Show filters
93 Total Results
Displaying 81-90 of 93
Sort by:
Attacker Value
Unknown
CVE-2016-4055
Disclosure Date: January 23, 2017 (last updated November 08, 2023)
The duration function in the moment package before 2.11.2 for Node.js allows remote attackers to cause a denial of service (CPU consumption) via a long string, aka a "regular expression Denial of Service (ReDoS)."
0
Attacker Value
Unknown
CVE-2017-5179
Disclosure Date: January 05, 2017 (last updated November 25, 2024)
Cross-site scripting (XSS) vulnerability in Tenable Nessus before 6.9.3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
0
Attacker Value
Unknown
CVE-2014-4980
Disclosure Date: July 23, 2014 (last updated October 05, 2023)
The /server/properties resource in Tenable Web UI before 2.3.5 for Nessus 5.2.3 through 5.2.7 allows remote attackers to obtain sensitive information via the token parameter.
0
Attacker Value
Unknown
CVE-2014-2848
Disclosure Date: April 11, 2014 (last updated October 05, 2023)
A race condition in the wmi_malware_scan.nbin plugin before 201402262215 for Nessus 5.2.1 allows local users to gain privileges by replacing the dissolvable agent executable in the Windows temp directory with a Trojan horse program.
0
Attacker Value
Unknown
CVE-2008-4520
Disclosure Date: October 09, 2008 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in bulk_update.pl in AutoNessus before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the remark parameter.
0
Attacker Value
Unknown
CVE-2007-3546
Disclosure Date: July 03, 2007 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in the Windows GUI in Nessus Vulnerability Scanner before 3.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
0
Attacker Value
Unknown
CVE-2006-2093
Disclosure Date: April 29, 2006 (last updated October 04, 2023)
Nessus before 2.2.8, and 3.x before 3.0.3, allows user-assisted attackers to cause a denial of service (memory consumption) via a NASL script that calls split with an invalid sep parameter. NOTE: a design goal of the NASL language is to facilitate sharing of security tests by guaranteeing that a script "can not do anything nasty." This issue is appropriate for CVE only if Nessus users have an expectation that a split statement will not use excessive memory.
0
Attacker Value
Unknown
CVE-2004-2722
Disclosure Date: December 31, 2004 (last updated February 22, 2025)
Nessus 2.0.10a stores account passwords in plaintext in .nessusrc files, which allows local users to obtain passwords. NOTE: the original researcher reports that the vendor has disputed this issue
0
Attacker Value
Unknown
CVE-2004-1445
Disclosure Date: December 31, 2004 (last updated February 22, 2025)
A race condition in nessus-adduser in Nessus 2.0.11 and possibly earlier versions, if the TMPDIR environment variable is not set, allows local users to gain privileges.
0
Attacker Value
Unknown
CVE-2004-2723
Disclosure Date: December 31, 2004 (last updated February 22, 2025)
NessusWX 1.4.4 stores account passwords in plaintext in .session files, which allows local users to obtain passwords.
0
