Vulnerabilities (CVE)

Filtered by vendor Tenable Subscribe
Filtered by product Nessus Agent
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-20077 1 Tenable 1 Nessus Agent 2022-07-12 7.2 HIGH 6.7 MEDIUM
Nessus versions 8.13.2 and earlier were found to contain a privilege escalation vulnerability which could allow a Nessus administrator user to upload a specially crafted file that could lead to gaining administrator privileges on the Nessus host.
CVE-2021-20117 1 Tenable 1 Nessus Agent 2022-07-12 7.2 HIGH 6.7 MEDIUM
Nessus Agent 8.3.0 and earlier was found to contain a local privilege escalation vulnerability which could allow an authenticated, local administrator to run specific executables on the Nessus Agent host. This is different than CVE-2021-20118.
CVE-2021-20118 1 Tenable 1 Nessus Agent 2022-07-12 7.2 HIGH 6.7 MEDIUM
Nessus Agent 8.3.0 and earlier was found to contain a local privilege escalation vulnerability which could allow an authenticated, local administrator to run specific executables on the Nessus Agent host. This is different than CVE-2021-20117.
CVE-2019-16168 7 Canonical, Debian, Fedoraproject and 4 more 19 Ubuntu Linux, Debian Linux, Fedora and 16 more 2021-07-31 4.3 MEDIUM 6.5 MEDIUM
In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe division by zero in the query planner."