DeutschShown in its original language — a full translation is planned for a future version.
Tenable Security Nessus: Mehrere Schwachstellen
view advisory published 2025-04-21
Ein entfernter Angreifer kann mehrere Schwachstellen in Tenable Security Nessus ausnutzen, um Daten zu manipulieren, seine Privilegien zu erweitern und um nicht näher spezifizierte Auswirkungen zu erzielen.
01
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-36625US | — | — | ||
In Nessus versions prior to 10.8.4, a non-authenticated attacker could alter Nessus logging entries by manipulating http requests to the application. | ||||
| CVE-2025-24914US | —OT elevated | — | ||
When installing Nessus to a non-default location on a Windows host, Nessus versions prior to 10.8.4 did not enforce secure permissions for sub-directories. This could allow for loc… | ||||
| CVE-2024-8176US | — | Exploit | ||
A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested… | ||||
| CVE-2025-27113US | high7.5 | — | ||
libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c. | ||||
| CVE-2025-24928US | high7.7 | — | ||
libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted doc… | ||||
| CVE-2024-56171US | critical9.8 | — | ||
libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML… | ||||
| CVE-2024-40896US | — | — | ||
In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entit… | ||||
| CVE-2024-50602US | — | Exploit | ||
An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser. | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan