Tenable Nessus Network Monitor

SM2 Decryption Buffer Overflow

Privilege Escalation

XSS

A vulnerability in Nessus Network Monitor versions 5.11.0, 5.11.1, and 5.12.0 for Windows could allow an authenticated local attacker to execute arbitrary code by copying user-supplied files to a specially constructed path in a specifically named user directory. The attacker needs valid credentials on the Windows system to exploit this vulnerability.

Improper Access Control leads to Local Privilege Escalation

Privilege Escalation

Improper Access Control leads to Local Priviledge Escalation

Integer overflow in CipherUpdate

Read buffer overruns processing ASN.1 strings

CA certificate check bypass with X509_V_FLAG_X509_STRICT

Blind SQL Injection

NULL pointer deref in signature_algorithms processing

Null pointer deref in X509_issuer_and_serial_hash()

EDIPARTYNAME NULL pointer dereference