Search vulnerabilities

Results 2

Export CSV
CVE-2010-2914

Cross-site scripting (XSS) vulnerability in nessusd_www_server.nbin in the Nessus Web Server plugin 1.2.4 for Nessus allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0 · 4.3 Medium EPSS 1.6% KEV · Not listed
Vendors
CVE-2010-2989

nessusd_www_server.nbin in the Nessus Web Server plugin 1.2.4 for Nessus allows remote attackers to obtain sensitive information via a request to the /feed method, which reveals the version in a response.

CVSS 2.0 · 5.0 Medium EPSS 1.1% KEV · Not listed
Vendors