TI-2025-24918 CVE-2025-36625 · GHSA-g69v-xr79-fx7w
Log Poisoning in Nessus
Priority LOW 20
In Nessus versions prior to 10.8.4, a non-authenticated attacker could alter Nessus logging entries by manipulating http requests to the application.
Vulnerabilities
2 records
TI-2025-18615 CVE-2025-24914 · GHSA-cjfc-vqf6-fvgw
Local Priviledge Escalation
Priority LOW 35
When installing Nessus to a non-default location on a Windows host, Nessus versions prior to 10.8.4 did not enforce secure permissions for sub-directories.