Known vulnerabilities in Nessus Network Monitor - page 3

Vendor: Tenable Network Security
Software: Nessus Network Monitor
Software CPE: cpe:2.3:a:tenable_network_security:nessus_network_monitor:*:*:*:*:*:*:*:*
Website: https://www.tenable.com/
Total vulnerabilities: 95
Public exploits: 11
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Nessus Network Monitor Nessus Network Monitor is affected by 95 known vulnerabilities: 1 critical, 24 high, 43 medium, 26 low Critical High Medium Low

Vulnerabilities (95)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU97682 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-9158		 CWE-79 Low
No
No
 6.5.0 24.09.2024 SB2024092472
#VU97150 - Improper Certificate Validation
CVE-2024-8096		 CWE-295 Low
No
No
 6.5.0 11.09.2024 SB2024091127
SB2024091141
SB2024091142
and 11 more
#VU89430 - Heap-based Buffer Overflow
CVE-2024-34459		 CWE-122 Medium
No
No
 6.5.0 14.05.2024 SB2024051432
SB2024051433
SB2024051631
and 31 more
#VU86807 - Out-of-bounds read
CVE-2024-25629		 CWE-125 Low
No
No
 6.4.0 26.02.2024 SB2024022648
SB2024030621
SB2024032954
and 39 more
#VU83900 - Exposure of sensitive information to an unauthorized actor
CVE-2023-46218		 CWE-200 Low
No
No
 6.4.0 06.12.2023 SB2023120612
SB2023120644
SB2023120661
and 87 more
#VU83899 - Missing Encryption of Sensitive Data
CVE-2023-46219		 CWE-311 Medium
No
No
 6.4.0 06.12.2023 SB2023120612
SB2023120644
SB2023120661
and 31 more
#VU82349 - Cryptographic Issues
CVE-2023-5363		 CWE-310 Low
No
No
 6.3.1 24.10.2023 SB2023102443
SB2023102448
SB2023102534
and 46 more
#VU79500 - Insufficient Control Flow Management
CVE-2023-28711		 CWE-691
No
No
 6.4.0 14.08.2023 SB2023081455
SB2023090924
SB2024042978
#VU71999 - NULL Pointer Dereference
CVE-2023-0401		 CWE-476 Medium
No
No
 6.2.1 07.02.2023 SB2023020742
SB2023020748
SB2023020774
and 52 more
#VU71998 - NULL Pointer Dereference
CVE-2023-0217		 CWE-476 Medium
No
No
 6.2.1 07.02.2023 SB2023020742
SB2023020748
SB2023020774
and 49 more
#VU71997 - Release of invalid pointer or reference
CVE-2023-0216		 CWE-763 Medium
No
No
 6.2.1 07.02.2023 SB2023020742
SB2023020748
SB2023020774
and 50 more
#VU71996 - Double Free
CVE-2022-4450		 CWE-415 Medium
No
No
 6.2.1 07.02.2023 SB2023020742
SB2023020748
SB2023020771
and 180 more
#VU71995 - Use After Free
CVE-2023-0215		 CWE-416 Medium
No
No
 6.2.1 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 209 more
#VU71994 - Out-of-bounds read
CVE-2022-4203		 CWE-125 Medium
No
No
 6.2.1 07.02.2023 SB2023020742
SB2023020748
SB2023020774
and 47 more
#VU71993 - Information Exposure Through Timing Discrepancy
CVE-2022-4304		 CWE-208 Medium
No
No
 6.2.1 07.02.2023 SB2023020742
SB2023020748
SB2023020767
and 222 more
#VU59645 - Integer overflow
CVE-2022-22822		 CWE-190 High
No
No
 6.2.1 17.01.2022 SB2022011711
SB2022011713
SB2022020902
and 60 more
#VU59642 - Resource exhaustion
CVE-2021-45960		 CWE-400 Medium
No
No
 6.2.1 17.01.2022 SB2022011711
SB2022011713
SB2022020902
and 56 more
#VU53013 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-23383		 CWE-94 High
Available
No
 6.2.0, 6.3.1 10.05.2021 SB2021022320
SB2021070402
SB2022081525
and 10 more
#VU50896 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-23369		 CWE-94 High
No
No
 6.2.0, 6.3.1 23.02.2021 SB2021022320
SB2021022321
SB2021070402
and 10 more
#VU15424 - Unrestricted Upload of File with Dangerous Type
CVE-2018-9206		 CWE-434 Critical
Available
Exploited
 6.3.1 19.10.2018 SB2018101901
SB2019011703
SB2019011708
and 5 more


Showing elements 41 - 60 out of 95