Nessus
by Tenable
CVEs (80)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2018-20843 | Hig | 0.01 | 7.5 | 0.07 | Jun 24, 2019 | In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a high amount of RAM and CPU resources while processing (enough to be usable for denial-of-service attacks). | ||
| CVE-2026-57587 | Med | 0.00 | 5.3 | 0.00 | Jun 25, 2026 | A SQL injection vulnerability in Nessus allows a remote, unauthenticated attacker who controls reverse DNS records for a scanned host to inject malicious SQL into the scan results database, potentially enabling exfiltration of scan-result data. | ||
| CVE-2022-23990 | Hig | 0.00 | 7.5 | 0.04 | Jan 26, 2022 | Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function. | ||
| CVE-2022-23852 | Cri | 0.00 | 9.8 | 0.05 | Jan 24, 2022 | Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES. | ||
| CVE-2022-22827 | Hig | 0.00 | 8.8 | 0.03 | Jan 10, 2022 | storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. | ||
| CVE-2022-22826 | Hig | 0.00 | 8.8 | 0.03 | Jan 10, 2022 | nextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. | ||
| CVE-2022-22825 | Hig | 0.00 | 8.8 | 0.03 | Jan 10, 2022 | lookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. | ||
| CVE-2022-22824 | Cri | 0.00 | 9.8 | 0.03 | Jan 10, 2022 | defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. | ||
| CVE-2022-22823 | Cri | 0.00 | 9.8 | 0.03 | Jan 10, 2022 | build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. | ||
| CVE-2022-22822 | Cri | 0.00 | 9.8 | 0.05 | Jan 10, 2022 | addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. | ||
| CVE-2021-46143 | Hig | 0.00 | 8.1 | 0.04 | Jan 6, 2022 | In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize. | ||
| CVE-2021-45960 | Hig | 0.00 | 8.8 | 0.04 | Jan 1, 2022 | In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes, or only freeing memory). | ||
| CVE-2014-4980 | 0.00 | — | 0.02 | Jul 23, 2014 | The /server/properties resource in Tenable Web UI before 2.3.5 for Nessus 5.2.3 through 5.2.7 allows remote attackers to obtain sensitive information via the token parameter. | |||
| CVE-2014-2848 | 0.00 | — | 0.00 | Apr 11, 2014 | A race condition in the wmi_malware_scan.nbin plugin before 201402262215 for Nessus 5.2.1 allows local users to gain privileges by replacing the dissolvable agent executable in the Windows temp directory with a Trojan horse program. | |||
| CVE-2007-3546 | 0.00 | — | 0.02 | Jul 3, 2007 | Cross-site scripting (XSS) vulnerability in the Windows GUI in Nessus Vulnerability Scanner before 3.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | |||
| CVE-2006-2093 | 0.00 | — | 0.04 | Apr 29, 2006 | Nessus before 2.2.8, and 3.x before 3.0.3, allows user-assisted attackers to cause a denial of service (memory consumption) via a NASL script that calls split with an invalid sep parameter. NOTE: a design goal of the NASL language is to facilitate sharing of security tests by… | |||
| CVE-2004-2722 | 0.00 | — | 0.00 | Dec 31, 2004 | Nessus 2.0.10a stores account passwords in plaintext in .nessusrc files, which allows local users to obtain passwords. NOTE: the original researcher reports that the vendor has disputed this issue | |||
| CVE-2004-1445 | 0.00 | — | 0.00 | Dec 31, 2004 | A race condition in nessus-adduser in Nessus 2.0.11 and possibly earlier versions, if the TMPDIR environment variable is not set, allows local users to gain privileges. | |||
| CVE-2003-0374 | 0.00 | — | 0.02 | Jun 16, 2003 | Multiple unknown vulnerabilities in Nessus before 2.0.6, in libnessus and possibly libnasl, a different set of vulnerabilities than those identified by CVE-2003-0372 and CVE-2003-0373, aka "similar issues in other nasl functions as well as in libnessus." | |||
| CVE-2003-0373 | 0.00 | — | 0.00 | Jun 16, 2003 | Multiple buffer overflows in libnasl in Nessus before 2.0.6 allow local users with plugin upload privileges to cause a denial of service (core dump) and possibly execute arbitrary code via (1) a long proto argument to the scanner_add_port function, (2) a long user argument to… |
- risk 0.01cvss 7.5epss 0.07
In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a high amount of RAM and CPU resources while processing (enough to be usable for denial-of-service attacks).
- risk 0.00cvss 5.3epss 0.00
A SQL injection vulnerability in Nessus allows a remote, unauthenticated attacker who controls reverse DNS records for a scanned host to inject malicious SQL into the scan results database, potentially enabling exfiltration of scan-result data.
- risk 0.00cvss 7.5epss 0.04
Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.
- risk 0.00cvss 9.8epss 0.05
Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES.
- risk 0.00cvss 8.8epss 0.03
storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
- risk 0.00cvss 8.8epss 0.03
nextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
- risk 0.00cvss 8.8epss 0.03
lookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
- risk 0.00cvss 9.8epss 0.03
defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
- risk 0.00cvss 9.8epss 0.03
build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
- risk 0.00cvss 9.8epss 0.05
addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
- risk 0.00cvss 8.1epss 0.04
In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.
- risk 0.00cvss 8.8epss 0.04
In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes, or only freeing memory).
- CVE-2014-4980Jul 23, 2014risk 0.00cvss —epss 0.02
The /server/properties resource in Tenable Web UI before 2.3.5 for Nessus 5.2.3 through 5.2.7 allows remote attackers to obtain sensitive information via the token parameter.
- CVE-2014-2848Apr 11, 2014risk 0.00cvss —epss 0.00
A race condition in the wmi_malware_scan.nbin plugin before 201402262215 for Nessus 5.2.1 allows local users to gain privileges by replacing the dissolvable agent executable in the Windows temp directory with a Trojan horse program.
- CVE-2007-3546Jul 3, 2007risk 0.00cvss —epss 0.02
Cross-site scripting (XSS) vulnerability in the Windows GUI in Nessus Vulnerability Scanner before 3.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
- CVE-2006-2093Apr 29, 2006risk 0.00cvss —epss 0.04
Nessus before 2.2.8, and 3.x before 3.0.3, allows user-assisted attackers to cause a denial of service (memory consumption) via a NASL script that calls split with an invalid sep parameter. NOTE: a design goal of the NASL language is to facilitate sharing of security tests by…
- CVE-2004-2722Dec 31, 2004risk 0.00cvss —epss 0.00
Nessus 2.0.10a stores account passwords in plaintext in .nessusrc files, which allows local users to obtain passwords. NOTE: the original researcher reports that the vendor has disputed this issue
- CVE-2004-1445Dec 31, 2004risk 0.00cvss —epss 0.00
A race condition in nessus-adduser in Nessus 2.0.11 and possibly earlier versions, if the TMPDIR environment variable is not set, allows local users to gain privileges.
- CVE-2003-0374Jun 16, 2003risk 0.00cvss —epss 0.02
Multiple unknown vulnerabilities in Nessus before 2.0.6, in libnessus and possibly libnasl, a different set of vulnerabilities than those identified by CVE-2003-0372 and CVE-2003-0373, aka "similar issues in other nasl functions as well as in libnessus."
- CVE-2003-0373Jun 16, 2003risk 0.00cvss —epss 0.00
Multiple buffer overflows in libnasl in Nessus before 2.0.6 allow local users with plugin upload privileges to cause a denial of service (core dump) and possibly execute arbitrary code via (1) a long proto argument to the scanner_add_port function, (2) a long user argument to…
Page 4 of 4