Skip to contentTenable Nessus vulnerabilities
- libexpat project libexpat, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +4 more +6 morestoreAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.CVE-2022-22827Fix available8.8 High
- libexpat project libexpat, netapp active iq unified manager, clustered data ontap +8 more +10 moreIn doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for...CVE-2021-46143Public exploitFix available8.1 High
- libexpat project libexpat, debian linux, netapp active iq unified manager +8 more +10 moreIn Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts...CVE-2021-45960Public exploitFix available8.8 High
- tenable nessusNessus versions 8.15.2 and earlier were found to contain a local privilege escalation...CVE-2021-201356.7 Medium
- tenable nessus agentNessus Agent 8.3.0 and earlier was found to contain a local privilege escalation vulnerability...CVE-2021-201186.7 Medium
- tenable nessus agentNessus Agent 8.3.0 and earlier was found to contain a local privilege escalation vulnerability...CVE-2021-201176.7 Medium
- openssl, debian linux, mcafee epolicy orchestrator +238 more +240 moreRead buffer overruns processing ASN.1 stringsCVE-2021-3712Public exploitFix availableEPSS 48.1%7.4 High
- openssl, debian linux, netapp active iq unified manager +28 more +30 moreSM2 Decryption Buffer OverflowCVE-2021-3711Public exploitFix availableEPSS 87.8%9.8 Critical
- tenable nessus, nessus agent +1 moreNessus Agent versions 8.2.5 and earlier were found to contain a privilege escalation...CVE-2021-201066.5 Medium
- tenable nessusNessus versions 8.13.2 and earlier were found to contain a privilege escalation vulnerability...CVE-2021-200796.7 Medium
- tenable nessus, nessus agent +1 moreNessus Agent 8.2.4 and earlier for Windows were found to contain multiple local privilege...CVE-2021-201006.7 Medium
- tenable nessus, nessus agent +1 moreNessus Agent 8.2.4 and earlier for Windows were found to contain multiple local privilege...CVE-2021-200996.7 Medium
- openssl, fedoraproject fedora, freebsd +30 more +32 moreCA certificate check bypass with X509_V_FLAG_X509_STRICTCVE-2021-3450Public exploitFix availableEPSS 18.3%7.4 High
- openssl, checkpoint multi-domain management firmware, quantum security gateway firmware +103 more +105 moreNULL pointer deref in signature_algorithms processingCVE-2021-3449Public exploitFix availableEPSS 63.5%5.9 Medium
- tenable nessus agentNessus Agent versions 7.2.0 through 8.2.2 were found to inadvertently capture the IAM role...CVE-2021-200776.7 Medium
- openssl, apple ipados, iphone os +20 more +22 moreNull pointer deref in X509_issuer_and_serial_hash()CVE-2021-23841Public exploitFix available5.9 Medium
- openssl, debian linux, fujitsu m10-1 firmware +18 more +20 moreInteger overflow in CipherUpdateCVE-2021-23840Public exploitFix availableEPSS 51.1%7.5 High
- tenable nessus amazon machine imageNessus AMI versions 8.12.0 and earlier were found to either not validate, or incorrectly validate...CVE-2020-58125.9 Medium
- openssl, debian linux, fedoraproject fedora +41 more +43 moreEDIPARTYNAME NULL pointer dereferenceCVE-2020-1971Public exploitFix available5.9 Medium
- tenable nessus network monitorA vulnerability in Nessus Network Monitor versions 5.11.0, 5.11.1, and 5.12.0 for Windows could...CVE-2020-57947.8 High
- tenable nessus, nessus agent +1 moreA vulnerability in Nessus versions 8.9.0 through 8.12.0 for Windows & Nessus Agent 8.0.0 and 8.1...CVE-2020-57937.8 High
- tenable nessus, tenable, inc. tenable nessus +1 moreNessus versions 8.11.0 and earlier were found to maintain sessions longer than the permitted...CVE-2020-57747.1 High
- tenable nessus, tenable, inc. tenable nessus +1 moreNessus 8.10.0 and earlier were found to contain a Stored XSS vulnerability due to improper...CVE-2020-57655.4 Medium
- tenable nessusTenable Nessus before 6.8 has a stored XSS issue that requires admin-level authentication to the...CVE-2016-10000294.8 Medium
- tenable nessusTenable Nessus before 6.8 has a stored XSS issue that requires admin-level authentication to the...CVE-2016-10000284.8 Medium
- tenable nessus, tenable, inc. tenable nessus +1 moreNessus versions 8.6.0 and earlier were found to contain a Denial of Service vulnerability due to...CVE-2019-39826.5 Medium
- sqlite, canonical ubuntu linux, debian linux +20 more +22 moreIn SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other...CVE-2019-16168Fix available6.5 Medium
- tenable nessus, tenable, inc. tenable nessus +1 moreNessus 8.5.2 and earlier on Windows platforms were found to contain an issue where certain system...CVE-2019-39748.1 High
- tenable nessusContent Injection vulnerability in Tenable Nessus prior to 8.5.0 may allow an authenticated,...CVE-2019-39623.3 Low
- tenable nessus, tenable, inc. tenable nessus +1 moreNessus versions 8.4.0 and earlier were found to contain a reflected XSS vulnerability due to...CVE-2019-39616.1 Medium
- libexpat project libexpat, canonical ubuntu linux, debian linux +9 more +11 moreIn libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of...CVE-2018-20843Fix available7.5 High
- openssl, canonical ubuntu linux, debian linux +79 more +81 more0-byte record padding oracleCVE-2019-1559Fix availableEPSS 17.1%5.9 Medium
- tenable nessus, tenable, inc. tenable nessus +1 moreNessus versions 8.2.1 and earlier were found to contain a stored XSS vulnerability due to...CVE-2019-39235.4 Medium
- canonical ubuntu linux, debian linux, nodejs node.js +17 more +19 moreSimultaneous Multi-threading (SMT) in processors can enable local users to exploit software...CVE-2018-5407Public exploitFix available4.7 Medium
- tenable nessus, tenable, inc. tenable nessus +1 moreIn Nessus before 7.1.0, Session Fixation exists due to insufficient session management within the...CVE-2018-11486.5 Medium
- tenable nessus, tenable, inc. tenable nessus +1 moreIn Nessus before 7.1.0, a XSS vulnerability exists due to improper input validation. A remote...CVE-2018-11475.4 Medium
- tenable nessusWhen installing Nessus to a directory outside of the default location, Nessus versions prior to 7...CVE-2018-11417.0 High
- momentjs moment, tenable nessus +1 moreRegular Expression Denial of Service in momentCVE-2017-18214Fix available7.5 High
- tenable nessusWhen linking a Nessus scanner or agent to Tenable.io or other manager, Nessus 6.x before 6.11...CVE-2017-115067.4 High
- tenable nessusCross-site scripting vulnerability in Nessus versions 6.8.0, 6.8.1, 6.9.0, 6.9.1 and 6.9.2 allows...CVE-2017-21225.4 Medium
- tenable nessusNessus 6.10.x before 6.10.5 was found to be vulnerable to a local privilege escalation issue due...CVE-2017-78507.8 High
- tenable nessusNessus 6.10.x before 6.10.5 was found to be vulnerable to a local denial of service condition due...CVE-2017-78495.5 Medium
- tenable nessusNessus 6.6.2 - 6.10.3 contains a flaw related to insecure permissions that may allow a local...CVE-2017-71997.8 High
- tenable appliance, nessus +1 moreTenable Nessus before 6.10.2 (as used alone or in Tenable Appliance before 4.5.0) was found to...CVE-2017-65437.3 High
- tenable nessusCross-site scripting (XSS) vulnerability in Tenable Nessus before 6.9.1 allows remote...CVE-2016-92595.4 Medium
- tenable nessusCross-site scripting (XSS) vulnerability in Tenable Nessus before 6.9 allows remote authenticated...CVE-2016-92605.4 Medium
- momentjs moment, oracle primavera unifier, tenable nessus +2 moreRegular Expression Denial of Service in momentCVE-2016-4055Fix available6.5 Medium
- tenable nessusCross-site scripting (XSS) vulnerability in Tenable Nessus before 6.9.3 allows remote...CVE-2017-51795.4 Medium
- tenable nessus, web ui +1 moreThe /server/properties resource in Tenable Web UI before 2.3.5 for Nessus 5.2.3 through 5.2.7...CVE-2014-49805.0 Medium
- tenable nessus, plugin-set +1 moreA race condition in the wmi_malware_scan.nbin plugin before 201402262215 for Nessus 5.2.1 allows...CVE-2014-28486.9 Medium