Nessus

13 CVEs across 4 Nessus products. Browse Nessus vulnerabilities, severities, and proof-of-concept exploits.

Nessus products with known CVEs

ProductCVEs
Nessus9
Vulnerability Scanner3
Web Server Plugin2
Nessuswx1
Nessus CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2010-29892010-08-10nessusd_www_server.nbin in the Nessus Web Server plugin 1.2.4 for Nessus allows remote attackers to obtain sensitive information via a request to the /feed met…
CVE-2010-29142010-07-30Cross-site scripting (XSS) vulnerability in nessusd_www_server.nbin in the Nessus Web Server plugin 1.2.4 for Nessus allows remote attackers to inject arbitrar…
CVE-2007-40622007-07-30The SCANCTRL.ScanCtrlCtrl.1 ActiveX control in scan.dll in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to delete arbitrary files via unspecified…
CVE-2007-40612007-07-30Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to create or overwrite arbitrary f…
CVE-2007-40312007-07-27Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to delete arbitrary files via a…
CVE-2007-35462007-07-03Cross-site scripting (XSS) vulnerability in the Windows GUI in Nessus Vulnerability Scanner before 3.0.6 allows remote attackers to inject arbitrary web script…
CVE-2006-20932006-04-29Nessus before 2.2.8, and 3.x before 3.0.3, allows user-assisted attackers to cause a denial of service (memory consumption) via a NASL script that calls split…
CVE-2004-27232004-12-31NessusWX 1.4.4 stores account passwords in plaintext in .session files, which allows local users to obtain passwords.
CVE-2004-27222004-12-31Nessus 2.0.10a stores account passwords in plaintext in .nessusrc files, which allows local users to obtain passwords. NOTE: the original researcher reports t…
CVE-2004-14452004-12-31A race condition in nessus-adduser in Nessus 2.0.11 and possibly earlier versions, if the TMPDIR environment variable is not set, allows local users to gain pr…
CVE-2003-03742003-06-16Multiple unknown vulnerabilities in Nessus before 2.0.6, in libnessus and possibly libnasl, a different set of vulnerabilities than those identified by CVE-200…
CVE-2003-03732003-06-16Multiple buffer overflows in libnasl in Nessus before 2.0.6 allow local users with plugin upload privileges to cause a denial of service (core dump) and possib…
CVE-2003-03722003-06-16Signed integer vulnerability in libnasl in Nessus before 2.0.6 allows local users with plugin upload privileges to cause a denial of service (core dump) and po…