Vulnerabilities

TI-2010-02860 CVE-2010-2989 · GHSA-jcpf-wpvf-wp62

nessusd_www_server.nbin in the Nessus Web Server plugin 1.2.4 for Nessus allows remote…

LOW 25

nessusd_www_server.nbin in the Nessus Web Server plugin 1.2.4 for Nessus allows remote attackers to obtain sensitive information via a request to the /feed method, which reveals the version in a response.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01064 Published 2010-08-09 No fix listed CWE-200

TI-2010-02787 CVE-2010-2914 · GHSA-3pmj-224c-9qh2

Cross-site scripting (XSS) vulnerability in nessusd_www_server.nbin in the Nessus Web…

LOW 23

Cross-site scripting (XSS) vulnerability in nessusd_www_server.nbin in the Nessus Web Server plugin 1.2.4 for Nessus allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01642 Published 2010-07-30 No fix listed CWE-79

Vulnerabilities

Filters

nessusd_www_server.nbin in the Nessus Web Server plugin 1.2.4 for Nessus allows remote…

Cross-site scripting (XSS) vulnerability in nessusd_www_server.nbin in the Nessus Web…