Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

tenable vulnerabilities and exploits

(subscribe to this query)
9.8
CVSSv3
CVE-2022-23852
Expat (aka libexpat) prior to 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES.
Libexpat Project LibexpatNetapp Oncommand Workflow Automation -Netapp Clustered Data Ontap -Tenable NessusDebian Debian Linux 9.0Oracle Communications Metasolv Solution 6.3.1Siemens Sinema Remote Connect Server
8.1
CVSSv3
CVE-2022-0130
Tenable.sc versions 5.14.0 up to and including 5.19.1 were found to contain a remote code execution vulnerability which could allow a remote, unauthenticated malicious user to execute code under special circumstances. An attacker would first have to stage a specific file type in ...
Tenable Tenable.sc
9.8
CVSSv3
CVE-2022-22822
addBinding in xmlparse.c in Expat (aka libexpat) prior to 2.4.3 has an integer overflow.
Libexpat Project LibexpatTenable NessusSiemens Sinema Remote Connect ServerDebian Debian Linux 10.0Debian Debian Linux 11.0
9.8
CVSSv3
CVE-2022-22823
build_model in xmlparse.c in Expat (aka libexpat) prior to 2.4.3 has an integer overflow.
Libexpat Project LibexpatTenable NessusDebian Debian Linux 10.0Debian Debian Linux 11.0Siemens Sinema Remote Connect Server
9.8
CVSSv3
CVE-2022-22824
defineAttribute in xmlparse.c in Expat (aka libexpat) prior to 2.4.3 has an integer overflow.
Libexpat Project LibexpatTenable NessusDebian Debian Linux 10.0Debian Debian Linux 11.0Siemens Sinema Remote Connect Server
8.8
CVSSv3
CVE-2022-22825
lookup in xmlparse.c in Expat (aka libexpat) prior to 2.4.3 has an integer overflow.
Libexpat Project LibexpatTenable NessusDebian Debian Linux 10.0Debian Debian Linux 11.0Siemens Sinema Remote Connect Server
8.8
CVSSv3
CVE-2022-22826
nextScaffoldPart in xmlparse.c in Expat (aka libexpat) prior to 2.4.3 has an integer overflow.
Libexpat Project LibexpatTenable NessusDebian Debian Linux 10.0Debian Debian Linux 11.0Siemens Sinema Remote Connect Server
8.8
CVSSv3
CVE-2022-22827
storeAtts in xmlparse.c in Expat (aka libexpat) prior to 2.4.3 has an integer overflow.
Libexpat Project LibexpatTenable NessusDebian Debian Linux 10.0Debian Debian Linux 11.0Siemens Sinema Remote Connect Server
7.8
CVSSv3
CVE-2021-46143
In doProlog in xmlparse.c in Expat (aka libexpat) prior to 2.4.3, an integer overflow exists for m_groupSize.
Libexpat Project LibexpatNetapp Oncommand Workflow Automation -Netapp Clustered Data Ontap -Netapp Solidfire \\& Hci Management Node -Netapp Active Iq Unified Manager -Netapp Hci Baseboard Management Controller H610cNetapp Hci Baseboard Management Controller H610sNetapp Hci Baseboard Management Controller H615cTenable NessusSiemens Sinema Remote Connect Server
8.8
CVSSv3
CVE-2021-45960
In Expat (aka libexpat) prior to 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes, or only freeing memory).
Libexpat Project LibexpatTenable NessusDebian Debian Linux 10.0Debian Debian Linux 11.0Siemens Sinema Remote Connect ServerNetapp Oncommand Workflow Automation -Netapp Solidfire \\& Hci Management Node -Netapp Active Iq Unified Manager -Netapp Hci Baseboard Management Controller H610cNetapp Hci Baseboard Management Controller H610sNetapp Hci Baseboard Management Controller H615c
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
injectionCVE-2024-30983CVE-2023-4235CVE-2024-21338privilegeencryptionCVE-2023-4232CVE-2024-31497CVE-2024-32341
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook