📦

nessus

Vendor: tenable

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 9 Code Available
Total RCEs 4 Remote Access
Total CVEs 312 Total Indexed
Avg. EPSS 0.86% Exploit Prob.
Latest CVE CVE-2025-36630 Jul 02

Security Vulnerability Index

Page 3 / 32
9.8 CVSS
CVE-2022-23852
Exploit Found

Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES.

EPSS: 1.62%
8.8 CVSS
CVE-2022-22827
Exploit Found

storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

EPSS: 0.28%
8.8 CVSS
CVE-2022-22826

nextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

EPSS: 0.21%
8.8 CVSS
CVE-2022-22825

lookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

EPSS: 0.21%
9.8 CVSS
CVE-2022-22824

defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

EPSS: 0.43%
9.8 CVSS
CVE-2022-22823

build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

EPSS: 0.43%
9.8 CVSS
CVE-2022-22822
Exploit Found

addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

EPSS: 1.33%
8.1 CVSS
CVE-2021-46143
Exploit Found

In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.

EPSS: 4.19%
8.8 CVSS
CVE-2021-45960
Exploit Found

In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes, or only freeing memory).

EPSS: 0.32%
6.7 CVSS
CVE-2021-20135

Nessus versions 8.15.2 and earlier were found to contain a local privilege escalation vulnerability which could allow an authenticated, local administrator to run specific executables on the Nessus Agent host. Tenable has included a fix for this issue in Nessus 10.0.0. The installation files can be obtained from the Tenable Downloads Portal (https://www.tenable.com/downloads/nessus).

EPSS: 0.05%