en
Severity across 16 analyzed records
A short verification protects source data and prevents automated AI requests.
The GCVE catalog currently lists 73 vulnerability records affecting Nessus.
Among the 16 records analyzed by CyStack, 5 are High or Critical and 0 appear in the CISA KEV catalog.
Compare the version you run with each vulnerability and the provider guidance below. The data only includes records analyzed so far.
| CVE | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-57588SQL Injection in Nessus via Malicious Scan Result File Import | Exploitation statusNot known exploited | FixNot confirmed | Published06/25/2026 | SeverityLow |
CVE-2026-57587SQL Injection in Nessus via Reverse DNS Lookup | Exploitation statusNot known exploited | FixNot confirmed | Published06/25/2026 | SeverityLow |
CVE-2026-33694Junction File Manipulation | Exploitation statusNot known exploited | FixYes | Published04/23/2026 | SeverityHigh |
CVE-2025-36630Local Privilege Escalation | Exploitation statusNot known exploited | FixYes | Published07/01/2025 | SeverityHigh |
CVE-2025-36625Log Poisoning in Nessus | Exploitation statusNot known exploited | FixYes | Published04/18/2025 | SeverityMedium |
CVE-2025-24914Local Priviledge Escalation | Exploitation statusNot known exploited | FixYes | Published04/18/2025 | SeverityHigh |
CVE-2024-3290Race Condition | Exploitation statusNot known exploited | FixYes | Published05/17/2024 | SeverityHigh |
CVE-2024-3289CVE-2024-3289 | Exploitation statusNot known exploited | FixYes | Published05/17/2024 | SeverityHigh |
CVE-2024-2390Local Privilege Escalation | Exploitation statusNot known exploited | FixYes | Published03/18/2024 | SeverityHigh |
CVE-2024-0971CVE-2024-0971 | Exploitation statusNot known exploited | FixYes | Published02/06/2024 | SeverityMedium |
CVE-2024-0955Stored XSS vulnerability | Exploitation statusNot known exploited | FixYes | Published02/06/2024 | SeverityMedium |
CVE-2023-6178CVE-2023-6178 | Exploitation statusNot confirmed | FixYes | Published11/20/2023 | SeverityMedium |
CVE-2023-6062Arbitrary File Write | Exploitation statusNot known exploited | FixYes | Published11/20/2023 | SeverityMedium |
CVE-2023-5847CVE-2023-5847 | Exploitation statusNot known exploited | FixYes | Published11/01/2023 | SeverityMedium |
CVE-2023-3253Improper authorization in Nessus | Exploitation statusNot known exploited | FixYes | Published08/29/2023 | SeverityMedium |
CVE-2023-3252Arbitrary File Write | Exploitation statusNot known exploited | FixYes | Published08/29/2023 | SeverityMedium |
CVE-2023-3251Pass-back vulnerability in Nessus | Exploitation statusNot known exploited | FixYes | Published08/29/2023 | SeverityMedium |
CVE-2023-2005Tenable Plugin Feed ID #202306261202 Fixes Privilege Escalation Vulnerability | Exploitation statusNot known exploited | FixYes | Published06/26/2023 | SeverityMedium |
CVE-2022-4313CVE-2022-4313 | Exploitation statusNot known exploited | FixNot confirmed | Published03/15/2023 | SeverityHigh |
CVE-2023-0524CVE-2023-0524 | Exploitation statusNot known exploited | FixNot confirmed | Published02/01/2023 | SeverityHigh |
CVE-2023-0101CVE-2023-0101 | Exploitation statusNot known exploited | FixNot confirmed | Published01/20/2023 | SeverityHigh |
CVE-2022-3499CVE-2022-3499 | Exploitation statusNot known exploited | FixNot confirmed | Published10/31/2022 | SeverityMedium |
CVE-2022-33757CVE-2022-33757 | Exploitation statusNot known exploited | FixYes | Published10/24/2022 | SeverityMedium |
CVE-2022-28291CVE-2022-28291 | Exploitation statusNot known exploited | FixNot confirmed | Published10/17/2022 | SeverityMedium |
CVE-2022-32974CVE-2022-32974 | Exploitation statusNot confirmed | FixNot confirmed | Published06/21/2022 | SeverityUnknown |
CVE-2022-32973CVE-2022-32973 | Exploitation statusNot confirmed | FixNot confirmed | Published06/21/2022 | SeverityUnknown |
CVE-2022-0778Infinite loop in BN_mod_sqrt() reachable when parsing certificates | Exploitation statusNot known exploited | FixYes | Published03/15/2022 | SeverityHigh |
CVE-2022-23990CVE-2022-23990 | Exploitation statusNot known exploited | FixNot confirmed | Published01/26/2022 | SeverityHigh |
CVE-2022-23852CVE-2022-23852 | Exploitation statusNot known exploited | FixNot confirmed | Published01/24/2022 | SeverityCritical |
CVE-2022-22822CVE-2022-22822 | Exploitation statusNot known exploited | FixNot confirmed | Published01/08/2022 | SeverityCritical |
CVE-2022-22823CVE-2022-22823 | Exploitation statusNot known exploited | FixNot confirmed | Published01/08/2022 | SeverityCritical |
CVE-2022-22824CVE-2022-22824 | Exploitation statusNot known exploited | FixNot confirmed | Published01/08/2022 | SeverityCritical |
CVE-2022-22825CVE-2022-22825 | Exploitation statusNot known exploited | FixNot confirmed | Published01/08/2022 | SeverityHigh |
CVE-2022-22826CVE-2022-22826 | Exploitation statusNot known exploited | FixNot confirmed | Published01/08/2022 | SeverityHigh |
CVE-2022-22827CVE-2022-22827 | Exploitation statusNot known exploited | FixNot confirmed | Published01/08/2022 | SeverityHigh |
CVE-2021-46143CVE-2021-46143 | Exploitation statusPublic exploit | FixNot confirmed | Published01/06/2022 | SeverityHigh |
CVE-2021-45960CVE-2021-45960 | Exploitation statusPublic exploit | FixNot confirmed | Published01/01/2022 | SeverityHigh |
CVE-2021-20135CVE-2021-20135 | Exploitation statusNot confirmed | FixNot confirmed | Published11/02/2021 | SeverityUnknown |
CVE-2021-20106CVE-2021-20106 | Exploitation statusNot confirmed | FixNot confirmed | Published07/21/2021 | SeverityUnknown |
CVE-2021-20079CVE-2021-20079 | Exploitation statusNot confirmed | FixNot confirmed | Published06/29/2021 | SeverityUnknown |
CVE-2021-20100CVE-2021-20100 | Exploitation statusNot confirmed | FixNot confirmed | Published06/28/2021 | SeverityUnknown |
CVE-2021-20099CVE-2021-20099 | Exploitation statusNot confirmed | FixNot confirmed | Published06/28/2021 | SeverityUnknown |
CVE-2021-3450CA certificate check bypass with X509_V_FLAG_X509_STRICT | Exploitation statusNot confirmed | FixYes | Published03/25/2021 | SeverityUnknown |
CVE-2021-3449NULL pointer deref in signature_algorithms processing | Exploitation statusNot confirmed | FixYes | Published03/25/2021 | SeverityUnknown |
CVE-2020-5793CVE-2020-5793 | Exploitation statusNot confirmed | FixNot confirmed | Published11/05/2020 | SeverityUnknown |
CVE-2020-5774CVE-2020-5774 | Exploitation statusNot confirmed | FixNot confirmed | Published08/21/2020 | SeverityUnknown |
CVE-2020-5765CVE-2020-5765 | Exploitation statusNot confirmed | FixNot confirmed | Published07/15/2020 | SeverityUnknown |
CVE-2016-1000029CVE-2016-1000029 | Exploitation statusNot confirmed | FixNot confirmed | Published12/27/2019 | SeverityUnknown |
CVE-2016-1000028CVE-2016-1000028 | Exploitation statusNot confirmed | FixNot confirmed | Published12/27/2019 | SeverityUnknown |
CVE-2019-3982CVE-2019-3982 | Exploitation statusNot confirmed | FixNot confirmed | Published10/23/2019 | SeverityUnknown |
CVE-2019-3974CVE-2019-3974 | Exploitation statusNot confirmed | FixNot confirmed | Published08/15/2019 | SeverityUnknown |
CVE-2019-3962CVE-2019-3962 | Exploitation statusNot confirmed | FixNot confirmed | Published07/01/2019 | SeverityUnknown |
CVE-2019-3961CVE-2019-3961 | Exploitation statusNot confirmed | FixNot confirmed | Published06/25/2019 | SeverityUnknown |
CVE-2018-20843CVE-2018-20843 | Exploitation statusNot known exploited | FixNot confirmed | Published06/24/2019 | SeverityHigh |
CVE-2019-15590-byte record padding oracle | Exploitation statusNot confirmed | FixYes | Published02/27/2019 | SeverityUnknown |
CVE-2019-3923CVE-2019-3923 | Exploitation statusNot confirmed | FixNot confirmed | Published02/12/2019 | SeverityUnknown |
CVE-2018-5407CVE-2018-5407 | Exploitation statusPublic exploit | FixNot confirmed | Published11/15/2018 | SeverityUnknown |
CVE-2018-1148CVE-2018-1148 | Exploitation statusNot confirmed | FixNot confirmed | Published05/18/2018 | SeverityUnknown |
CVE-2018-1147CVE-2018-1147 | Exploitation statusNot confirmed | FixNot confirmed | Published05/18/2018 | SeverityUnknown |
CVE-2018-1141CVE-2018-1141 | Exploitation statusNot confirmed | FixNot confirmed | Published03/20/2018 | SeverityUnknown |
CVE-2017-18214CVE-2017-18214 | Exploitation statusNot confirmed | FixNot confirmed | Published03/04/2018 | SeverityUnknown |
CVE-2017-11506CVE-2017-11506 | Exploitation statusNot confirmed | FixNot confirmed | Published08/09/2017 | SeverityUnknown |
CVE-2017-2122CVE-2017-2122 | Exploitation statusNot confirmed | FixNot confirmed | Published05/12/2017 | SeverityUnknown |
CVE-2017-7849CVE-2017-7849 | Exploitation statusNot confirmed | FixNot confirmed | Published04/19/2017 | SeverityUnknown |
CVE-2017-7850CVE-2017-7850 | Exploitation statusNot confirmed | FixNot confirmed | Published04/19/2017 | SeverityUnknown |
CVE-2017-7199CVE-2017-7199 | Exploitation statusNot confirmed | FixNot confirmed | Published03/23/2017 | SeverityUnknown |
CVE-2017-6543CVE-2017-6543 | Exploitation statusNot confirmed | FixNot confirmed | Published03/08/2017 | SeverityUnknown |
CVE-2016-9259CVE-2016-9259 | Exploitation statusNot confirmed | FixNot confirmed | Published02/28/2017 | SeverityUnknown |
CVE-2016-9260CVE-2016-9260 | Exploitation statusNot confirmed | FixNot confirmed | Published01/31/2017 | SeverityUnknown |
CVE-2016-4055CVE-2016-4055 | Exploitation statusNot confirmed | FixNot confirmed | Published01/23/2017 | SeverityUnknown |
CVE-2017-5179CVE-2017-5179 | Exploitation statusNot confirmed | FixNot confirmed | Published01/05/2017 | SeverityUnknown |
CVE-2014-4980CVE-2014-4980 | Exploitation statusNot confirmed | FixNot confirmed | Published07/23/2014 | SeverityUnknown |
CVE-2014-2848CVE-2014-2848 | Exploitation statusNot confirmed | FixNot confirmed | Published04/11/2014 | SeverityUnknown |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
