Product by Tenable
Tenable.sc
46 known vulnerabilities in Tenable.sc (Tenable), 2 of them actively exploited (CISA KEV).
Key figures
46
Vulnerabilities
2
Actively exploited (KEV)
2
Used by ransomware
11
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2021-40438 | mod_proxy SSRF In CISA KEVRansomwarealso in 39 other products | 9.0 | |
| Critical | CVE-2019-11043 | Underflow in PHP-FPM can lead to RCE In CISA KEVRansomwarealso in 22 other products | 8.7 | |
| Critical | CVE-2021-44790 | Apache HTTP Server: Out-of-bounds Write | 9.8 | |
| Critical | CVE-2021-3711 | SM2 Decryption Buffer Overflow | 9.8 | |
| Critical | CVE-2020-11656 | SQLite: Use-After-Free | 9.8 | |
| High | CVE-2021-44224 | Apache HTTP Server: NULL Pointer Dereference | 8.2 | |
| Critical | CVE-2019-19646 | SQLite: security vulnerability | 9.8 | |
| Critical | CVE-2019-19919 | Handlebars.js Project Handlebars.js: Remote Code Execution | 9.8 | |
| High | CVE-2021-34798 | NULL pointer dereference in httpd core | 7.5 | |
| High | CVE-2021-33193 | Request splitting via HTTP/2 method injection and mod_proxy | 7.5 | |
| High | CVE-2021-3712 | Read buffer overruns processing ASN.1 strings | 7.4 | |
| High | CVE-2022-24785 | Path Traversal in Moment.js | 7.5 | |
| Medium | CVE-2021-41184 | XSS in the `of` option of the `.position()` util | 6.5 | |
| Medium | CVE-2021-41182 | XSS in the `altField` option of the Datepicker widget | 6.5 | |
| Medium | CVE-2021-3449 | NULL pointer deref in signature_algorithms processing | 5.9 | |
| Medium | CVE-2019-8331 | Getbootstrap Bootstrap: Cross-Site Scripting (XSS) | 6.1 | |
| Critical | CVE-2020-7060 | global buffer-overflow in mbfl_filt_conv_big5_wchar | 6.5 | |
| High | CVE-2020-7065 | mb_strtolower (UTF-32LE): stack-buffer-overflow at php_unicode_tolower_full | 7.4 | |
| Medium | CVE-2021-41183 | XSS in `*Text` options of the Datepicker widget | 6.5 | |
| High | CVE-2020-7067 | OOB Read in urldecode() | 7.5 | |
| High | CVE-2020-11655 | SQLite: Denial of Service | 7.5 | |
| Critical | CVE-2020-7059 | OOB read in php_strip_tags_ex | 6.5 | |
| Medium | CVE-2021-21707 | Special characters break path parsing in XML functions | 5.3 | |
| Critical | CVE-2021-41116 | Command injection in composer on Windows | 8.2 | |
| Medium | CVE-2021-23841 | Null pointer deref in X509_issuer_and_serial_hash() | 5.9 |