Known vulnerabilities in Tenable Nessus - page 2

Software CPE: cpe:2.3:a:tenable_network_security:tenable_nessus:*:*:*:*:*:*:*:*
Total vulnerabilities: 104
Public exploits: 12
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Tenable Nessus Tenable Nessus is affected by 104 known vulnerabilities: 29 high, 45 medium, 30 low Critical High Medium Low

Vulnerabilities (104)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU86219 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-0971
CWE-89 Medium
No
No
10.7.0 07.02.2024 SB2024020733
#VU86216 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-0955
CWE-79 Low
No
No
10.7.0 07.02.2024 SB2024020733
#VU83307 - Unrestricted Upload of File with Dangerous Type
CVE-2023-6062
CWE-434 Low
No
No
10.5.7, 10.6.3 20.11.2023 SB2023112059
#VU82654 - Untrusted Search Path
CVE-2023-5847
CWE-426 Low
No
No
10.5.6, 10.6.2 01.11.2023 SB2023110126
SB2023110127
SB2023110128
#VU82299 - Heap-based Buffer Overflow
CVE-2023-45853
CWE-122 Medium
No
No
10.6.2 23.10.2023 SB2023102325
SB2023102633
SB2023102634
and 40 more
#VU80565 - Improper input validation
CVE-2023-4807
CWE-20 Low
No
No
10.5.6, 10.6.2 08.09.2023 SB2023090834
SB2023092109
SB2023110126
and 45 more
#VU80114 - Improper Authorization
CVE-2023-3253
CWE-285 Low
No
No
10.5.5, 10.6.0 29.08.2023 SB2023082954
#VU80113 - Improper input validation
CVE-2023-3252
CWE-20 Low
No
No
10.5.5, 10.6.0 29.08.2023 SB2023082954
#VU80112 - Unprotected Storage of Credentials
CVE-2023-3251
CWE-256 Low
No
No
10.5.5, 10.6.0 29.08.2023 SB2023082954
#VU78798 - Resource Management Errors
CVE-2023-3817
CWE-399 Low
No
No
10.5.4 31.07.2023 SB2023073153
SB2023080268
SB2023080438
and 158 more
#VU78463 - Resource Management Errors
CVE-2023-3446
CWE-399 Medium
No
No
10.5.4 20.07.2023 SB2023072079
SB2023072524
SB2023072525
and 152 more
#VU74863 - NULL Pointer Dereference
CVE-2023-28484
CWE-476 Medium
No
No
10.5.2 11.04.2023 SB2023041144
SB2023041145
SB2023041939
and 87 more
#VU74862 - Resource Management Errors
CVE-2023-29469
CWE-399 Medium
No
No
10.5.2 11.04.2023 SB2023041144
SB2023041145
SB2023041939
and 84 more
#VU73265 - Command injection
CVE-2022-4313
CWE-77 Low
No
No
10.4.2 13.03.2023 SB2023031331
#VU71996 - Double Free
CVE-2022-4450
CWE-415 Medium
No
No
8.15.9, 10.4.3, 10.5.0 07.02.2023 SB2023020742
SB2023020748
SB2023020771
and 180 more
#VU71995 - Use After Free
CVE-2023-0215
CWE-416 Medium
No
No
8.15.9, 10.4.3, 10.5.0 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 209 more
#VU71993 - Information Exposure Through Timing Discrepancy
CVE-2022-4304
CWE-208 Medium
No
No
8.15.9, 10.4.3, 10.5.0 07.02.2023 SB2023020742
SB2023020748
SB2023020767
and 222 more
#VU64922 - Missing Encryption of Sensitive Data
CVE-2022-2097
CWE-311 Low
No
No
8.15.9 05.07.2022 SB2022070509
SB2022070522
SB2022070531
and 112 more
#VU64559 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-2068
CWE-78 Medium
No
No
8.15.9 21.06.2022 SB2022062120
SB2022062125
SB2022062236
and 135 more
#VU62741 - Integer overflow
CVE-2022-29824
CWE-190 High
No
No
8.15.7, 10.3.1, 10.5.2 03.05.2022 SB2022050305
SB2022050306
SB2022050307
and 73 more


Showing elements 21 - 40 out of 104