Tenable Security Center any version

Command Injection

Command Injection

Command Injection

Remote Code Execution

Command Injection

mail() may release string with refcount==1 twice

An authenticated non-admin user can exploit a SQL injection flaw in the ticketing REST API to access sensitive data stored in the appliance database.

Command Injection

Improper Input Validation

In SecurityCenter versions prior to 5.7.0, a username enumeration issue could allow an unauthenticated attacker to automate the discovery of username aliases via brute force, ultimately facilitating unauthorized access. Server response output has been unified to correct this issue.

Tenable Plugin Feed ID #202306261202 Fixes Privilege Escalation Vulnerability

Indirect Object Reference (IDOR) in Security Center

Local Privilege Escalation

Remote Code Execution

Privilege Escalation

link() silently truncates after a null byte on Windows

Command Injection Vulnerability in Tenable Security Center

Blind SQL Injection

SQL Injection

SQL Injection

Use-after-free in exif parsing under memory sanitizer

Improper Access Control

Improper privilege management

Insuffucient Protections Lead to Brute Force

DirectoryIterator class silently truncates after a null byte

HTML Injection Vulnerability

In SecurityCenter versions prior to 5.7.0, a cross-site scripting (XSS) issue could allow an authenticated attacker to inject JavaScript code into an image filename parameter within the Reports feature area. Properly updated input validation techniques have been implemented to correct this issue.

Stored Cross Site Scripting

Buffer underflow in bc_shift_addsub

Improper Access Control