Lucene search

K

Nessus Security Vulnerabilities

cve
cve

CVE-2004-2722

Nessus 2.0.10a stores account passwords in plaintext in .nessusrc files, which allows local users to obtain passwords. NOTE: the original researcher reports that the vendor has disputed this...

6.6AI Score

0.0004EPSS

2007-10-06 09:00 PM
27
cve
cve

CVE-2010-2989

nessusd_www_server.nbin in the Nessus Web Server plugin 1.2.4 for Nessus allows remote attackers to obtain sensitive information via a request to the /feed method, which reveals the version in a...

6.3AI Score

0.003EPSS

2010-08-10 12:23 PM
21
cve
cve

CVE-2010-2914

Cross-site scripting (XSS) vulnerability in nessusd_www_server.nbin in the Nessus Web Server plugin 1.2.4 for Nessus allows remote attackers to inject arbitrary web script or HTML via unspecified...

5.9AI Score

0.002EPSS

2010-07-30 08:30 PM
27
cve
cve

CVE-2004-2723

NessusWX 1.4.4 stores account passwords in plaintext in .session files, which allows local users to obtain...

6.6AI Score

0.0004EPSS

2007-10-06 09:00 PM
21
cve
cve

CVE-2007-4061

Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in the argument to the saveNessusRC method, which writes text specified by the addsetConfig method, possibly...

7.4AI Score

0.085EPSS

2007-07-30 05:30 PM
20
cve
cve

CVE-2007-4062

The SCANCTRL.ScanCtrlCtrl.1 ActiveX control in scan.dll in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to delete arbitrary files via unspecified vectors involving the deleteNessusRC method, probably a directory traversal...

6.8AI Score

0.003EPSS

2007-07-30 05:30 PM
17
cve
cve

CVE-2007-4031

Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to delete arbitrary files via a .. (dot dot) in the argument to the deleteReport method, probably related to the SCANCTRL.ScanCtrlCtrl.1 ActiveX control in...

6.8AI Score

0.034EPSS

2007-07-27 10:30 PM
26
cve
cve

CVE-2007-3546

Cross-site scripting (XSS) vulnerability in the Windows GUI in Nessus Vulnerability Scanner before 3.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified...

5.7AI Score

0.008EPSS

2007-07-03 08:30 PM
22
cve
cve

CVE-2006-2093

Nessus before 2.2.8, and 3.x before 3.0.3, allows user-assisted attackers to cause a denial of service (memory consumption) via a NASL script that calls split with an invalid sep parameter. NOTE: a design goal of the NASL language is to facilitate sharing of security tests by guaranteeing that a...

6.4AI Score

0.053EPSS

2006-04-29 10:02 AM
20
cve
cve

CVE-2004-1445

A race condition in nessus-adduser in Nessus 2.0.11 and possibly earlier versions, if the TMPDIR environment variable is not set, allows local users to gain...

6.5AI Score

0.0004EPSS

2005-02-13 05:00 AM
26
cve
cve

CVE-2003-0374

Multiple unknown vulnerabilities in Nessus before 2.0.6, in libnessus and possibly libnasl, a different set of vulnerabilities than those identified by CVE-2003-0372 and CVE-2003-0373, aka "similar issues in other nasl functions as well as in...

7.3AI Score

0.004EPSS

2003-06-16 04:00 AM
24
cve
cve

CVE-2003-0373

Multiple buffer overflows in libnasl in Nessus before 2.0.6 allow local users with plugin upload privileges to cause a denial of service (core dump) and possibly execute arbitrary code via (1) a long proto argument to the scanner_add_port function, (2) a long user argument to the ftp_log_in...

7.9AI Score

0.0004EPSS

2003-06-16 04:00 AM
21
cve
cve

CVE-2003-0372

Signed integer vulnerability in libnasl in Nessus before 2.0.6 allows local users with plugin upload privileges to cause a denial of service (core dump) and possibly execute arbitrary code by causing a negative argument to be provided to the insstr function as used in a NASL...

7.7AI Score

0.0004EPSS

2003-06-16 04:00 AM
18