Vulnerabilities

TI-2010-02860 CVE-2010-2989 · GHSA-jcpf-wpvf-wp62

nessusd_www_server.nbin in the Nessus Web Server plugin 1.2.4 for Nessus allows remote…

LOW 25

nessusd_www_server.nbin in the Nessus Web Server plugin 1.2.4 for Nessus allows remote attackers to obtain sensitive information via a request to the /feed method, which reveals the version in a response.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01064 Published 2010-08-09 No fix listed CWE-200

TI-2010-02787 CVE-2010-2914 · GHSA-3pmj-224c-9qh2

Cross-site scripting (XSS) vulnerability in nessusd_www_server.nbin in the Nessus Web…

LOW 23

Cross-site scripting (XSS) vulnerability in nessusd_www_server.nbin in the Nessus Web Server plugin 1.2.4 for Nessus allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01642 Published 2010-07-30 No fix listed CWE-79

TI-2004-02593 CVE-2004-2723 · GHSA-hff4-446w-6w6j

NessusWX 1.4.4 stores account passwords in plaintext in .session files, which allows local users to obtain passwords.

LOW 11

NessusWX 1.4.4 stores account passwords in plaintext in .session files, which allows local users to obtain passwords.

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00309 Published 2007-10-06 No fix listed CWE-255

TI-2004-02592 CVE-2004-2722 · GHSA-3v3x-cm3g-974v

Nessus 2.0.10a stores account passwords in plaintext in .nessusrc files, which allows…

LOW 11

Nessus 2.0.10a stores account passwords in plaintext in .nessusrc files, which allows local users to obtain passwords.

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.003 Published 2007-10-06 No fix listed CWE-255

TI-2007-03930 CVE-2007-4062 · GHSA-cxp3-m897-wfvf

The SCANCTRL.ScanCtrlCtrl.1 ActiveX control in scan.dll in Nessus Vulnerability Scanner…

LOW 38

The SCANCTRL.ScanCtrlCtrl.1 ActiveX control in scan.dll in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to delete arbitrary files via unspecified vectors involving the deleteNessusRC method, probably a dire…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.02113 Published 2007-07-30 No fix listed CWE-22

TI-2007-03929 CVE-2007-4061 · GHSA-3phw-vqfc-p5mc

Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability…

MEDIUM 53

Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to create or overwrite arbitrary files via a ..

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.11178 Published 2007-07-30 No fix listed

TI-2007-03901 CVE-2007-4031 · GHSA-xjhv-m7vj-8xjp

Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability…

MEDIUM 43

Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to delete arbitrary files via a ..

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.05713 Published 2007-07-27 No fix listed CWE-22

TI-2007-03439 CVE-2007-3546 · GHSA-58wx-6q9p-f2rx

Cross-site scripting (XSS) vulnerability in the Windows GUI in Nessus Vulnerability…

LOW 24

Cross-site scripting (XSS) vulnerability in the Windows GUI in Nessus Vulnerability Scanner before 3.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0192 Published 2007-07-03 No fix listed

TI-2006-02038 CVE-2006-2093 · GHSA-xww4-377p-p343

Nessus before 2.2.8, and 3.x before 3.0.3, allows user-assisted attackers to cause a…

LOW 20

Nessus before 2.2.8, and 3.x before 3.0.3, allows user-assisted attackers to cause a denial of service (memory consumption) via a NASL script that calls split with an invalid sep parameter.

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.03695 Published 2006-04-29 No fix listed CWE-399

TI-2004-01322 CVE-2004-1445 · GHSA-hgjq-9pvc-q7fw

A race condition in nessus-adduser in Nessus 2.0.11 and possibly earlier versions, if the…

LOW 17

A race condition in nessus-adduser in Nessus 2.0.11 and possibly earlier versions, if the TMPDIR environment variable is not set, allows local users to gain privileges.

CVSS 2.0LOW 3.7 Local No auth Interaction — EPSS 0.00305 Published 2005-02-13 No fix listed

TI-2003-00352 CVE-2003-0374 · GHSA-fj58-wx8h-r7ww

Multiple unknown vulnerabilities in Nessus before 2.0.6, in libnessus and possibly…

MEDIUM 46

Multiple unknown vulnerabilities in Nessus before 2.0.6, in libnessus and possibly libnasl, a different set of vulnerabilities than those identified by CVE-2003-0372 and CVE-2003-0373, aka "similar issues in other nasl f…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.01826 Published 2003-06-06 No fix listed

TI-2003-00351 CVE-2003-0373 · GHSA-p685-86cj-cwf4

Multiple buffer overflows in libnasl in Nessus before 2.0.6 allow local users with plugin…

LOW 21

Multiple buffer overflows in libnasl in Nessus before 2.0.6 allow local users with plugin upload privileges to cause a denial of service (core dump) and possibly execute arbitrary code via (1) a long proto argument to th…

CVSS 2.0MEDIUM 4.4 Local No auth Interaction — EPSS 0.00429 Published 2003-06-06 No fix listed CWE-119

TI-2003-00350 CVE-2003-0372 · GHSA-8cfj-7pmq-h9m9

Signed integer vulnerability in libnasl in Nessus before 2.0.6 allows local users with…

LOW 23

Signed integer vulnerability in libnasl in Nessus before 2.0.6 allows local users with plugin upload privileges to cause a denial of service (core dump) and possibly execute arbitrary code by causing a negative argument…

CVSS 2.0MEDIUM 4.6 Local No auth Interaction — EPSS 0.00891 Published 2003-06-06 No fix listed CWE-189

Vulnerabilities

Filters