Read the docs

Tenable

Records218All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical31CVSS 9.0–10.0
CVSS high88CVSS 7.0–8.9

Exploited now

Tenable records in CISA KEV
TI-2020-08897 JQuery Cross-Site Scripting (XSS) Vulnerability Priority CRITICAL 88KEV 2025-01-23TI-2019-08259 PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability Priority CRITICAL 100KEV 2022-03-25TI-2021-17490 Apache HTTP Server-Side Request Forgery (SSRF) Priority CRITICAL 98KEV 2021-12-01

Components

Products in the NVD configurations · select one to filter the records
Nessus 68 records HIGH Tenable.sc 46 records CRITICAL Security Center 32 records MEDIUM Nessus Network Monitor 14 records CRITICAL Nessus Agent 13 records MEDIUM Log Correlation Engine 9 records CRITICAL Appliance 4 records MEDIUM Identity Exposure 3 records MEDIUM

Records

9 records in Log Correlation Engine · all components

TI-2020-08897 CVE-2020-11023 · GHSA-jpcq-cgw6-v4j6

Potential XSS vulnerability in jQuery

Priority CRITICAL 88KEV

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e.

CVSS 3.1MEDIUM 6.9 Network No auth User interaction EPSS 0.84887 Published 2020-04-29 Partial fix · 3.5.0, 4.4.0 CWE-79
TI-2020-08896 CVE-2020-11022 · GHSA-gxr4-xjj5-5px2

jQuery has a potential XSS vulnerability

Priority HIGH 75

In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e.

CVSS 3.1MEDIUM 6.9 Network No auth User interaction EPSS 0.99215 Published 2020-04-29 Partial fix · 3.5.0, 4.4.0 +2 CWE-79
TI-2020-01888 CVE-2020-1967 · GHSA-jq65-29v4-4x35

Segmentation fault in SSL_check_chain

Priority HIGH 71

Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert"…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.53336 Published 2020-04-21 Fixed in 111.9.0 CWE-476
TI-2021-06204 CVE-2021-23840 · GHSA-qgm6-9472-pwq7

Integer overflow in CipherUpdate

Priority HIGH 70

Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.50732 Published 2021-02-16 Partial fix · 111.14.0 CWE-190
TI-2021-02413 CVE-2021-3449 · GHSA-83mx-573x-5rw9

NULL pointer deref in signature_algorithms processing

Priority HIGH 68

An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.63542 Published 2021-03-25 Fixed in 111.15.0 CWE-476
TI-2019-01188 CVE-2019-1551 · GHSA-fcc6-m5v9-xcgq

rsaz_512_sqr overflow bug on x86_64

Priority MEDIUM 45

There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.14298 Published 2019-12-06 Partial fix CWE-190
TI-2020-01890 CVE-2020-1971 · GHSA-whf2-mq76-2fhv

EDIPARTYNAME NULL pointer dereference

Priority LOW 36

The X.509 GeneralName type is a generic type for representing different types of names.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.06994 Published 2020-12-08 Partial fix CWE-476
Open these records in search →