The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2023-0613 advisory.

  - A prototype pollution vulnerability exists in the function copy in dom.js in the xmldom (published as     @xmldom/xmldom) package before 0.8.3 for Node.js via the p variable. NOTE: the vendor states we are in     the process of marking this report as invalid; however, some third parties takes the position that A     prototype injection/Prototype pollution is not just when global objects are polluted with recursive merge     or deep cloning but also when a target object is polluted. (CVE-2022-37616)

  - When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by     finalizing the operation with a rename from a temporary name to the final target file name.In that rename     operation, it might accidentally *widen* the permissions for the target file, leaving the updated file     accessible to more users than intended. (CVE-2022-32207)

  - An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the     XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to     access an array at a negative 2GB offset, typically leading to a segmentation fault. (CVE-2022-40303)

  - An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a     hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be     provoked. (CVE-2022-40304)

  - There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName.
    X.400 addresses were parsed as an ASN1_STRING but the public structure definition for GENERAL_NAME     incorrectly specified the type of the x400Address field as ASN1_TYPE. This field is subsequently     interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an ASN1_STRING. When CRL     checking is enabled (i.e. the application sets the X509_V_FLAG_CRL_CHECK flag), this vulnerability may     allow an attacker to pass arbitrary pointers to a memcmp call, enabling them to read memory contents or     enact a denial of service. In most cases, the attack requires the attacker to provide both the certificate     chain and CRL, neither of which need to have a valid signature. If the attacker only controls one of these     inputs, the other input must already contain an X.400 address as a CRL distribution point, which is     uncommon. As such, this vulnerability is most likely to only affect applications which have implemented     their own functionality for retrieving CRLs over a network. (CVE-2023-0286)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AOS installed on the remote host is prior to 6.10. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-6.10 advisory.

  - squashfs_opendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different     vulnerability than CVE-2021-40153. A squashfs filesystem that has been crafted to include a symbolic link     and then contents under the same filename in a filesystem can cause unsquashfs to first create the     symbolic link pointing outside the expected directory, and then the subsequent write operation will cause     the unsquashfs process to write through the symbolic link elsewhere in the filesystem. (CVE-2021-41072)

  - urllib3 is a user-friendly HTTP client library for Python. urllib3 doesn't treat the `Cookie` HTTP header     special or provide any helpers for managing cookies over HTTP, that is the responsibility of the user.
    However, it is possible for a user to specify a `Cookie` header and unknowingly leak information via HTTP     redirects to a different origin if that user doesn't disable redirects explicitly. This issue has been     patched in urllib3 version 1.26.17 or 2.0.5. (CVE-2023-43804)

  - Improper Handling of Exceptional Conditions, Uncontrolled Resource Consumption vulnerability in Apache     Tomcat. When processing an HTTP/2 stream, Tomcat did not handle some cases of excessive HTTP headers     correctly. This led to a miscounting of active HTTP/2 streams which in turn led to the use of an incorrect     infinite timeout which allowed connections to remain open which should have been closed. This issue     affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M20, from 10.1.0-M1 through 10.1.24, from 9.0.0-M1     through 9.0.89. The following versions were EOL at the time the CVE was created but are known to be     affected: 8.5.0 though 8.5.100. Users are recommended to upgrade to version 11.0.0-M21, 10.1.25 or 9.0.90,     which fixes the issue. (CVE-2024-34750)

  - A vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in     NetworkManager, triggered by sending a malformed IPv6 router advertisement packet. This issue occurred as     libndp was not correctly validating the route length information. (CVE-2024-5564)

  - Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of     service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of     Service (ReDoS) in package_index.py. (CVE-2022-40897)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-18908 advisory.

    - Addresses CVE-2021-34558
    - Include patch to fix CVE-2019-9741
    - Fixes CVE-2019-6486
    - Fixes CVE-2018-16873, CVE-2018-16874, CVE-2018-16875
    - Fix CVE-2017-15041 and CVE-2017-15042
    - Resolves: bz1357602 - CVE-2016-5386
    - Resolves: bz1324344 - CVE-2016-3959
    - resolves bz1293451, CVE-2015-8618

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0246 advisory.

    This advisory aggregates security fixes for the python-podman SRPM in CIQ LTS 8.6. It addresses 33 CVEs:
    CVE-2018-25091, CVE-2024-34155, CVE-2021-33198, CVE-2024-34156, CVE-2024-34158, and 28 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0271 advisory.

    This advisory aggregates security fixes for the udica SRPM in CIQ LTS 8.6. It addresses 33 CVEs:
    CVE-2018-25091, CVE-2024-34155, CVE-2021-33198, CVE-2024-34156, CVE-2024-34158, and 28 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0269 advisory.

    This advisory aggregates security fixes for the toolbox SRPM in CIQ LTS 8.6. It addresses 34 CVEs:
    CVE-2018-25091, CVE-2024-34155, CVE-2024-1394, CVE-2024-9676, CVE-2023-48795, and 29 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0026 advisory.

    This advisory aggregates security fixes for the crun SRPM in CIQ LTS 8.6. It addresses 33 CVEs:
    CVE-2018-25091, CVE-2024-34155, CVE-2021-33198, CVE-2024-34156, CVE-2024-34158, and 28 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0023 advisory.

    This advisory aggregates security fixes for the containers-common SRPM in CIQ LTS 8.6. It addresses 33     CVEs: CVE-2018-25091, CVE-2024-34155, CVE-2021-33198, CVE-2024-34156, CVE-2024-34158, and 28 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0021 advisory.

    This advisory aggregates security fixes for the conmon SRPM in CIQ LTS 8.6. It addresses 33 CVEs:
    CVE-2018-25091, CVE-2024-34155, CVE-2021-33198, CVE-2024-34156, CVE-2024-34158, and 28 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-2988 advisory.

  - The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an     X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS     server to cause a TLS client to panic. (CVE-2021-34558)

  - The html/template package does not apply the proper rules for handling occurrences of <script, <!--,     and </script within JS literals in <script> contexts. This may cause the template parser to improperly     consider script contexts to be terminated early, causing actions to be improperly escaped. This could be     leveraged to perform an XSS attack. (CVE-2023-39319)

  - BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and     repeatable manner. A malicious BuildKit client or frontend could craft a request that could lead to     BuildKit daemon crashing with a panic. The issue has been fixed in v0.12.5. As a workaround, avoid using     BuildKit frontends from untrusted sources. (CVE-2024-23650)

  - Extremely large RSA keys in certificate chains can cause a client/server to expend significant CPU time     verifying signatures. With fix, the size of RSA keys transmitted during handshakes is restricted to <=     8192 bits. Based on a survey of publicly trusted RSA keys, there are currently only three certificates in     circulation with keys larger than this, and all three appear to be test certificates that are not actively     deployed. It is possible there are larger keys in use in private PKIs, but we target the web PKI, so     causing breakage here in the interests of increasing the default safety of users of crypto/tls seems     reasonable. (CVE-2023-29409)

  - The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other     products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the     extension negotiation message), and a client and server may consequently end up with a connection for     which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because     the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and     mishandles use of sequence numbers. For example, there is an effective attack against SSH's use of     ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and     (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API     before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80,     AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0,     Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15,     SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH     through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang     XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd     through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and     LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3,     Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server     before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the     mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh     crate before 0.40.2 for Rust. (CVE-2023-48795)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0103 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

      CVE-2021-4235:
      A flaw was found in go-yaml. This issue occurs due to unbounded alias chasing, where a maliciously     crafted YAML file can cause the system to consume significant system resources. If parsing user input,     this may be used as a denial of service vector.
      CVE-2022-1705:
      A flaw was found in golang. The HTTP/1 client accepted invalid Transfer-Encoding headers indicating     chunked encoding. This issue could allow request smuggling, but only if combined with an intermediate     server that also improperly accepts the header as invalid.
      CVE-2022-2879:
      A flaw was found in the golang package, where Reader.Read does not set a limit on the maximum size of     file headers. After fixing, Reader.Read limits the maximum size of header blocks to 1 MiB. This flaw     allows a maliciously crafted archive to cause Read to allocate unbounded amounts of memory, potentially     causing resource exhaustion or panic.
      CVE-2022-2880:
      A flaw was found in the golang package, where requests forwarded by reverse proxy include the raw query     parameters from the inbound request, including unparseable parameters rejected by net/http. This issue     could permit query parameter smuggling when a Go proxy forwards a parameter with an unparseable value.
    After the fix, the reverse proxy sanitizes the query parameters in the forwarded query when the outbound     request's form field is set after the reverse proxy. The director function returns, indicating that the     proxy has parsed the query parameters. Proxies that do not parse query parameters continue to forward the     original query parameters unchanged.
      CVE-2022-2995:
      Incorrect handling of the supplementary groups in the CRI-O container engine might lead to sensitive     information disclosure or possible data modification if an attacker has direct access to the affected     container where supplementary groups are used to set access permissions and is able to execute a binary     code in that container.
      CVE-2022-3162:
      A flaw was found in kubernetes. Users authorized to list or watch one type of namespaced custom resource     cluster-wide can read custom resources of a different kind in the same API group they are not authorized     to read.
      CVE-2022-3172:
      A security issue was discovered in kube-apiserver that allows an aggregated API server to redirect     client traffic to any URL. This issue leads to the client performing unexpected actions and forwarding the     client's API server credentials to third parties.
      CVE-2022-3259:
      Openshift 4.9 does not use HTTP Strict Transport Security (HSTS) which may allow man-in-the-middle     (MITM) attacks.
      CVE-2022-3466:
      The version of cri-o as released for Red Hat OpenShift Container Platform 4.9.48, 4.10.31, and 4.11.6     via RHBA-2022:6316, RHBA-2022:6257, and RHBA-2022:6658, respectively, included an incorrect version of     cri-o missing the fix for CVE-2022-27652, which was previously fixed in OCP 4.9.41 and 4.10.12 via     RHBA-2022:5433 and RHSA-2022:1600. This issue could allow an attacker with access to programs with     inheritable file capabilities to elevate those capabilities to the permitted set when execve(2) runs. For     more details, see https://access.redhat.com/security/cve/CVE-2022-27652.
      CVE-2022-27664:
      A flaw was found in the golang package. In net/http in Go, attackers can cause a denial of service     because an HTTP/2 connection can hang during closing if a fatal error preempts the shutdown.
      CVE-2022-30631:
      A flaw was found in golang. Calling the Reader, Read method on an archive that contains a large number     of concatenated 0-length compressed files can cause a panic issue due to stack exhaustion.
      CVE-2022-32148:
      A flaw was found in net/http/httputil golang package. When httputil.ReverseProxy.ServeHTTP is called     with a Request.Header map containing a nil value for the X-Forwarded-For header, ReverseProxy could set     the client IP incorrectly. This issue may affect confidentiality.
      CVE-2022-32189:
      An uncontrolled resource consumption flaw was found in Golang math/big. A too-short encoded message can     cause a panic in Float.GobDecode and Rat.GobDecode in math/big in Go, potentially allowing an attacker to     create a denial of service, impacting availability.
      CVE-2022-32190:
      A flaw was found in the golang package. The JoinPath doesn't remove the ../ path components appended to     a domain that is not terminated by a slash, possibly leading to a directory traversal attack.
      CVE-2022-41715:
      A flaw was found in the golang package, where programs that compile regular expressions from untrusted     sources are vulnerable to memory exhaustion or a denial of service. The parsed regexp representation is     linear in the input size. Still, in some cases, the constant factor can be as high as 40,000, making a     relatively small regexp consume larger amounts of memory. After the fix, each regexp being parsed is     limited to a 256 MB memory footprint. Regular expressions whose representation would use more space than     that are rejected. Routine use of regular expressions is unaffected.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0146 advisory.

    This advisory aggregates security fixes for the podman SRPM in CIQ LTS 8.6. It addresses 40 CVEs:
    CVE-2021-4024, CVE-2024-24791, CVE-2024-9341, CVE-2024-3727, CVE-2024-23650, and 35 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
194919	Splunk Enterprise < 8.1.14, 8.2.0 < 8.2.11, 9.0.0 < 9.0.5 (SVD-2023-0613)	Nessus	CGI abuses	2024/5/2	2024/7/26	critical
208234	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-6.10)	Nessus	Misc.	2024/10/7	2025/9/1	high
172239	Oracle Linux 8 : ol8addon (ELSA-2023-18908)	Nessus	Oracle Linux Local Security Checks	2023/3/7	2024/11/2	high
354177	Rocky Linux 8.6 [CIQ] Security Update: python3-podman Multiple Vulnerabilities (ciqsa-2026_0246)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	medium
354182	Rocky Linux 8.6 [CIQ] Security Update: udica Multiple Vulnerabilities (ciqsa-2026_0271)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	medium
355250	Rocky Linux 8.6 [CIQ] Security Update: toolbox / toolbox-debuginfo / toolbox-debugsource / toolbox-tests Multiple Vulnerabilities (ciqsa-2026_0269)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	medium
358810	Rocky Linux 8.6 [CIQ] Security Update: crun / crun-debuginfo / crun-debugsource Multiple Vulnerabilities (ciqsa-2026_0026)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	medium
358927	Rocky Linux 8.6 [CIQ] Security Update: containers-common Multiple Vulnerabilities (ciqsa-2026_0023)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	medium
359216	Rocky Linux 8.6 [CIQ] Security Update: conmon / conmon-debuginfo / conmon-debugsource Multiple Vulnerabilities (ciqsa-2026_0021)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	medium
197998	Oracle Linux 8 : container-tools:ol8 (ELSA-2024-2988)	Nessus	Oracle Linux Local Security Checks	2024/5/28	2026/3/3	medium
239281	TencentOS Server 3: ostree (TSSA-2023:0103)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/20	high
354105	Rocky Linux 8.6 [CIQ] Security Update: podman / podman-catatonit / podman-catatonit-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0146)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/11	medium

检测

插件搜索

critical

high

high

medium

medium

medium

medium

medium

medium

medium

high

medium