Lucene search

K
TenableNessus

10 matches found

CVE
CVE
•added 2022/01/10 2:12 p.m.•243 views

CVE-2022-22825

lookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

8.8CVSS9.2AI score0.00206EPSS
CVE
CVE
•added 2022/01/06 4:15 a.m.•240 views

CVE-2021-46143

In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.

8.1CVSS8.9AI score0.04193EPSS
CVE
CVE
•added 2022/01/10 2:12 p.m.•235 views

CVE-2022-22826

nextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

8.8CVSS9.2AI score0.00206EPSS
CVE
CVE
•added 2022/01/10 2:12 p.m.•234 views

CVE-2022-22827

storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

8.8CVSS9.2AI score0.00279EPSS
CVE
CVE
•added 2019/08/15 7:15 p.m.•104 views

CVE-2019-3974

Nessus 8.5.2 and earlier on Windows platforms were found to contain an issue where certain system files could be overwritten arbitrarily, potentially creating a denial of service condition.

8.5CVSS7.9AI score0.00541EPSS
CVE
CVE
•added 2023/01/20 7:15 p.m.•104 views

CVE-2023-0101

A privilege escalation vulnerability was identified in Nessus versions 8.10.1 through 8.15.8 and 10.0.0 through 10.4.1. An authenticated attacker could potentially execute a specially crafted file to obtain root or NT AUTHORITY / SYSTEM privileges on the Nessus host.

8.8CVSS8.6AI score0.00142EPSS
CVE
CVE
•added 2023/03/15 11:15 p.m.•55 views

CVE-2022-4313

A vulnerability was reported where through modifying the scan variables, an authenticated user in Tenable products, that has Scan Policy Configuration roles, could manipulate audit policy variables to execute arbitrary commands on credentialed scan targets.

8.8CVSS8.8AI score0.00219EPSS
CVE
CVE
•added 2023/02/01 3:15 a.m.•48 views

CVE-2023-0524

As part of our Security Development Lifecycle, a potential privilege escalation issue was identified internally. This could allow a malicious actor with sufficient permissions to modify environment variables and abuse an impacted plugin in order to escalate privileges. We have resolved the issue an...

8.8CVSS8.9AI score0.0014EPSS
CVE
CVE
•added 2021/07/21 3:15 p.m.•37 views

CVE-2021-20106

Nessus Agent versions 8.2.5 and earlier were found to contain a privilege escalation vulnerability which could allow a Nessus administrator user to upload a specially crafted file that could lead to gaining administrator privileges on the Nessus host.

8.5CVSS6.7AI score0.00313EPSS
CVE
CVE
•added 2023/06/26 6:15 p.m.•27 views

CVE-2023-2005

Vulnerability in Tenable Tenable.Io, Tenable Nessus, Tenable Security Center.This issue affects Tenable.Io: before Plugin Feed ID #202306261202 ; Nessus: before Plugin Feed ID #202306261202 ; Security Center: before Plugin Feed ID #202306261202 . This vulnerability could allow a malicious actor wit...

8.8CVSS8.6AI score0.00065EPSS