CVE-2014-2848

Description

References

• secunia.com/advisories/57403 · Vendor Advisory
• securitytracker.com/id/1029946
• discussions.nessus.org/thread/7195 · Vendor Advisory
• nccgroup.com/en/learning-and-research-centre/technical-advisories/nessus-authenticated-scan-local-privilege-escalation

More vulnerabilities in nessus

• CVE-2026-57588LOW 3.3A SQL injection vulnerability in Nessus allows an attacker to craft a malicious scan result file that, when imported by a privileged user, i…
• CVE-2026-57587MEDIUM 5.3A SQL injection vulnerability in Nessus allows a remote, unauthenticated attacker who controls reverse DNS records for a scanned host to inj…
• CVE-2026-33694HIGH 7.8This vulnerability allows an attacker to create a junction, enabling the deletion of arbitrary files with SYSTEM privileges. As a result, th…
• CVE-2025-36630HIGH 7.1In Tenable Nessus versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could overwrite arbitrary local sy…
• CVE-2024-0971MEDIUM 6.5 A SQL injection vulnerability exists where an authenticated, low-privileged remote attacker could potentially alter scan DB content.