Known vulnerabilities in SecurityCenter - page 4

Vendor: Tenable Network Security
Software: SecurityCenter
Software CPE: cpe:2.3:a:tenable_network_security:securitycenter:*:*:*:*:*:*:*:*
Website: https://www.tenable.com/
Total vulnerabilities: 133
Public exploits: 14
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SecurityCenter SecurityCenter is affected by 133 known vulnerabilities: 2 critical, 12 high, 78 medium, 41 low Critical High Medium Low

Vulnerabilities (133)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123015 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-2630		 CWE-78 Medium
No
No
 SC-202602.1, SC-202602.2 18.02.2026 SB2026021828
#VU120271 - Heap-based Buffer Overflow
CVE-2025-14178		 CWE-122 High
No
No
 SC-202602.1, SC-202602.2 23.12.2025 SB2025122340
SB2025122342
SB2026010709
and 33 more
#VU120270 - NULL Pointer Dereference
CVE-2025-14180		 CWE-476 Medium
No
No
 SC-202602.1, SC-202602.2 23.12.2025 SB2025122340
SB2025122342
SB2026010709
and 18 more
#VU116854 - Improper Access Control
CVE-2025-36636		 CWE-284 Medium
No
No
 6.7.0 09.10.2025 SB2025100908
#VU114096 - Improper input validation
CVE-2025-8715		 CWE-20 Medium
No
No
 SC-202509.1 14.08.2025 SB2025081496
SB2025081898
SB2025082551
and 51 more
#VU114095 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-8714		 CWE-94 Low
Available
No
 SC-202509.1 14.08.2025 SB2025081496
SB2025081898
SB2025082551
and 53 more
#VU114094 - Permissions, Privileges, and Access Controls
CVE-2025-8713		 CWE-264 Low
No
No
 SC-202509.1 14.08.2025 SB2025081496
SB2025081898
SB2025082551
and 31 more
#VU113156 - Memory corruption
CVE-2025-6965		 CWE-119 Medium
No
No
 SC-202508.1 22.07.2025 SB2025072254
SB2025072807
SB2025072890
and 100 more
#VU112734 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2024-42516		 CWE-113 Low
No
No
 SC-202508.1 10.07.2025 SB2025071040
SB2025071710
SB2025071764
and 33 more
#VU112733 - Server-Side Request Forgery (SSRF)
CVE-2024-43204		 CWE-918 Low
No
No
 SC-202508.1 10.07.2025 SB2025071040
SB2025071710
SB2025071764
and 27 more
#VU112731 - Improper Encoding or Escaping of Output
CVE-2024-47252		 CWE-116 High
No
No
 SC-202508.1 10.07.2025 SB2025071040
SB2025071764
SB2025072111
and 34 more
#VU112730 - Security Features
CVE-2025-23048		 CWE-254 Medium
Available
No
 SC-202508.1 10.07.2025 SB2025071040
SB2025071764
SB2025072111
and 29 more
#VU112729 - Resource Management Errors
CVE-2025-49630		 CWE-399 Medium
No
No
 SC-202508.1 10.07.2025 SB2025071040
SB2025071764
SB2025072111
and 26 more
#VU112728 - Cryptographic Issues
CVE-2025-49812		 CWE-310 Medium
No
No
 SC-202508.1 10.07.2025 SB2025071040
SB2025071764
SB2025072111
and 34 more
#VU112727 - Resource Management Errors
CVE-2025-53020		 CWE-399 Medium
No
No
 SC-202508.1 10.07.2025 SB2025071040
SB2025071201
SB2025071202
and 15 more
#VU112189 - NULL Pointer Dereference
CVE-2025-6491		 CWE-476 Medium
No
No
 SC-202508.1 04.07.2025 SB2025070427
SB2025070433
SB2025070434
and 18 more
#VU108834 - Buffer over-read
CVE-2025-4207		 CWE-126 Medium
No
No
 SC-202509.1 09.05.2025 SB2025050920
SB2025051669
SB20250521157
and 37 more
#VU108745 - Integer overflow
CVE-2025-29087		 CWE-190 Medium
No
No
 SC-202505.1, SC-202506.1, 6.6.0 07.05.2025 SB2025050709
SB2025050710
SB2025050714
and 14 more
#VU103970 - Improper input validation
CVE-2025-1094		 CWE-20 Critical
Available
Exploited
 SC-202504.3 14.02.2025 SB2025021408
SB2025022038
SB2025022039
and 77 more
#VU73969 - Incorrect Regular Expression
CVE-2022-25927		 CWE-185 Medium
No
No
 SC-202505.1, SC-202506.1, 6.6.0 23.03.2023 SB2023032313
SB2023032315
SB2023032710
and 19 more


Showing elements 61 - 80 out of 133