Skip to contentTenable vulnerabilities
Newest
- jquery jquery-ui, jqueryui jquery ui, drupal +25 more +27 moreXSS in the `of` option of the `.position()` utilCVE-2021-41184Public exploitFix availableEPSS 40.8%6.5 Medium
- jquery jquery-ui, jqueryui jquery ui, debian linux +26 more +28 moreXSS in `*Text` options of the Datepicker widgetCVE-2021-41183Fix available6.5 Medium
- jquery jquery-ui, jqueryui jquery ui, debian linux +27 more +29 moreXSS in the `altField` option of the Datepicker widgetCVE-2021-41182Public exploitFix availableEPSS 39.4%6.5 Medium
- composer, tenable tenable.sc +1 moreCommand injection in composer on WindowsCVE-2021-41116Fix available8.2 High
- apache, apache http server, broadcom brocade fabric operating system firmware +36 more +38 moremod_proxy SSRFCVE-2021-40438In KEVPublic exploitFix availableEPSS 100.0%9.0 Critical
- apache http server, broadcom brocade fabric operating system firmware, debian linux +14 more +16 moreNULL pointer dereference in httpd coreCVE-2021-34798Fix availableEPSS 64.5%7.5 High
- tenable nessus agentNessus Agent 8.3.0 and earlier was found to contain a local privilege escalation vulnerability...CVE-2021-201186.7 Medium
- tenable nessus agentNessus Agent 8.3.0 and earlier was found to contain a local privilege escalation vulnerability...CVE-2021-201176.7 Medium
- openssl, debian linux, mcafee epolicy orchestrator +238 more +240 moreRead buffer overruns processing ASN.1 stringsCVE-2021-3712Public exploitFix availableEPSS 48.1%7.4 High
- openssl, debian linux, netapp active iq unified manager +28 more +30 moreSM2 Decryption Buffer OverflowCVE-2021-3711Public exploitFix availableEPSS 87.8%9.8 Critical
- apache http server, debian linux, fedoraproject fedora +3 more +5 moreRequest splitting via HTTP/2 method injection and mod_proxyCVE-2021-33193Fix availableEPSS 46.2%7.5 High
- tenable nessus, nessus agent +1 moreNessus Agent versions 8.2.5 and earlier were found to contain a privilege escalation...CVE-2021-201066.5 Medium
- tenable nessusNessus versions 8.13.2 and earlier were found to contain a privilege escalation vulnerability...CVE-2021-200796.7 Medium
- tenable nessus, nessus agent +1 moreNessus Agent 8.2.4 and earlier for Windows were found to contain multiple local privilege...CVE-2021-201006.7 Medium
- tenable nessus, nessus agent +1 moreNessus Agent 8.2.4 and earlier for Windows were found to contain multiple local privilege...CVE-2021-200996.7 Medium
- jashkenas underscore, debian linux, fedoraproject fedora +1 more +3 moreArbitrary Code InjectionCVE-2021-23358Public exploitFix available3.3 Low
- openssl, fedoraproject fedora, freebsd +30 more +32 moreCA certificate check bypass with X509_V_FLAG_X509_STRICTCVE-2021-3450Public exploitFix availableEPSS 18.3%7.4 High
- openssl, checkpoint multi-domain management firmware, quantum security gateway firmware +103 more +105 moreNULL pointer deref in signature_algorithms processingCVE-2021-3449Public exploitFix availableEPSS 63.5%5.9 Medium
- tenable nessus agentNessus Agent versions 7.2.0 through 8.2.2 were found to inadvertently capture the IAM role...CVE-2021-200776.7 Medium
- tenable jira cloud, integration-jira-cloud +1 moreExecution of untrusted code through config fileCVE-2021-21371Fix available5.0 Medium
- libjpeg-turbo, fedoraproject fedora +1 moreLibjpeg-turbo versions 2.0.91 and 2.0.90 is vulnerable to a denial of service vulnerability...CVE-2021-20205Fix available6.5 Medium
- tenable tenable.scTenable.sc and Tenable.sc Core versions 5.13.0 through 5.17.0 were found to contain a...CVE-2021-200768.8 High
- openssl, apple ipados, iphone os +20 more +22 moreNull pointer deref in X509_issuer_and_serial_hash()CVE-2021-23841Public exploitFix available5.9 Medium
- openssl, debian linux, fujitsu m10-1 firmware +18 more +20 moreInteger overflow in CipherUpdateCVE-2021-23840Public exploitFix availableEPSS 51.1%7.5 High
- tenable nessus amazon machine imageNessus AMI versions 8.12.0 and earlier were found to either not validate, or incorrectly validate...CVE-2020-58125.9 Medium
- tenable tenable.scIn certain scenarios in Tenable.sc prior to 5.17.0, a scanner could potentially be used outside...CVE-2020-58087.5 High
- openssl, debian linux, fedoraproject fedora +41 more +43 moreEDIPARTYNAME NULL pointer dereferenceCVE-2020-1971Public exploitFix available5.9 Medium
- tenable nessus network monitorA vulnerability in Nessus Network Monitor versions 5.11.0, 5.11.1, and 5.12.0 for Windows could...CVE-2020-57947.8 High
- tenable nessus, nessus agent +1 moreA vulnerability in Nessus versions 8.9.0 through 8.12.0 for Windows & Nessus Agent 8.0.0 and 8.1...CVE-2020-57937.8 High
- php, canonical ubuntu linux, debian linux +4 more +6 morePHP parses encoded cookie names so malicious `__Host-` cookies can be sentCVE-2020-7070Fix available4.3 Medium
- php, canonical ubuntu linux, debian linux +5 more +7 moreWrong ciphertext/tag in AES-CCM encryption for a 12 bytes IVCVE-2020-7069Fix available5.4 Medium
- php, debian linux, tenable tenable.sc +2 moreUse of freed hash key in the phar_parse_zipfile functionCVE-2020-7068Fix available4.8 Medium
- tenable nessus, tenable, inc. tenable nessus +1 moreNessus versions 8.11.0 and earlier were found to maintain sessions longer than the permitted...CVE-2020-57747.1 High
- grandstream gwn7000 firmware, tenable grandstream gwn7000 +1 moreGrandstream GWN7000 firmware version 1.0.9.4 and below allows authenticated remote users to...CVE-2020-57568.8 High
- tenable nessus, tenable, inc. tenable nessus +1 moreNessus 8.10.0 and earlier were found to contain a Stored XSS vulnerability due to improper...CVE-2020-57655.4 Medium
- jquery, debian linux, drupal +49 more +51 morePotential XSS vulnerability in jQueryCVE-2020-11023In KEVPublic exploitFix availableEPSS 84.9%6.9 Medium
- jquery, debian linux, drupal +67 more +69 morejQuery has a potential XSS vulnerabilityCVE-2020-11022Public exploitFix availableEPSS 99.2%6.9 Medium
- openssl, broadcom fabric operating system, debian linux +23 more +25 moreSegmentation fault in SSL_check_chainCVE-2020-1967Public exploitFix availableEPSS 53.3%7.5 High
- php, debian linux, oracle communications diameter signaling router +1 more +3 moreOOB Read in urldecode()CVE-2020-7067Fix available7.5 High
- tenable tenable.scStored XSS in Tenable.Sc before 5.14.0 could allow an authenticated remote attacker to craft a...CVE-2020-57375.4 Medium
- sqlite, canonical ubuntu linux, debian linux +18 more +20 moreSQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a...CVE-2020-11655Fix available7.5 High
- sqlite, netapp ontap select deploy administration utility, oracle communications messaging server +12 more +14 moreIn SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by...CVE-2020-11656Fix available9.8 Critical
- php, debian linux, opensuse leap +1 more +3 moreget_headers() silently truncates after a null byteCVE-2020-7066Fix available5.3 Medium
- php, canonical ubuntu linux, debian linux +1 more +3 moremb_strtolower (UTF-32LE): stack-buffer-overflow at php_unicode_tolower_fullCVE-2020-7065Fix available7.4 High
- php, canonical ubuntu linux, debian linux +2 more +4 moreUse-of-uninitialized-value in exifCVE-2020-7064Fix available6.5 Medium
- php, debian linux, opensuse leap +1 more +3 moreFiles added to tar with Phar::buildFromIterator have all-access permissionsCVE-2020-7063Fix available5.5 Medium
- php, tenable tenable.sc +1 moreheap-buffer-overflow in phar_extract_fileCVE-2020-7061Fix available6.5 Medium
- php, debian linux, opensuse leap +2 more +4 moreglobal buffer-overflow in mbfl_filt_conv_big5_wcharCVE-2020-7060Fix available6.5 Medium
- php, debian linux, opensuse leap +2 more +4 moreOOB read in php_strip_tags_exCVE-2020-7059Fix available6.5 Medium
- tenable nessusTenable Nessus before 6.8 has a stored XSS issue that requires admin-level authentication to the...CVE-2016-10000294.8 Medium
- Show moreLoading…