Skip to content
Noroxi

nessus records

13 published records for vendor nessus.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    13 records
    • CVE-2003-0374
      41Plan

      Multiple unknown vulnerabilities in Nessus before 2.0.6, in libnessus and possibly libnasl, a different set of vulnerabilities than those id

      CriticalCVSS 10.0No exploitEPSS 2%

      nessus · nessusJun 16, 2003

    • CVE-2007-4061
      40Plan

      Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to create or ov

      CriticalCVSS 9.3Proof of conceptEPSS 11%

      nessus · vulnerability scannerJul 30, 2007

    • CVE-2007-4031
      33Monitor

      Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to delete arbit

      HighCVSS 7.8Proof of conceptEPSS 6%

      nessus · vulnerability scannerJul 27, 2007

    • CVE-2007-4062
      32Monitor

      The SCANCTRL.ScanCtrlCtrl.1 ActiveX control in scan.dll in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to delete arbitrary fi

      HighCVSS 7.8Proof of conceptEPSS 2%

      nessus · vulnerability scannerJul 30, 2007

    • CVE-2010-2989
      20Monitor

      nessusd_www_server.nbin in the Nessus Web Server plugin 1.2.4 for Nessus allows remote attackers to obtain sensitive information via a reque

      MediumCVSS 5.0No exploitEPSS 1%

      nessus · web server pluginAug 10, 2010

    • CVE-2007-3546
      18Monitor

      Cross-site scripting (XSS) vulnerability in the Windows GUI in Nessus Vulnerability Scanner before 3.0.6 allows remote attackers to inject a

      MediumCVSS 4.3No exploitEPSS 2%

      nessus · nessusJul 3, 2007

    • CVE-2003-0372
      18Monitor

      Signed integer vulnerability in libnasl in Nessus before 2.0.6 allows local users with plugin upload privileges to cause a denial of service

      MediumCVSS 4.6Proof of conceptEPSS 1%

      nessus · nessusJun 16, 2003

    • CVE-2010-2914
      17Monitor

      Cross-site scripting (XSS) vulnerability in nessusd_www_server.nbin in the Nessus Web Server plugin 1.2.4 for Nessus allows remote attackers

      MediumCVSS 4.3No exploitEPSS 2%

      nessus · web server pluginJul 30, 2010

    • CVE-2003-0373
      17Monitor

      Multiple buffer overflows in libnasl in Nessus before 2.0.6 allow local users with plugin upload privileges to cause a denial of service (co

      MediumCVSS 4.4No exploitEPSS 0%

      nessus · nessusJun 16, 2003

    • CVE-2004-1445
      14Monitor

      A race condition in nessus-adduser in Nessus 2.0.11 and possibly earlier versions, if the TMPDIR environment variable is not set, allows loc

      LowCVSS 3.7No exploitEPSS 0%

      nessus · nessusDec 31, 2004

    • CVE-2006-2093
      11Monitor

      Nessus before 2.2.8, and 3.x before 3.0.3, allows user-assisted attackers to cause a denial of service (memory consumption) via a NASL scrip

      LowCVSS 2.6No exploitEPSS 4%

      nessus · nessusApr 29, 2006

    • CVE-2004-2723
      8Monitor

      NessusWX 1.4.4 stores account passwords in plaintext in .session files, which allows local users to obtain passwords.

      LowCVSS 2.1No exploitEPSS 0%

      nessus · nessuswxDec 31, 2004

    • CVE-2004-2722
      8Monitor

      Nessus 2.0.10a stores account passwords in plaintext in .nessusrc files, which allows local users to obtain passwords.

      LowCVSS 2.1No exploitEPSS 0%

      nessus · nessusDec 31, 2004