Latest tenable nessus agent Vulnerabilities

● CVE-2023-5847

Under certain conditions, a low privileged attacker could load a specially crafted file during installation or upgrade to escalate privileges on Windows and Linux hosts.

Tenable Nessus<10.6.2

Tenable Nessus Agent<10.4.3

Linux Linux kernel

Microsoft Windows

● CVE-2021-20118

Nessus Agent 8.3.0 and earlier was found to contain a local privilege escalation vulnerability which could allow an authenticated, local administrator to run specific executables on the Nessus Agent h...

Tenable Nessus Agent<=8.3.0

● CVE-2021-20117

Tenable Nessus Agent<=8.3.0

● CVE-2021-3450

OpenSSL could allow a remote attacker to bypass security restrictions, caused by a missing check in the validation logic of X.509 certificate chains by the X509_V_FLAG_X509_STRICT flag. By using any v...

rust/openssl-src>=111.11.0<111.15.0

IBM Security Verify Access<=10.0.0

OpenSSL OpenSSL>=1.1.1h<1.1.1k

FreeBSD FreeBSD=12.2

FreeBSD FreeBSD=12.2-p1

FreeBSD FreeBSD=12.2-p2

and 52 more

● CVE-2021-20077

Nessus Agent versions 7.2.0 through 8.2.2 were found to inadvertently capture the IAM role security token on the local host during initial linking of the Nessus Agent when installed on an Amazon EC2 i...

Tenable Nessus Agent>=7.2.0<8.2.3

● CVE-2020-5793

A vulnerability in Nessus versions 8.9.0 through 8.12.0 for Windows & Nessus Agent 8.0.0 and 8.1.0 for Windows could allow an authenticated local attacker to copy user-supplied files to a specially co...

Tenable Nessus>=8.9.0<=8.12.0

Tenable Nessus Agent=8.0.0

Tenable Nessus Agent=8.1.0

Microsoft Windows

● CVE-2019-16168

In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe division by zero in the q...

IBM Data Risk Manager<=2.0.6

SQLite SQLite>=3.8.5<=3.29.0

Apple watchOS>=7.3

Apple iPadOS>=9.5

NetApp E-Series SANtricity OS Controller>=11.0.0<=11.60.3

NetApp OnCommand Insight

and 28 more

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.