Approved changes feed: RSS · Atom
cpe:2.3:a:tenable:nessus:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Tenable (c0ec4e71-d667-5327-b3ed-b4c21aa5a87e) |
|---|---|
| Product | Nessus (6815ac7c-390e-57da-a331-2de781ac4668) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-57588 |
vulnerable | 2026-07-29 01:00:29.865332 |
SQL Injection in Nessus via Malicious Scan Result File Import
LOW (3.3)
A SQL injection vulnerability in Nessus allows an attacker to craft a malicious scan result file that, when imported by a privileged user, injects malicious SQL into the scan results database, potentially enabling exfiltration of scan-result data.
Published: 2026-06-25T13:47:27.757Z
Updated: 2026-06-25T15:49:55.857Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-57587 |
vulnerable | 2026-07-29 01:00:29.865068 |
SQL Injection in Nessus via Reverse DNS Lookup
MEDIUM (5.3)
A SQL injection vulnerability in Nessus allows a remote, unauthenticated attacker who controls reverse DNS records for a scanned host to inject malicious SQL into the scan results database, potentially enabling exfiltration of scan-result data.
Published: 2026-06-25T13:47:27.497Z
Updated: 2026-06-25T15:49:55.625Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36630 |
vulnerable | 2026-06-08 07:21:02.116358 |
Local Privilege Escalation
HIGH (8.4)
In Tenable Nessus versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could overwrite arbitrary local system files with log content at SYSTEM privilege.
Published: 2025-07-01T23:11:13.818Z
Updated: 2025-07-02T13:24:24.991Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36625 |
vulnerable | 2026-06-08 07:21:02.115865 |
Log Poisoning in Nessus
MEDIUM (4.3)
In Nessus versions prior to 10.8.4, a non-authenticated attacker could alter Nessus logging entries by manipulating http requests to the application.
Published: 2025-04-18T19:17:30.612Z
Updated: 2025-04-18T19:40:24.201Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-24914 |
vulnerable | 2026-06-08 07:12:50.164953 |
Local Priviledge Escalation
HIGH (7.8)
When installing Nessus to a non-default location on a Windows host, Nessus versions prior to 10.8.4 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secured the directories in the non-default installation location. - CVE-2025-24914
Published: 2025-04-18T18:18:02.729Z
Updated: 2026-02-26T18:28:09.421Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3290 |
vulnerable | 2026-06-08 06:41:52.891991 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3289 |
vulnerable | 2026-06-08 06:41:52.891540 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2390 |
vulnerable | 2026-06-08 06:33:30.997753 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-0971 |
vulnerable | 2026-06-08 06:22:03.246246 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-0955 |
vulnerable | 2026-06-08 06:22:03.208169 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6178 |
vulnerable | 2026-06-08 06:19:46.496486 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6062 |
vulnerable | 2026-06-08 06:19:45.474086 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5847 |
vulnerable | 2026-06-08 06:19:44.906238 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3253 |
vulnerable | 2026-06-08 06:09:38.940424 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3252 |
vulnerable | 2026-06-08 06:09:38.940062 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3251 |
vulnerable | 2026-06-08 06:09:38.939613 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2005 |
vulnerable | 2026-06-08 06:02:41.176931 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0101 |
vulnerable | 2026-06-08 05:52:04.285053 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4313 |
vulnerable | 2026-06-08 05:51:37.185284 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3499 |
vulnerable | 2026-06-08 05:48:21.290065 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-33757 |
vulnerable | 2026-06-08 05:44:51.238200 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32974 |
vulnerable | 2026-06-08 05:44:46.088185 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32973 |
vulnerable | 2026-06-08 05:44:46.087772 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-28291 |
vulnerable | 2026-06-08 05:42:44.365840 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23990 |
vulnerable | 2026-06-08 05:40:59.470141 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23852 |
vulnerable | 2026-06-08 05:40:59.268106 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22827 |
vulnerable | 2026-06-08 05:40:55.492163 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22826 |
vulnerable | 2026-06-08 05:40:55.491638 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22825 |
vulnerable | 2026-06-08 05:40:55.491021 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22824 |
vulnerable | 2026-06-08 05:40:55.490381 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22823 |
vulnerable | 2026-06-08 05:40:55.489708 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22822 |
vulnerable | 2026-06-08 05:40:55.487718 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0778 |
vulnerable | 2026-06-08 05:39:11.191826 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-46143 |
vulnerable | 2026-06-08 05:36:49.773956 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-45960 |
vulnerable | 2026-06-08 05:36:49.610599 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3450 |
vulnerable | 2026-06-08 05:33:52.210860 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3449 |
vulnerable | 2026-06-08 05:33:52.076250 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20135 |
vulnerable | 2026-06-08 05:29:08.578223 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20106 |
vulnerable | 2026-06-08 05:29:08.462115 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20100 |
vulnerable | 2026-06-08 05:29:08.457744 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20099 |
vulnerable | 2026-06-08 05:29:08.457377 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20079 |
vulnerable | 2026-06-08 05:29:08.250583 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5793 |
vulnerable | 2026-06-08 05:26:43.750232 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5774 |
vulnerable | 2026-06-08 05:26:43.712837 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5765 |
vulnerable | 2026-06-08 05:26:43.699501 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-3982 |
vulnerable | 2026-06-08 05:13:56.592526 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-3974 |
vulnerable | 2026-06-08 05:13:56.578103 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-3962 |
vulnerable | 2026-06-08 05:13:56.566232 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-3961 |
vulnerable | 2026-06-08 05:13:56.565968 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-3923 |
vulnerable | 2026-06-08 05:13:56.432203 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-1559 |
vulnerable | 2026-06-08 05:13:26.115737 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-5407 |
vulnerable | 2026-06-08 05:11:50.875732 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20843 |
vulnerable | 2026-06-08 05:11:28.153880 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1148 |
vulnerable | 2026-06-08 05:11:17.039878 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1147 |
vulnerable | 2026-06-08 05:11:17.039244 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1141 |
vulnerable | 2026-06-08 05:11:17.031247 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-6543 |
vulnerable | 2026-06-08 05:09:51.494355 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-5179 |
vulnerable | 2026-06-08 05:09:39.268861 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-18214 |
vulnerable | 2026-06-08 05:09:10.595608 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-11506 |
vulnerable | 2026-06-08 05:08:37.967344 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-9260 |
vulnerable | 2026-06-08 05:08:23.185451 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-4055 |
vulnerable | 2026-06-08 05:07:46.597992 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-1000029 |
vulnerable | 2026-06-08 05:07:16.821641 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-1000028 |
vulnerable | 2026-06-08 05:07:16.821242 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.