Skip to contentTenable vulnerabilities
Newest
- tenable nessusRace ConditionCVE-2024-32908.2 High
- tenable nessusWhen installing Nessus to a directory outside of the default location on a Windows host, Nessus...CVE-2024-32897.8 High
- tenable nessus, nessus agent +1 moreLocal Privilege EscalationCVE-2024-23907.8 High
- tenable identity exposure, identity exposure secure relay +1 moreDLL Injection in Tenable Identity Exposure Secure RelayCVE-2024-16837.3 High
- tenable security centerHTML Injection VulnerabilityCVE-2024-14715.9 Medium
- tenable security centerCommand Injection Vulnerability in Tenable Security CenterCVE-2024-13677.2 High
- tenable nessusA SQL injection vulnerability exists where an authenticated, low-privileged remote attacker...CVE-2024-09716.5 Medium
- tenable nessusStored XSS vulnerabilityCVE-2024-09554.8 Medium
- tenable nessus, nessus agent +1 moreAn arbitrary file write vulnerability exists where an authenticated attacker with privileges on...CVE-2023-61786.8 Medium
- tenable nessusArbitrary File WriteCVE-2023-60626.8 Medium
- tenable nessus, nessus agent +1 moreUnder certain conditions, a low privileged attacker could load a specially crafted file during...CVE-2023-58476.7 Medium
- tenable nessus network monitorBlind SQL InjectionCVE-2023-56247.2 High
- tenable nessus network monitorPrivilege EscalationCVE-2023-56237.0 High
- tenable nessus network monitorPrivilege EscalationCVE-2023-56227.1 High
- tenable nessusImproper authorization in NessusCVE-2023-32534.3 Medium
- tenable nessusArbitrary File WriteCVE-2023-32526.8 Medium
- tenable nessusPass-back vulnerability in NessusCVE-2023-32514.1 Medium
- tenable nessus, security center, tenable.io +2 moreTenable Plugin Feed ID #202306261202 Fixes Privilege Escalation VulnerabilityCVE-2023-20056.3 Medium
- libjpeg-turboA heap-based buffer overflow issue was discovered in libjpeg-turbo in...CVE-2023-2804Fix available6.5 Medium
- tenable nessus, plugin feed +1 moreA vulnerability was reported where through modifying the scan variables, an authenticated user in...CVE-2022-43138.8 High
- tenable nessus, tenable.io, tenable.sc +2 moreAs part of our Security Development Lifecycle, a potential privilege escalation issue was...CVE-2023-05248.8 High
- tenable tenable.scA Server Side Request Forgery (SSRF) vulnerability exists in Tenable.sc due to improper...CVE-2023-244956.5 Medium
- tenable tenable.scA stored cross-site scripting (XSS) vulnerability exists in Tenable.sc due to improper validation...CVE-2023-244945.4 Medium
- tenable tenable.scA formula injection vulnerability exists in Tenable.sc due to improper validation of user...CVE-2023-244935.7 Medium
- tenable tenable.scA LDAP injection vulnerability exists in Tenable.sc due to improper validation of user-supplied...CVE-2023-04766.5 Medium
- tenable nessusA privilege escalation vulnerability was identified in Nessus versions 8.10.1 through 8.15.8 and...CVE-2023-01018.8 High
- tenable nessus, tenable, inc. tenable nessus +1 moreAn authenticated attacker could utilize the identical agent and cluster node linking keys to...CVE-2022-34996.5 Medium
- tenable nessus, tenable, inc. tenable nessus +1 moreAn authenticated attacker could read Nessus Debug Log file attachments from the web UI without...CVE-2022-337576.5 Medium
- tenable nessusInsufficiently Protected Credentials: An authenticated user with debug privileges can retrieve...CVE-2022-282916.5 Medium
- libjpeg-turboA crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed...CVE-2020-35538Fix available5.5 Medium
- tenable nessusAn authenticated attacker could read arbitrary files from the underlying operating system of the...CVE-2022-329746.5 Medium
- tenable nessusAn authenticated attacker could create an audit file that bypasses PowerShell cmdlet checks and...CVE-2022-329738.8 High
- composer, fedoraproject fedora, tenable tenable.sc +2 moreMissing input validation can lead to command execution in composerCVE-2022-24828Fix available8.3 High
- moment, debian linux, fedoraproject fedora +2 more +4 morePath Traversal in Moment.jsCVE-2022-24785Public exploitFix availableEPSS 13.8%7.5 High
- openssl, debian linux, fedoraproject fedora +470 more +472 moreInfinite loop in BN_mod_sqrt() reachable when parsing certificatesCVE-2022-0778Public exploitFix availableEPSS 73.2%7.5 High
- libexpat project libexpat, debian linux, fedoraproject fedora +6 more +8 moreExpat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.CVE-2022-23990Public exploitFix available7.5 High
- libexpat project libexpat, debian linux, netapp clustered data ontap +7 more +9 moreExpat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for...CVE-2022-23852Public exploitFix available9.8 Critical
- tenable tenable.scTenable.sc versions 5.14.0 through 5.19.1 were found to contain a remote code execution...CVE-2022-01308.1 High
- libexpat project libexpat, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +4 more +6 moreaddBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.CVE-2022-22822Public exploitFix available9.8 Critical
- libexpat project libexpat, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +4 more +6 morebuild_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.CVE-2022-22823Fix available9.8 Critical
- libexpat project libexpat, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +4 more +6 moredefineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.CVE-2022-22824Fix available9.8 Critical
- libexpat project libexpat, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +4 more +6 morelookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.CVE-2022-22825Fix available8.8 High
- libexpat project libexpat, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +4 more +6 morenextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.CVE-2022-22826Fix available8.8 High
- libexpat project libexpat, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +4 more +6 morestoreAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.CVE-2022-22827Fix available8.8 High
- libexpat project libexpat, netapp active iq unified manager, clustered data ontap +8 more +10 moreIn doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for...CVE-2021-46143Public exploitFix available8.1 High
- libexpat project libexpat, debian linux, netapp active iq unified manager +8 more +10 moreIn Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts...CVE-2021-45960Public exploitFix available8.8 High
- apache http server, apple mac os x, macos +8 more +10 morePossible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlierCVE-2021-44224Fix availableEPSS 82.3%8.2 High
- apache http server, apple mac os x, macos +10 more +12 morePossible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlierCVE-2021-44790Public exploitFix availableEPSS 96.8%9.8 Critical
- php, debian linux, netapp clustered data ontap +1 more +3 moreSpecial characters break path parsing in XML functionsCVE-2021-21707Public exploitFix availableEPSS 25.3%5.3 Medium
- tenable nessusNessus versions 8.15.2 and earlier were found to contain a local privilege escalation...CVE-2021-201356.7 Medium
- Show moreLoading…