Tenable vulnerabilities
213 vulnerabilities
Known vulnerabilities in Tenable products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 33 products.
Products
33- Nessus72 vulnerabilities
- Tenable.Sc46 vulnerabilities
- Security Center35 vulnerabilities
- Nessus Agent19 vulnerabilities
- Nessus Network Monitor14 vulnerabilities
- Log Correlation Engine9 vulnerabilities
- Alcatel Lucent I 240W Q GPON ONT6 vulnerabilities
- Asustor Data Master6 vulnerabilities
- Agent4 vulnerabilities
- Appliance4 vulnerabilities
- Tenable Identity Exposure4 vulnerabilities
- Tenable Nessus4 vulnerabilities
- Identity Exposure3 vulnerabilities
- Labkey Server Community Edition3 vulnerabilities
- Securitycenter3 vulnerabilities
- Terrascan3 vulnerabilities
- Network Monitor2 vulnerabilities
- Tenable.Io2 vulnerabilities
- Web Ui2 vulnerabilities
- Burp Suite Community Edition1 vulnerabilities
- Check MK1 vulnerabilities
- Grandstream Gwn70001 vulnerabilities
- Integration Jira Cloud1 vulnerabilities
- Jira Cloud1 vulnerabilities
- Libjpeg Turbo1 vulnerabilities
- Mikrotik Routeros1 vulnerabilities
- Nessus Amazon Machine Image1 vulnerabilities
- Operational Technology Exposure1 vulnerabilities
- Plugin Feed1 vulnerabilities
- Plugin Set1 vulnerabilities
- Tenable Agent1 vulnerabilities
- Tenable Appliance1 vulnerabilities
- Tenable Identity Exposure Secure Relay1 vulnerabilities
CVE-2018-1147tenablenessus+1
EPSS score1.11%
In Nessus before 7.1.0, a XSS vulnerability exists due to improper input validation. A remote authenticated attacker could create and upload a .nessus file, which may be viewed by an administrator allowing for the execution of arbitrary script code in a user's browser session. In other scenarios, XSS could also occur by altering variables from the Advanced Settings.CVE-2018-1152alpinelibjpeg-turbo+6EPSS score3.40%
libjpeg-turbo 1.5.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a crafted BMP image.CVE-2018-1148tenablenessus+1EPSS score0.73%
In Nessus before 7.1.0, Session Fixation exists due to insufficient session management within the application. An authenticated attacker could maintain system access due to session fixation after a user password change.CVE-2018-1155tenablesecurity_center+1EPSS score0.57%
In SecurityCenter versions prior to 5.7.0, a cross-site scripting (XSS) issue could allow an authenticated attacker to inject JavaScript code into an image filename parameter within the Reports feature area. Properly updated input validation techniques have been implemented to correct this issue.CVE-2018-1141tenablenessusEPSS score0.23%
When installing Nessus to a directory outside of the default location, Nessus versions prior to 7.0.3 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secured the directories in the installation location.CVE-2018-1153portswiggerburp_suite+1EPSS score0.49%
Burp Suite Community Edition 1.7.32 and 1.7.33 fail to validate the server certificate in a couple of HTTPS requests which allows a man in the middle to modify or view traffic.CVE-2018-1154tenablesecurity_center+1EPSS score0.68%
In SecurityCenter versions prior to 5.7.0, a username enumeration issue could allow an unauthenticated attacker to automate the discovery of username aliases via brute force, ultimately facilitating unauthorized access. Server response output has been unified to correct this issue.CVE-2018-1142tenableappliance+1EPSS score0.51%
Tenable Appliance versions 4.6.1 and earlier have been found to contain a single XSS vulnerability. Utilizing a specially crafted request, an authenticated attacker could potentially execute arbitrary JavaScript code by manipulating certain URL parameters related to offline plugins.CVE-2018-20843alpineexpat+40EPSS score7.11%
In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a high amount of RAM and CPU resources while processing (enough to be usable for denial-of-service attacks).CVE-2018-5407alpineopenssl+33EPSS score3.42%
Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.CVE-2018-15697asustordata_master+1EPSS score0.91%
ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to read any file on a share by providing the full path. For example, /home/admin/.ash_history.CVE-2018-15696asustordata_master+1EPSS score0.73%
ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to enumerate all user accounts via user.cgi.CVE-2018-15698asustordata_master+1EPSS score1.11%
ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to read any file on the file system when providing the full path to loginimage.cgi.CVE-2018-15699asustordata_master+1EPSS score0.65%
ASUSTOR Data Master 3.1.5 and below makes an HTTP request for a configuration file that is vulnerable to XSS. A man in the middle can take advantage of this by inserting Javascript into the configuration files Version field.CVE-2018-15695asustordata_master+1EPSS score1.01%
ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to delete any file on the file system due to a path traversal vulnerability in wallpaper.cgi.CVE-2018-15694asustordata_master+1EPSS score1.51%
ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to upload files to arbitrary locations due to a path traversal vulnerability. This could lead to code execution if the "Web Server" feature is enabled.CVE-2013-5911tenablesecurity_centerEPSS score0.94%
Cross-site scripting (XSS) vulnerability in devform.php in Tenable SecurityCenter 4.6 through 4.7 allows remote attackers to inject arbitrary web script or HTML via the message parameter.CVE-2021-21707debianphp7.4+14EPSS score25.31%
In PHP versions 7.3.x below 7.3.33, 7.4.x below 7.4.26 and 8.0.x below 8.0.13, certain XML parsing functions, like simplexml_load_file(), URL-decode the filename passed to them. If that filename contains URL-encoded NUL character, this may cause the function to interpret this as the end of the filename, thus interpreting the filename differently from what the user intended, which may lead it to reading a different file than intended.CVE-2021-21371PyPItenable-jira-cloud+2EPSS score0.45%
Tenable for Jira Cloud is an open source project designed to pull Tenable.io vulnerability data, then generate Jira Tasks and sub-tasks based on the vulnerabilities' current state. It published in pypi as "tenable-jira-cloud". In tenable-jira-cloud before version 1.1.21, it is possible to run arbitrary commands through the yaml.load() method. This could allow an attacker with local access to the host to run arbitrary code by running the application with a specially crafted YAML configuration file. This is fixed in version 1.1.21 by using yaml.safe_load() instead of yaml.load().CVE-2021-40438apache software foundationapache http server+101KEVRansomwareEPSS score100.00%
A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.