nessus Archives - CVE Vulnerability

CVE-2019-3974

Sun, 26 Feb 2023 06:33:17 +0000

Nessus 8.5.2 and earlier on Windows platforms were found to contain an issue where certain system files could be overwritten arbitrarily, potentially creating a denial of service condition.

The post CVE-2019-3974 appeared first on CVE Vulnerability.

CVE-2021-46143

Thu, 23 Feb 2023 14:13:04 +0000

In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.

The post CVE-2021-46143 appeared first on CVE Vulnerability.

CVE-2021-45960

Thu, 23 Feb 2023 14:13:01 +0000

In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes, or only freeing memory).

The post CVE-2021-45960 appeared first on CVE Vulnerability.

CVE-2021-20106

Thu, 23 Feb 2023 14:06:40 +0000

Nessus Agent versions 8.2.5 and earlier were found to contain a privilege escalation vulnerability which could allow a Nessus administrator user to upload a specially crafted file that could lead to gaining administrator privileges on the Nessus host.

The post CVE-2021-20106 appeared first on CVE Vulnerability.

CVE-2022-3499

godfreyd94 — Thu, 23 Feb 2023 05:19:33 +0000

An authenticated attacker could utilize the identical agent and cluster node linking keys to potentially allow for a scenario where unauthorized disclosure of agent logs and data is present.

The post CVE-2022-3499 appeared first on CVE Vulnerability.

CVE-2022-33757

godfreyd94 — Thu, 23 Feb 2023 05:19:17 +0000

An authenticated attacker could read Nessus Debug Log file attachments from the web UI without having the correct privileges to do so. This may lead to the disclosure of information on the scan target and/or the Nessus scan to unauthorized parties able to reach the Nessus instance.

The post CVE-2022-33757 appeared first on CVE Vulnerability.

CVE-2022-28291

godfreyd94 — Thu, 23 Feb 2023 05:18:14 +0000

Insufficiently Protected Credentials: An authenticated user with debug privileges can retrieve stored Nessus policy credentials from the “nessusd” process in cleartext via process dumping. The affected products are all versions of Nessus Essentials and Professional. The vulnerability allows an attacker to access credentials stored in Nessus scanners, potentially compromising its customers’ network of assets.

The post CVE-2022-28291 appeared first on CVE Vulnerability.

CVE-2022-23990

Thu, 23 Feb 2023 05:03:10 +0000

Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.

The post CVE-2022-23990 appeared first on CVE Vulnerability.

CVE-2022-23852

Thu, 23 Feb 2023 05:03:08 +0000

Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES.

The post CVE-2022-23852 appeared first on CVE Vulnerability.

CVE-2022-22827

Thu, 23 Feb 2023 05:02:55 +0000

storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

The post CVE-2022-22827 appeared first on CVE Vulnerability.