6 results · Clear filters · Feed
-
High 8.3
SQL Injection
An SQL injection vulnerability could allow an authenticated user to read or modify data stored by Nessus.
-
High 8.4
Local Privilege Escalation
In Tenable Nessus versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could overwrite arbitrary local system files with log content at SYSTEM privilege.
-
High 7.8
Local Priviledge Escalation
When installing Nessus to a non-default location on a Windows host, Nessus versions prior to 10.8.4 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secured the directories in the non-def…
-
High 8.2
Race Condition
A race condition vulnerability exists where an authenticated, local attacker on a Windows Nessus host could modify installation parameters at installation time, which could lead to the execution of arbitrary code on the Nessus host
-
High 7.8
When installing Nessus to a directory outside of the default location on a Windows host, Nessus versions prior to 10.7.…
-
High 7.8
Local Privilege Escalation
As a part of Tenable’s vulnerability disclosure program, a vulnerability in a Nessus plugin was identified and reported. This vulnerability could allow a malicious actor with sufficient permissions on a scan target to place a binary in a specific filesystem l…