CVE-2014-4980

概要

参考情報

• packetstormsecurity.com/files/127532/Tenable-Nessus-5.2.7-Parameter-Tampering-Authentication-Bypass.html · Exploit
• halock.com/blog/cve-2014-4980-parameter-tampering-nessus-web-ui
• osvdb.org/109376
• securityfocus.com/archive/1/532839/100/0/threaded
• securityfocus.com/bid/68782
• securitytracker.com/id/1030614
• tenable.com/security/tns-2014-05 · Vendor Advisory

nessus のその他の脆弱性

• CVE-2026-57588低 3.3A SQL injection vulnerability in Nessus allows an attacker to craft a malicious scan result file that, when imported by a privileged user, i…
• CVE-2026-57587中 5.3A SQL injection vulnerability in Nessus allows a remote, unauthenticated attacker who controls reverse DNS records for a scanned host to inj…
• CVE-2026-33694高 7.8This vulnerability allows an attacker to create a junction, enabling the deletion of arbitrary files with SYSTEM privileges. As a result, th…
• CVE-2025-36630高 7.1In Tenable Nessus versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could overwrite arbitrary local sy…
• CVE-2024-0971中 6.5 A SQL injection vulnerability exists where an authenticated, low-privileged remote attacker could potentially alter scan DB content.