彙總 nessus 相關全部產品的 CVE 與安全漏洞情報，包括 CVSS、EPSS、公開時間與漏洞情報資料。
常見弱點模式包括 路徑處理缺陷、跨站腳本與緩衝區溢位，在 軟體部署與生產負載 使用場景中可能帶來 檔案覆寫、應用程式崩潰與記憶體損壞 等風險。
相關漏洞資料主要來源於公開漏洞披露與安全公告，可用於評估歷史漏洞暴露面與修補優先順序。
| CVE | 摘要 | 來源 | 最高 CVSS | EPSS % | 公開時間 | 更新時間 |
|---|---|---|---|---|---|---|
| CVE-2010-2989 | nessusd_www_server.nbin in the Nessus Web Server plugin 1.2.4 for Nessus allows remote attackers to obtain sensitive information via a request to the /feed method, which reveals the version in a response. | [email protected] | 5.0 | 1.06% | 2010-08-10 | 2026-04-29 |
| CVE-2010-2914 | Cross-site scripting (XSS) vulnerability in nessusd_www_server.nbin in the Nessus Web Server plugin 1.2.4 for Nessus allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | [email protected] | 4.3 | 1.64% | 2010-07-30 | 2026-04-29 |
| CVE-2007-4062 | The SCANCTRL.ScanCtrlCtrl.1 ActiveX control in scan.dll in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to delete arbitrary files via unspecified vectors involving the deleteNessusRC method, probably a directory traversal vulnerability. | [email protected] | 7.8 | 2.11% | 2007-07-30 | 2026-04-23 |
| CVE-2007-4061 | Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in the argument to the saveNessusRC method, which writes text specified by the addsetConfig method, possibly related to the SCANCTRL.ScanCtrlCtrl.1 ActiveX control in scan.dll. NOTE: this can be leveraged for code execution by writing to a Startup folder. | [email protected] | 9.3 | 11.18% | 2007-07-30 | 2026-04-23 |
| CVE-2007-4031 | Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to delete arbitrary files via a .. (dot dot) in the argument to the deleteReport method, probably related to the SCANCTRL.ScanCtrlCtrl.1 ActiveX control in scan.dll. | [email protected] | 7.8 | 5.71% | 2007-07-27 | 2026-04-23 |
| CVE-2007-3546 | Cross-site scripting (XSS) vulnerability in the Windows GUI in Nessus Vulnerability Scanner before 3.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | [email protected] | 4.3 | 1.92% | 2007-07-03 | 2026-04-23 |
| CVE-2006-2093 | Nessus before 2.2.8, and 3.x before 3.0.3, allows user-assisted attackers to cause a denial of service (memory consumption) via a NASL script that calls split with an invalid sep parameter. NOTE: a design goal of the NASL language is to facilitate sharing of security tests by guaranteeing that a script "can not do anything nasty." This issue is appropriate for CVE only if Nessus users have an expectation that a split statement will not use excessive memory. | [email protected] | 2.6 | 3.61% | 2006-04-29 | 2026-04-16 |
| CVE-2004-2723 | NessusWX 1.4.4 stores account passwords in plaintext in .session files, which allows local users to obtain passwords. | [email protected] | 2.1 | 0.31% | 2004-12-31 | 2026-04-16 |
| CVE-2004-2722 | Nessus 2.0.10a stores account passwords in plaintext in .nessusrc files, which allows local users to obtain passwords. NOTE: the original researcher reports that the vendor has disputed this issue | [email protected] | 2.1 | 0.30% | 2004-12-31 | 2026-04-16 |
| CVE-2004-1445 | A race condition in nessus-adduser in Nessus 2.0.11 and possibly earlier versions, if the TMPDIR environment variable is not set, allows local users to gain privileges. | [email protected] | 3.7 | 0.30% | 2004-12-31 | 2026-04-16 |
| CVE-2003-0374 | Multiple unknown vulnerabilities in Nessus before 2.0.6, in libnessus and possibly libnasl, a different set of vulnerabilities than those identified by CVE-2003-0372 and CVE-2003-0373, aka "similar issues in other nasl functions as well as in libnessus." | [email protected] | 10.0 | 1.83% | 2003-06-16 | 2026-06-16 |
| CVE-2003-0373 | Multiple buffer overflows in libnasl in Nessus before 2.0.6 allow local users with plugin upload privileges to cause a denial of service (core dump) and possibly execute arbitrary code via (1) a long proto argument to the scanner_add_port function, (2) a long user argument to the ftp_log_in function, (3) a long pass argument to the ftp_log_in function. | [email protected] | 4.4 | 0.43% | 2003-06-16 | 2026-06-16 |
| CVE-2003-0372 | Signed integer vulnerability in libnasl in Nessus before 2.0.6 allows local users with plugin upload privileges to cause a denial of service (core dump) and possibly execute arbitrary code by causing a negative argument to be provided to the insstr function as used in a NASL script. | [email protected] | 4.6 | 0.89% | 2003-06-16 | 2026-06-16 |