021-843)
The openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2021-33200: Enforcing incorrect limits for pointer arithmetic operations by the BPF verifier could be abused to perform out-of-bounds reads and writes in kernel memor...
7-Zip < 18.05 Memory Corruption Arbitrary Code Execution
The version of 7-Zip installed on the remote Windows host contains a flaw in the NArchive::NRar::CHandler::Extract method in Archive/Rar/RarHandler.cpp. The issue is triggered as certain input is not properly validated when performing 'solid' decompression of a RAR archive. With a specially craft...
KB4038781: Windows 10 September 2017 Cumulative Update
The remote Windows host is missing security update 4038781. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Microsoft Windows PDF Library improperly handles objects in memory. The vulnerability could corrupt memory in a way that enables...
Acme mini_httpd Protocol String Handling Memory Disclosure
The Acme minihttpd web server running on the remote host is affected by a flaw in the addheaders function within file minihttpd.c that is triggered when handling HTTP requests that have a very long protocol string. An unauthenticated, remote attacker can exploit this, via a crafted request, to...
Apache Tomcat Directory Traversal
The remote web server proxies certain requests to an Apache Tomcat server and allows directory traversal attacks due to Tomcat allowing '/', '', and '%5c' characters as directory separators. By sending a specially crafted request, it is possible for an attacker to break out of the given context...
XMB member.php Multiple Parameter SQL Injection
The remote host is running XMB Forum, a web forum written in PHP. According to its banner, this forum is vulnerable to a SQL injection bug which may allow an attacker to steal the passwords hashes of any user of this forum, including the forum administrator. Once he has the password hashes, he ca...
Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3651)
The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3651 advisory. - mm, thp: Do not make page table dirty unconditionally in followtranshugepmd Kirill A. Shutemov Orabug: 27200879 CVE-2017-1000405 - fix unbalanced...
Fedora 25 : jackson-databind (2017-f452765e1e)
Security fix for CVE-2017-7525 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...
Default Password '888888' for '888888' Account
The account '888888' on the remote host has the default password '888888'. A remote attacker can exploit this issue to gain administrative access to the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "888888"; password = "888888"; include'deprecatednasllevel.inc';...
HyperText Transfer Protocol (HTTP) Redirect Information
The remote web server issues an HTTP redirect when requesting the root directory of the web server. This plugin is informational only and does not denote a security problem. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid91634; scriptversion"1.3";...
Kerberos Information Disclosure
Nessus was able to retrieve the realm name and/or server time of the remote Kerberos server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid43829; scriptversion"$Revision: 1.6 $"; scriptnameenglish:"Kerberos Information Disclosure"; scriptsummaryenglish:"Tries to get...
Hydra: SOCKS5
This plugin runs Hydra to find SOCKS5 accounts and passwords by brute force. To use this plugin, enter the 'Logins file' and the 'Passwords file' under the 'Hydra NASL wrappers options' advanced settings block. TRUSTED...
Containerd 1.7.27 < 1.7.32 / 2.0.4 < 2.0.9 / 2.1.x < 2.2.4 / 2.3.x < 2.3.1 runAsNonRoot Bypass
The version of Containerd on the remote host is 1.7.27 prior to 1.7.32, 2.0.4 prior to 2.0.9, 2.1.x prior to 2.2.4, or 2.3.x prior to 2.3.1. It is, therefore, affected by a security bypass vulnerability. A bug was found in containerd where containers launched with a numeric User directive that...
Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-5092-2)
The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5092-2 advisory. Valentina Palmiotti discovered that the iouring subsystem in the Linux kernel could be coerced to free adjacent memory. A local attacker could use this t...
Photon OS 1.0: Linux PHSA-2020-1.0-0310
An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0310. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid139079...
KB4561608: Windows 10 Version 1809 and Windows Server 2019 June 2020 Security Update
The remote Windows host is missing security update 4561608. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in the way that the wlansvc.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute...
PHP 7.0.x < 7.0.0 Multiple Vulnerabilities
According to its banner, the version of PHP running on the remote web server is 7.x prior to 7.0.0. It is, therefore, affected by the following vulnerabilities: - A directory traversal vulnerability in the ZipArchive::extractTo function of ext/zip/phpzip.c script. An unauthenticated, remote...
KB4093119: Windows 10 Version 1607 and Windows Server 2016 April 2018 Security Update
The remote Windows host is missing security update 4093119. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when Windows improperly handles objects in memory and incorrectly maps kernel memory. CVE-2018-1009 - A security feature bypass...
AIX bind Advisory : bind_advisory16.asc (IV98826) (IV98827)
The version of bind installed on the remote AIX host is affected by the following vulnerabilities : - A security bypass exists in the way BIND handles TSIG authentication for dynamic updates. A remote, unauthenticated attacker can exploit this, via a specially crafted request packet containing a...
Windows 7 and Windows Server 2008 R2 May 2017 Security Updates
The remote Windows host is missing security update 4019263 or cumulative update 4019264. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists in the Windows DNS server when it's configured to answer version queries. An unauthenticated, remote attacke...
MS16-099: Security Update for Microsoft Office (3177451)
The Microsoft Office application installed on the remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - Multiple memory corruption issues exist in Microsoft Office software due to improper handling of objects in memory. An unauthenticated,...
MS15-118: Security Update for .NET Framework to Address Elevation of Privilege (3104507)
The remote Windows host has a version of the Microsoft .NET Framework that is affected by multiple vulnerabilities : - An information disclosure vulnerability exists in the .NET Framework due to improper DTD parsing of crafted XML files. An unauthenticated, remote attacker can exploit this, via a...
Unsupported Microsoft DNS Server Detection
Nessus detected a version of Microsoft DNS server listening on the remote host that belongs to an unsupported version of Windows. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities. C...
TFTP Daemon Detection
The remote host is running a TFTP Trivial File Transfer Protocol daemon. TFTP is often used by routers and diskless hosts to retrieve their configuration. It can also be used by worms to propagate. C Tenable Network Security, Inc. Revised 19/02/05 by Martin O'Neal of Corsaire to make the detectio...
jQuery UI < 1.13.2 Cross-Site Scripting
According to its self-reported version number, jQuery UI is prior to 1.13.2. It is, therefore, affected by a Cross-Site Scripting when refreshing a checkboxradio with an HTML-like initial text label CVE-2022-31160 Note that the scanner has not tested for these issues but has instead relied only o...
AlmaLinux 8 : httpd:2.4 (ALSA-2021:3816)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2021:3816 advisory. httpd: modproxy: SSRF via a crafted request uri-path containing unix: CVE-2021-40438 httpd: modsession: Heap overflow via a crafted SessionHeader value...
Splunk Enterprise 8.1.x < 8.1.7.2 / 8.2.x < 8.2.3.3 Log4j
According to its self-reported version number, the version of Splunk running on the remote web server is Splunk Enterprise 8.1.x prior to 8.1.7.2 or 8.2.x prior to 8.2.3.3. It may, therefore, be affected by the following vulnerabilities related to the use of Log4j, as follows: - Apache Log4j2...
Apache 2.4.x < 2.4.42 Multiple Vulnerabilities
The version of Apache httpd installed on the remote host is prior to 2.4.42. It is, therefore, affected by multiple vulnerabilities as referenced in the 2.4.42 advisory. - In Apache HTTP Server 2.4.0 to 2.4.41, modproxyftp may use uninitialized memory when proxying to a malicious FTP server...
Oracle Java SE Multiple Vulnerabilities (October 2014 CPU)
The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is prior to 8 Update 25, 7 Update 71, 6 Update 85, or 5 Update 75. It is, therefore, affected by security issues in the following components : - 2D - AWT - Deployment - Hotspot - JAXP - JSSE - JavaFX -...
SuperMicro Device Uses Default SSH Host Key
The SSH host key used by the remote host has not been changed from the default host key that is hardwired into the firmware. The private key corresponding to this host key is shared across all devices running the same firmware, meaning that the remote host's key certificate cannot be trusted...
MoinMoin rsslink() Function page_name Parameter XSS
The MoinMoin install hosted on the remote web server fails to properly sanitize user-supplied input in the 'pagename' parameter when creating an rss link. An attacker may be able to leverage this issue to inject arbitrary HTML and script code into a user's browser to be executed within the securi...
RHEL 9 : binutils (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - binutils: Illegal memory access when accessing a zer0-lengthverdef table CVE-2023-1972 - In GNU Binutils...
PHP 8.1.x < 8.1.16 Multiple Vulnerabilities
According to its self-reported version number, the version of PHP installed on the remote host is 8.0.x prior to 8.0.28, 8.1.x prior to 8.1.16, or 8.2.x prior to 8.2.3. It is, therefore, affected by multiple vulnerabilities: - A denial of service DoS attack due to insufficient validation of...
Fortinet FortiOS 5.4.6 <= 5.4.12 / 5.6.3 < 5.6.8 / 6.0.x < 6.0.5 SSL VPN Directory Traversal (FG-IR-18-384)
The remote host is running a version of FortiOS 5.4.6 prior or equal to 5.4.12, 5.6.3 prior to 5.6.8 or 6.0.x prior to 6.0.5. It is, therefore, affected by a directory traversal vulnerability in the SSL VPN web portal, due to an improper limitation of a pathname to a restricted Directory. An...
CGI Generic Remote File Inclusion
The remote web server hosts CGI scripts that fail to adequately sanitize request strings. By leveraging this issue, an attacker may be able to include a remote file from a remote server and execute arbitrary commands on the target host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
Adobe Reader Unsupported Version Detection
According to its self-reported version, the installation of Adobe Reader on the remote Windows host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities. C Tenable...
SuSE 10 Security Update : xpdf (ZYPP Patch Number 7190)
A specially crafted PDF files could crash xpdf or potentially even cause execution of arbitrary code. CVE-2010-3702 / CVE-2010-3703 / CVE-2010-3704 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...
Office Viewer Component < 5.0 Multiple Vulnerabilities
The remote host contains the Office Viewer Component, an ActiveX control for working with Microsoft Office documents. The version of this control installed on the remote host contains a buffer overflow in its 'HttpDownloadFile' method that could be exploited to execute arbitrary code remotely if ...
WordPress 6.1.x < 6.1.7 Multiple Vulnerabilities
According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A Cross-Site Scripting XSS vulnerability affecting the HTML API. - A Cross-Site Scripting XSS vulnerability affecting the Template Part block. - A path traversal issue...
AD Starter Scan - Kerberoasting
Binary data adsikerberoasting.nbin...
Amazon Linux 2 : kernel, --advisory ALAS2-2021-1685 (ALAS-2021-1685)
The version of kernel installed on the remote host is prior to 4.14.238-182.421. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2021-1685 advisory. A vulnerability was found in the bluez, where Passkey Entry protocol used in Secure Simple Pairing SSP, Secure...
PHP 5.6.x < 5.6.35 Security Bypass Vulnerability
According to its banner, the version of PHP running on the remote web server is 5.6.x prior to 5.6.35. It is, therefore, affected by a security bypass vulnerability. Dumpable FPM child processes allow bypassing opcache access controls because fpmunix.c makes a PRSETDUMPABLE prctl call, allowing o...
RHEL 6 / 7 : samba (RHSA-2017:1270) (SambaCry)
An update for samba is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...
MS14-058: Vulnerabilities in Kernel-Mode Driver Could Allow Remote Code Execution (3000061)
The remote Windows host is affected by multiple vulnerabilities : - A privilege escalation vulnerability allows an attacker to run arbitrary code in kernel mode due to the kernel-mode driver improperly handling objects in memory. CVE-2014-4113 - A remote code execution vulnerability allows a remo...
HP System Management Homepage < 6.3 Multiple Vulnerabilities
According to the web server's banner, the version of HP System Management Homepage SMH hosted on the remote host is earlier than 6.3. Such versions are reportedly affected by the following vulnerabilities : - An error exists in the function 'fnmatch' in the bundled version of PHP that can lead to...