CVSS: 6.8EPSS: 0%CPEs: 1EXPL: 0CVE-2023-0476
https://notcve.org/view.php?id=CVE-2023-0476
25 Jan 2023 — A LDAP injection vulnerability exists in Tenable.sc due to improper validation of user-supplied input before returning it to users. An authenticated attacker could generate data in Active Directory using the application account through blind LDAP injection. Existe una vulnerabilidad de inyección LDAP en Tenable.sc debido a una validación incorrecta de la entrada proporcionada por el usuario antes de devolverla a los usuarios. Un atacante autenticado podría generar datos en Active Directory utilizando la cue... • https://www.tenable.com/security/tns-2023-03 • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') •
CVSS: 6.8EPSS: 0%CPEs: 1EXPL: 0CVE-2023-24493
https://notcve.org/view.php?id=CVE-2023-24493
25 Jan 2023 — A formula injection vulnerability exists in Tenable.sc due to improper validation of user-supplied input before returning it to users. An authenticated attacker could leverage the reporting system to export reports containing formulas, which would then require a victim to approve and execute on a host. Existe una vulnerabilidad de inyección de fórmula en Tenable.sc debido a una validación incorrecta de la entrada proporcionada por el usuario antes de devolverla a los usuarios. Un atacante autenticado podría... • https://www.tenable.com/security/tns-2023-03 • CWE-20: Improper Input Validation •
CVSS: 9.0EPSS: 0%CPEs: 2EXPL: 0CVE-2023-0101
https://notcve.org/view.php?id=CVE-2023-0101
20 Jan 2023 — A privilege escalation vulnerability was identified in Nessus versions 8.10.1 through 8.15.8 and 10.0.0 through 10.4.1. An authenticated attacker could potentially execute a specially crafted file to obtain root or NT AUTHORITY / SYSTEM privileges on the Nessus host. Se identificó una vulnerabilidad de escalada de privilegios en las versiones de Nessus 8.10.1 a 8.15.8 y 10.0.0 a 10.4.1. Un atacante autenticado podría potencialmente ejecutar un archivo especialmente manipulado para obtener privilegios de roo... • https://www.tenable.com/security/tns-2023-01 • CWE-269: Improper Privilege Management •
CVSS: 6.8EPSS: 0%CPEs: 1EXPL: 0CVE-2022-3499
https://notcve.org/view.php?id=CVE-2022-3499
31 Oct 2022 — An authenticated attacker could utilize the identical agent and cluster node linking keys to potentially allow for a scenario where unauthorized disclosure of agent logs and data is present. Un atacante autenticado podría utilizar claves de enlace de nodo de cluster y agente idénticas para permitir potencialmente un escenario en el que esté presente la divulgación no autorizada de registros y datos del agente. • https://www.tenable.com/security/tns-2022-21 • CWE-532: Insertion of Sensitive Information into Log File •
CVSS: 6.8EPSS: 0%CPEs: 1EXPL: 0CVE-2022-33757
https://notcve.org/view.php?id=CVE-2022-33757
24 Oct 2022 — An authenticated attacker could read Nessus Debug Log file attachments from the web UI without having the correct privileges to do so. This may lead to the disclosure of information on the scan target and/or the Nessus scan to unauthorized parties able to reach the Nessus instance. Un atacante autenticado podría leer los archivos adjuntos de Nessus Debug Log desde la interfaz web sin tener los privilegios correctos para hacerlo. Esto puede conllevar a una divulgación de información sobre el objetivo del esc... • https://www.tenable.com/security/tns-2022-11 • CWE-284: Improper Access Control •
CVSS: 6.8EPSS: 0%CPEs: 1EXPL: 1CVE-2022-28291
https://notcve.org/view.php?id=CVE-2022-28291
17 Oct 2022 — Insufficiently Protected Credentials: An authenticated user with debug privileges can retrieve stored Nessus policy credentials from the “nessusd” process in cleartext via process dumping. The affected products are all versions of Nessus Essentials and Professional. The vulnerability allows an attacker to access credentials stored in Nessus scanners, potentially compromising its customers’ network of assets. Unas Credenciales Insuficientemente Protegidas: Un usuario autenticado con privilegios de depuración... • https://cybersecurityworks.com/blog/zero-days/csw-expert-discovers-a-zero-day-vulnerability-in-tenables-nessus-scanner.html • CWE-522: Insufficiently Protected Credentials •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2022-32974
https://notcve.org/view.php?id=CVE-2022-32974
21 Jun 2022 — An authenticated attacker could read arbitrary files from the underlying operating system of the scanner using a custom crafted compliance audit file without providing any valid SSH credentials. Un atacante autenticado podría leer archivos arbitrarios del sistema operativo subyacente del escáner usando un archivo de auditoría de cumplimiento diseñado a medida sin proporcionar ninguna credencial SSH válida • https://www.tenable.com/security/tns-2022-11 •
CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 0CVE-2022-32973
https://notcve.org/view.php?id=CVE-2022-32973
21 Jun 2022 — An authenticated attacker could create an audit file that bypasses PowerShell cmdlet checks and executes commands with administrator privileges. Un atacante autenticado podría crear un archivo de auditoría que omita las comprobaciones del cmdlet de PowerShell y ejecute comandos con privilegios de administrador • https://www.tenable.com/security/tns-2022-11 •
CVSS: 8.8EPSS: 0%CPEs: 7EXPL: 0CVE-2022-24828 – Missing input validation can lead to command execution in composer
https://notcve.org/view.php?id=CVE-2022-24828
13 Apr 2022 — Composer is a dependency manager for the PHP programming language. Integrators using Composer code to call `VcsDriver::getFileContent` can have a code injection vulnerability if the user can control the `$file` or `$identifier` argument. This leads to a vulnerability on packagist.org for example where the composer.json's `readme` field can be used as a vector for injecting parameters into hg/Mercurial via the `$file` argument, or git via the `$identifier` argument if you allow arbitrary data there (Packagis... • https://github.com/composer/composer/commit/2c40c53637c5c7e43fff7c09d3d324d632734709 • CWE-20: Improper Input Validation CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') •
CVSS: 7.5EPSS: 0%CPEs: 7EXPL: 1CVE-2022-24785 – Path Traversal in Moment.js
https://notcve.org/view.php?id=CVE-2022-24785
04 Apr 2022 — Moment.js is a JavaScript date library for parsing, validating, manipulating, and formatting dates. A path traversal vulnerability impacts npm (server) users of Moment.js between versions 1.0.1 and 2.29.1, especially if a user-provided locale string is directly used to switch moment locale. This problem is patched in 2.29.2, and the patch can be applied to all affected versions. As a workaround, sanitize the user-provided locale name before passing it to Moment.js. Moment.js es una librería de fechas en Jav... • https://github.com/pS3ud0RAnD0m/cve-2022-24785-poc-lab • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CWE-27: Path Traversal: 'dir/../../filename' •