Tenable Tenable.sc vulnerabilities

• tenable nessus, tenable.io, tenable.sc +2 more As part of our Security Development Lifecycle, a potential privilege escalation issue was... CVE-2023-0524 8.8 HighFebruary 1, 2023
• tenable tenable.sc A Server Side Request Forgery (SSRF) vulnerability exists in Tenable.sc due to improper... CVE-2023-24495 6.5 MediumJanuary 25, 2023
• tenable tenable.sc A stored cross-site scripting (XSS) vulnerability exists in Tenable.sc due to improper validation... CVE-2023-24494 5.4 MediumJanuary 25, 2023
• tenable tenable.sc A formula injection vulnerability exists in Tenable.sc due to improper validation of user... CVE-2023-24493 5.7 MediumJanuary 25, 2023
• tenable tenable.sc A LDAP injection vulnerability exists in Tenable.sc due to improper validation of user-supplied... CVE-2023-0476 6.5 MediumJanuary 25, 2023
• composer, fedoraproject fedora, tenable tenable.sc +2 more Missing input validation can lead to command execution in composer CVE-2022-24828 Fix available 8.3 HighApril 13, 2022
• moment, debian linux, fedoraproject fedora +2 more +4 more Path Traversal in Moment.js CVE-2022-24785 Public exploitFix available EPSS 13.8% 7.5 HighApril 4, 2022
• tenable tenable.sc Tenable.sc versions 5.14.0 through 5.19.1 were found to contain a remote code execution... CVE-2022-0130 8.1 HighJanuary 14, 2022
• apache http server, apple mac os x, macos +8 more +10 more Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier CVE-2021-44224 Fix available EPSS 82.3% 8.2 HighDecember 20, 2021
• apache http server, apple mac os x, macos +10 more +12 more Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier CVE-2021-44790 Public exploitFix available EPSS 96.8% 9.8 CriticalDecember 20, 2021
• php, debian linux, netapp clustered data ontap +1 more +3 more Special characters break path parsing in XML functions CVE-2021-21707 Public exploitFix available EPSS 25.3% 5.3 MediumNovember 20, 2021
• jquery jquery-ui, jqueryui jquery ui, drupal +25 more +27 more XSS in the `of` option of the `.position()` util CVE-2021-41184 Public exploitFix available EPSS 40.8% 6.5 MediumOctober 26, 2021
• jquery jquery-ui, jqueryui jquery ui, debian linux +26 more +28 more XSS in `*Text` options of the Datepicker widget CVE-2021-41183 Fix available 6.5 MediumOctober 26, 2021
• jquery jquery-ui, jqueryui jquery ui, debian linux +27 more +29 more XSS in the `altField` option of the Datepicker widget CVE-2021-41182 Public exploitFix available EPSS 39.4% 6.5 MediumOctober 26, 2021
• composer, tenable tenable.sc +1 more Command injection in composer on Windows CVE-2021-41116 Fix available 8.2 HighOctober 5, 2021
• apache, apache http server, broadcom brocade fabric operating system firmware +36 more +38 more mod_proxy SSRF CVE-2021-40438 In KEVPublic exploitFix available EPSS 100.0% 9.0 CriticalSeptember 16, 2021
• apache http server, broadcom brocade fabric operating system firmware, debian linux +14 more +16 more NULL pointer dereference in httpd core CVE-2021-34798 Fix available EPSS 64.5% 7.5 HighSeptember 16, 2021
• openssl, debian linux, mcafee epolicy orchestrator +238 more +240 more Read buffer overruns processing ASN.1 strings CVE-2021-3712 Public exploitFix available EPSS 48.1% 7.4 HighAugust 24, 2021
• openssl, debian linux, netapp active iq unified manager +28 more +30 more SM2 Decryption Buffer Overflow CVE-2021-3711 Fix available EPSS 87.8% 9.8 CriticalAugust 24, 2021
• apache http server, debian linux, fedoraproject fedora +3 more +5 more Request splitting via HTTP/2 method injection and mod_proxy CVE-2021-33193 Fix available EPSS 46.2% 7.5 HighAugust 16, 2021
• jashkenas underscore, debian linux, fedoraproject fedora +1 more +3 more Arbitrary Code Injection CVE-2021-23358 Public exploitFix available 3.3 LowMarch 29, 2021
• openssl, checkpoint multi-domain management firmware, quantum security gateway firmware +103 more +105 more NULL pointer deref in signature_algorithms processing CVE-2021-3449 Public exploitFix available EPSS 63.5% 5.9 MediumMarch 25, 2021
• tenable tenable.sc Tenable.sc and Tenable.sc Core versions 5.13.0 through 5.17.0 were found to contain a... CVE-2021-20076 8.8 HighMarch 3, 2021
• openssl, apple ipados, iphone os +20 more +22 more Null pointer deref in X509_issuer_and_serial_hash() CVE-2021-23841 Public exploitFix available 5.9 MediumFebruary 16, 2021
• tenable tenable.sc In certain scenarios in Tenable.sc prior to 5.17.0, a scanner could potentially be used outside... CVE-2020-5808 7.5 HighDecember 21, 2020
• php, canonical ubuntu linux, debian linux +4 more +6 more PHP parses encoded cookie names so malicious `__Host-` cookies can be sent CVE-2020-7070 Fix available 4.3 MediumOctober 2, 2020
• php, canonical ubuntu linux, debian linux +5 more +7 more Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV CVE-2020-7069 Fix available 5.4 MediumOctober 2, 2020
• php, debian linux, tenable tenable.sc +2 more Use of freed hash key in the phar_parse_zipfile function CVE-2020-7068 Fix available 4.8 MediumAugust 26, 2020
• php, debian linux, oracle communications diameter signaling router +1 more +3 more OOB Read in urldecode() CVE-2020-7067 Fix available 7.5 HighApril 20, 2020
• tenable tenable.sc Stored XSS in Tenable.Sc before 5.14.0 could allow an authenticated remote attacker to craft a... CVE-2020-5737 5.4 MediumApril 17, 2020
• sqlite, canonical ubuntu linux, debian linux +18 more +20 more SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a... CVE-2020-11655 Fix available 7.5 HighApril 9, 2020
• sqlite, netapp ontap select deploy administration utility, oracle communications messaging server +12 more +14 more In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by... CVE-2020-11656 Fix available 9.8 CriticalApril 9, 2020
• php, debian linux, opensuse leap +1 more +3 more get_headers() silently truncates after a null byte CVE-2020-7066 Fix available 5.3 MediumApril 1, 2020
• php, canonical ubuntu linux, debian linux +1 more +3 more mb_strtolower (UTF-32LE): stack-buffer-overflow at php_unicode_tolower_full CVE-2020-7065 Fix available 7.4 HighApril 1, 2020
• php, canonical ubuntu linux, debian linux +2 more +4 more Use-of-uninitialized-value in exif CVE-2020-7064 Fix available 6.5 MediumApril 1, 2020
• php, debian linux, opensuse leap +1 more +3 more Files added to tar with Phar::buildFromIterator have all-access permissions CVE-2020-7063 Fix available 5.5 MediumFebruary 27, 2020
• php, tenable tenable.sc +1 more heap-buffer-overflow in phar_extract_file CVE-2020-7061 Fix available 6.5 MediumFebruary 27, 2020
• php, debian linux, opensuse leap +2 more +4 more global buffer-overflow in mbfl_filt_conv_big5_wchar CVE-2020-7060 Fix available 6.5 MediumJanuary 28, 2020
• php, debian linux, opensuse leap +2 more +4 more OOB read in php_strip_tags_ex CVE-2020-7059 Fix available 6.5 MediumJanuary 28, 2020
• sqlite, netapp cloud backup, ontap select deploy administration utility +6 more +8 more pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in... CVE-2019-19646 Fix available 9.8 CriticalDecember 9, 2019
• sqlite, netapp cloud backup, ontap select deploy administration utility +6 more +8 more alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types... CVE-2019-19645 Fix available 5.5 MediumDecember 9, 2019
• php, canonical ubuntu linux, debian linux +21 more +23 more Underflow in PHP-FPM can lead to RCE CVE-2019-11043 In KEVPublic exploitFix available EPSS 99.8% 8.7 HighOctober 24, 2019
• php, apple mac os x, canonical ubuntu linux +4 more +6 more heap-buffer-overflow on exif_process_user_comment in EXIF extension CVE-2019-11042 Fix available 4.8 MediumAugust 9, 2019
• php, apple mac os x, canonical ubuntu linux +4 more +6 more heap-buffer-overflow on exif_scan_thumbnail in EXIF extension CVE-2019-11041 Fix available 4.8 MediumAugust 9, 2019
• handlebars.js project handlebars.js, tenable tenable.sc +1 more Arbitrary Code Execution in handlebars CVE-2019-19919 Public exploitFix available 9.8 CriticalJune 5, 2019
• getbootstrap bootstrap, f5 big-ip access policy manager, big-ip advanced firewall manager +13 more +15 more Bootstrap Vulnerable to Cross-Site Scripting CVE-2019-8331 Public exploitFix available EPSS 16.4% 6.1 MediumFebruary 20, 2019