Section
Vulnerabilities
CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.
3 matching records.
-
A command injection vulnerability in the Active Directory Events Listener of Tenable Identity Exposure (SaaS) allows an authenticated, low-privileged…
A command injection vulnerability in the Active Directory Events Listener of Tenable Identity Exposure (SaaS) allows an authenticated, low-privileged attacker to execute arbitrary commands as SYSTEM on the PDCe.
-
An SQL injection vulnerability could allow an authenticated user to read or modify data stored by Nessus.
An SQL injection vulnerability could allow an authenticated user to read or modify data stored by Nessus.
-
On Linux, an authenticated, low-privileged Nessus user with scan-creation rights could read arbitrary text files on the scanner host with the…
On Linux, an authenticated, low-privileged Nessus user with scan-creation rights could read arbitrary text files on the scanner host with the privileges of the nessusd process by running a custom Unix compliance audit against the…
Reuse this view
Same filters as JSON: /api/items?category=vuln&window=30d&vendor=Tenable&limit=100. RSS for this section: feed.xml.