358063 matches found
libcurl 7.69 < 8.4.0 Heap Buffer Overflow
The version of libcurl installed on the remote host is affected by a heap based buffer overflow in the SOCKS5 proxy handshake. When curl is asked to pass along the hostname to the SOCKS5 proxy to allow that to resolve the address instead of it getting done by curl itself, the maximum length that...
Windows Terminal RCE (CVE-2022-44702).
A remote code execution vulnerability exists in Windows Terminal. An unauthenticated, local attacker can exploit this to execute arbitrary commands. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 ...
Cisco IOS XE Software Smart Install Remote Code Execution Vulnerability
According to its self-reported version, the IOS XE is affected by one or more vulnerabilities. Please see the included Cisco BIDs and the Cisco Security Advisory for more information. TRUSTED...
SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2016:2912-1)
The SUSE Linux Enterprise 12 kernel was updated to 3.12.67 to receive various security and bugfixes. The following security bugs were fixed : - CVE-2016-7042: The prockeysshow function in security/keys/proc.c in the Linux kernel used an incorrect buffer size for certain timeout data, which allowe...
Default Password 'hi3518' for 'root' Account
The account 'root' on the remote host has the default password 'hi3518'. A remote attacker can exploit this issue to gain administrative access to the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; password = "hi3518"; include'deprecatednasllevel.inc';...
HPE OneView Authentication Bypass (CVE-2023-30908)
Binary data hpeoneviewcve-2023-30908.nbin...
Oracle Fusion Middleware Oracle HTTP Server (Oct 2020 CPU)
The version of Oracle HTTP Server installed on the remote host is affected by the following vulnerabilities as referenced in the October 2020 CPU advisory: - A denial of service DoS vulnerability exists in the SSL Module OpenSSL. An unauthenticated, remote attacker with network access via HTTPS,...
Amazon Linux 2 : python3 (ALAS-2020-1484)
The version of python3 installed on the remote host is prior to 3.7.9-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1484 advisory. Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes,...
RHEL 7 : kernel (RHSA-2014:0786)
Updated kernel packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base score...
Drupal 9.5.x < 9.5.11 / 10.x < 10.0.11 / 10.1.x < 10.1.4 Drupal Vulnerability (SA-CORE-2023-006)
According to its self-reported version, the instance of Drupal running on the remote web server is 9.5.x prior to 9.5.11, 10.x prior to 10.0.11, or 10.1.x prior to 10.1.4. It is, therefore, affected by a vulnerability. - In certain scenarios, Drupal's JSON:API module will output error backtraces...
RHEL 7 : kernel (RHSA-2021:2314)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2314 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Integer overflow in IntelR...
SolarWinds Orion Platform < 2020.2.1 HF2 Multiple Vulnerabilities
According to its self-reported version number, the version of SolarWinds Orion Platform is prior to 2020.2.1 hot fix 2. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability exists in the ExecuteVBScript method due to improper validation of a user-supplie...
McAfee ePolicy Orchestrator Agent Remote Log Detection
McAfee ePolicy Orchestrator ePO Agent is running on the remote host, and its logs are viewable by unauthenticated, remote users. This is not the default behavior. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid97212; scriptversion"1.10";...
Jenkins < 1.642.2 / 1.650 Java Object Deserialization RCE
The remote web server hosts a version of Jenkins or Jenkins Enterprise that is prior to 1.642.2 or 1.650. It is, therefore, affected by a Java deserialization vulnerability. An unauthenticated, remote attacker can exploit this, by deserializing specific java.rmi and sun.rmi objects, to start a JR...
Fedora 11 : kernel-2.6.30.9-102.fc11 (2009-12786)
CVE-2009-1298 null ptr deref in ipv4 ipfragreasm. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
SUSE SLES15 Security Update : kernel (Live Patch 28 for SLE 15) (SUSE-SU-2022:3360-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3360-1 advisory. This update for the Linux Kernel 4.12.14-15086 fixes several issues. The following security issues were fixed: - CVE-2022-39188: Fixed a race...
Amazon Linux 2 : kernel (ALAS-2020-1495)
The version of kernel installed on the remote host is prior to 4.14.198-152.320. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1495 advisory. In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and...
iLO 4 < 2.60 / iLO 5 < 1.30 Multiple Vulnerabilities
According to its version number, the remote HP Integrated Lights-Out iLO server is affected by multiple vulnerabilities: - A remote command execution vulnerability exists in HP Integrated Lights-Out iLO server due to an unspecified reason. An unauthenticated, remote attacker can exploit this to...
KB4019472: Windows 10 Version 1607 and Windows Server 2016 May 2017 Cumulative Update
The remote Windows host is missing security update KB4019472. It is, therefore, affected by multiple vulnerabilities : - A security bypass vulnerability exists in Internet Explorer due to an unspecified flaw. An unauthenticated, remote attacker can exploit this, by convincing a user to visit a...
RHEL 6 : JBoss Core Services (RHSA-2017:0193)
Updated packages that provide Red Hat JBoss Core Services Pack Apache Server 2.4.23 and fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...
Microsoft Visio Viewer SEoL
According to its self-reported version number, the installation of Microsoft Visio Viewer on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities...
Debian DLA-263-1 : ruby1.9.1 security update
Two vulnerabilities were identified in the Ruby language interpreter, version 1.9.1. CVE-2012-5371 Jean-Philippe Aumasson identified that Ruby computed hash values without properly restricting the ability to trigger hash collisions predictably, allowing context-dependent attackers to cause a deni...
NFS Server Superfluous
The remote NFS server is not exporting any shares. Running an unused service unnecessarily increases the attack surface of the remote host. C Tenable Network Security, Inc. Get the export list of the remote host and warns the user if a NFS share is exported to the world. include 'compat.inc' ;...
SUSE SLES12: kernel-livepatch-4_12_14-150000_150_89-default / etc (SUSE-SU-2022:2750-1)
The remote SUSE Linux SLES12 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2750-1 advisory. This update for the Linux Kernel 4.12.14-122116 fixes several issues. The following security issues were fixed: - CVE-2022-1419: Fixed...
Cisco IOS Cluster Management Protocol Telnet Option Handling RCE (cisco-sa-20170317-cmp) (destructive check)
The remote device is affected by a remote code execution vulnerability in the Cluster Management Protocol CMP subsystem due to improper handling of CMP-specific Telnet options. An unauthenticated, remote attacker can exploit this by establishing a Telnet session with malformed CMP-specific telnet...
SAP Host Control SOAP Web Service 'Database/Name' Command Execution (SAP Note 1341333)
The version of SAP Host Control, offered by 'sapstartsrv.exe', fails to sanitize user input to the 'Database/Name' parameter when calling the 'GetDatabaseStatus' SOAP method. A remote, unauthenticated attacker may use this to run commands that, by default, run as SYSTEM. Note that while this...
DynaZip < 5.0.0.8 / 6.0.0.5 Zip Archive Handling Multiple Overflows
The version of the DynaZip Max or DynaZip Max Secure installed on the remote host contains a DLL that reportedly is prone to stack-based overflows when repairing or updating a specially crafted ZIP file. Successful exploitation allows an attacker to execute arbitrary code on the affected host...
Microsoft Windows SMB LsaQueryInformationPolicy Function SID Enumeration
By emulating the call to LsaQueryInformationPolicy, it was possible to obtain the host SID Security Identifier. The host SID can then be used to get the list of local users. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10859; scriptversion"1.47";...
OpenSSL 1.0.2 < 1.0.2zc-dev Vulnerability
The version of OpenSSL installed on the remote host is prior to 1.0.2zc-dev. It is, therefore, affected by a vulnerability as referenced in the 1.0.2zc-dev advisory. - There is a carry propagation bug in the MIPS32 and MIPS64 squaring procedure. Many EC algorithms are affected, including some of...
Security Update for Forefront Endpoint Protection (June 2021)
The Malware Protection Engine version of Forefront Endpoint Protection installed on the remote Windows host is equal or prior to 1.1.17800.5. It is, therefore, affected by multiple vulnerabilities. - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and...
EulerOS Virtualization 2.9.0 : edk2 (EulerOS-SA-2021-1668)
According to the versions of the edk2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - EFI Development Kit II AARCH64 UEFI FirmwareSecurity Fixes:AuthenticodeVerify calls OpenSSLs d2iPKCS7 API to parse asn encoded signe...
Sysinternals PsExec Elevation of Privilege (CVE-2021-1733)
An elevation of privilege vulnerability exists in Sysinternals PsExec due to the application not properly imposing security restrictions in PsExec, which leads to a security restrictions bypass and privilege escalation. It is possible for a local attacker who is authenticated as a non-admin user ...
Security Updates for Windows Server 2008 (August 2018) (Foreshadow)
The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - Errors exist related to microprocessors utilizing speculative execution and L1 data cache that could allow information disclosure. CVE-2018-3615, CVE-2018-3620, CVE-2018-3646 - A remote...
OpenSSL 1.1.0 < 1.1.0g Multiple Vulnerabilities
The version of OpenSSL installed on the remote host is prior to 1.1.0g. It is, therefore, affected by multiple vulnerabilities as referenced in the 1.1.0g advisory. - There is a carry propagating bug in the x8664 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No E...
Novell NetWare ncp Service NDS Object Enumeration
This host is a Novell NetWare eDirectory server, and has browse rights on the PUBLIC object. It is possible to enumerate all NDS objects, including users, with crafted queries. An attacker can use this to gain information about this host. This script was written by Forrest Rae See the Nessus...
MariaDB 10.3.0 < 10.3.39
The version of MariaDB installed on the remote host is prior to 10.3.39. It is, therefore, affected by a vulnerability as referenced in the 10.3.39 advisory. - MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for function spiderdbmbase::printwarnings to...
KB5005568: Windows 10 Version 1809 and Windows Server 2019 September 2021 Security Update
The remote Windows host is missing security update 5005568. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2021-36954, CVE-2021-36955, CVE-2021-36963, CVE-2021-36964, CVE-2021-36966,...
OpenSSL 1.0.2 < 1.0.2q Multiple Vulnerabilities
The version of OpenSSL installed on the remote host is prior to 1.0.2q. It is, therefore, affected by multiple vulnerabilities as referenced in the 1.0.2q advisory. - Simultaneous Multi-threading SMT in processors can enable local users to exploit software vulnerable to timing attacks via a...
PHP 7.2.x < 7.2.14 Multiple vulnerabilities.
According to its banner, the version of PHP running on the remote web server is 7.2.x prior to 7.2.14. It is, therefore, affected by multiple vulnerabilities: - An integer underflow condition exists in gdContributionsAlloc function in gdinterpolation.c. An unauthenticated, remote attacker can hav...
phpMyAdmin < 4.8.3 Vulnerability (PMASA-2018-5)
According to its self-reported version number, the phpMyAdmin application hosted on the remote web server is prior to 4.8.3. It is, therefore, affected by a cross-site Scripting vulnerability. Note that Nessus has not attempted to exploit these issues but has instead relied only on the...
RHEL 7 : kernel (RHSA-2018:0151)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:0151 advisory. - kernel: local privesc in key management CVE-2015-8539 - hw: cpu: speculative execution bounds-check bypass CVE-2017-5753 - kernel:...
Quikstore Shopping Cart quikstore.cgi Multiple Vulnerabilities
The CGI 'quickstore.cgi' is installed. This CGI has a well known security flaw that lets an attacker read arbitrary files with the privileges of the HTTP daemon. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid10712...
Apache 2.4.x < 2.4.58 Out-of-Bounds Read (CVE-2023-31122)
The version of Apache httpd installed on the remote host is prior to 2.4.58. It is, therefore, affected by multiple vulnerabilities as referenced in the 2.4.58 advisory. - modmacro buffer over-read: Out-of-bounds Read vulnerability in modmacro of Apache HTTP Server. This issue affects Apache HTTP...
PHP Debug Bar Enabled
The web application on the remote server has a PHP debug bar which is accessible without protection. A remote attacker can exploit this to gain more knowledge about the host, allowing an attacker to conduct further attacks. No source data...
KB5015862: Windows 7 and Windows Server 2008 R2 Security Update (July 2022)
The remote Windows host is missing security update 5015862 or cumulative update 5015866. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...
Oracle Linux 8 : olcne (ELSA-2022-9494)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-9494 advisory. 1.4.5-1 - Address qemu CVE-2022-26353, CVE-2021-3748 Tenable has extracted the preceding description block directly from the Oracle Linux security...
Solaris 10 (sparc) : 153074-01
SunOS 5.10: libpam.so patch. Date this patch was last updated by Sun : Oct/19/20 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid141557; scriptversion"1.11";...
McAfee VirusScan Enterprise < 8.8 Patch 15 Multiple Vulnerabilities (SB10302)
The version of McAfee VirusScan Enterprise VSE installed on the remote Windows host is prior to 8.8 Patch 15. It is, therefore, affected by multiple vulnerabilites: - Privilege Escalation vulnerability in Microsoft Windows client McTray.exe in McAfee VirusScan Enterprise VSE 8.8 prior to Patch 14...
Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2018-4195)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4195 advisory. - ipv4: frags: handle possible skb truesize change Eric Dumazet Orabug: 28481663 CVE-2018-5391 - inet: frag: enforce memory limits earlier Eric Dumazet...
Virtuozzo 7 : readykernel-patch (VZA-2018-045)
According to the version of the vzkernel package and the readykernel-patch installed, the Virtuozzo installation on the remote host is affected by the following vulnerability : - By mmaping a FUSE-backed file onto a process's memory containing command line arguments or environment strings, an...