远程主机受到 GLSA-202508-01 中所述漏洞的影响PAM多个漏洞

    在 PAM 中发现了多种漏洞。请检查下方引用的 CVE 标识符以了解详细信息。

Tenable 已直接从 Gentoo Linux 安全公告中提取上述描述块。

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:10232 advisory.

    Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need     to recompile programs to handle authentication.

    Security Fix(es):

    * pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass (CVE-2024-10963)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:10244 advisory.

    Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need     to recompile programs to handle authentication.

    Security Fix(es):

    * pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass (CVE-2024-10963)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the pam-1.5.1-23.el9 build changelog.

  - A flaw was found in pam_access, where certain rules in its configuration file are mistakenly treated as     hostnames. This vulnerability allows attackers to trick the system by pretending to be a trusted hostname,     gaining unauthorized access. This issue poses a risk for systems that rely on this feature to control who     can access certain services or terminals. (CVE-2024-10963)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AHV installed on the remote host is prior to 20230302.102005. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-20230302.101060 advisory.

  - In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option>     elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods     (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
    (CVE-2020-11023)

  - A flaw was found in rsync. When using the `--safe-links` option, the rsync client fails to properly verify     if a symbolic link destination sent from the server contains another symbolic link within it. This results     in a path traversal vulnerability, which may lead to arbitrary file write outside the desired directory.
    (CVE-2024-12088)

  - A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside     the unbound group to modify the unbound runtime configuration. If a process can connect over localhost to     port 8953, it can alter the configuration of unbound.service. This flaw allows an unprivileged attacker to     manipulate a running instance, potentially altering forwarders, allowing them to track all queries     forwarded by the local resolver, and, in some cases, disrupting resolving altogether. (CVE-2024-1488)

  - NLnet Labs Unbound up to and including version 1.21.0 contains a vulnerability when handling replies with     very large RRsets that it needs to perform name compression for. Malicious upstreams responses with very     large RRsets can cause Unbound to spend a considerable time applying name compression to downstream     replies. This can lead to degraded performance and eventually denial of service in well orchestrated     attacks. The vulnerability can be exploited by a malicious actor querying Unbound for the specially     crafted contents of a malicious zone with very large RRsets. Before Unbound replies to the query it will     try to apply name compression which was an unbounded operation that could lock the CPU until the whole     packet was complete. Unbound version 1.21.1 introduces a hard limit on the number of name compression     calculations it is willing to do per packet. Packets that need more compression will result in semi-     compressed packets or truncated packets, even on TCP for huge messages, to avoid locking the CPU for long.
    This change should not affect normal DNS traffic. (CVE-2024-8508)

  - A path traversal vulnerability exists in rsync. It stems from behavior enabled by the `--inc-recursive`     option, a default-enabled option for many client options and can be enabled by the server even if not     explicitly enabled by the client. When using the `--inc-recursive` option, a lack of proper symlink     verification coupled with deduplication checks occurring on a per-file-list basis could allow a server to     write files outside of the client's intended destination directory. A malicious server could write     malicious files to arbitrary locations named after valid directories/paths on the client. (CVE-2024-12087)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AHV installed on the remote host is prior to 20230302.102005. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-20230302.103032 advisory.

  - In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option>     elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods     (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
    (CVE-2020-11023)

  - A flaw was found in rsync. When using the `--safe-links` option, the rsync client fails to properly verify     if a symbolic link destination sent from the server contains another symbolic link within it. This results     in a path traversal vulnerability, which may lead to arbitrary file write outside the desired directory.
    (CVE-2024-12088)

  - A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside     the unbound group to modify the unbound runtime configuration. If a process can connect over localhost to     port 8953, it can alter the configuration of unbound.service. This flaw allows an unprivileged attacker to     manipulate a running instance, potentially altering forwarders, allowing them to track all queries     forwarded by the local resolver, and, in some cases, disrupting resolving altogether. (CVE-2024-1488)

  - NLnet Labs Unbound up to and including version 1.21.0 contains a vulnerability when handling replies with     very large RRsets that it needs to perform name compression for. Malicious upstreams responses with very     large RRsets can cause Unbound to spend a considerable time applying name compression to downstream     replies. This can lead to degraded performance and eventually denial of service in well orchestrated     attacks. The vulnerability can be exploited by a malicious actor querying Unbound for the specially     crafted contents of a malicious zone with very large RRsets. Before Unbound replies to the query it will     try to apply name compression which was an unbounded operation that could lock the CPU until the whole     packet was complete. Unbound version 1.21.1 introduces a hard limit on the number of name compression     calculations it is willing to do per packet. Packets that need more compression will result in semi-     compressed packets or truncated packets, even on TCP for huge messages, to avoid locking the CPU for long.
    This change should not affect normal DNS traffic. (CVE-2024-8508)

  - A path traversal vulnerability exists in rsync. It stems from behavior enabled by the `--inc-recursive`     option, a default-enabled option for many client options and can be enabled by the server even if not     explicitly enabled by the client. When using the `--inc-recursive` option, a lack of proper symlink     verification coupled with deduplication checks occurring on a per-file-list basis could allow a server to     write files outside of the client's intended destination directory. A malicious server could write     malicious files to arbitrary locations named after valid directories/paths on the client. (CVE-2024-12087)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202508-01 (PAM: Multiple Vulnerabilities)

    Multiple vulnerabilities have been discovered in PAM. Please review the CVE identifiers referenced below     for details.

Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AOS installed on the remote host is prior to 6.10.1.5. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-6.10.1.5 advisory.

  - virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual     environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as     CVE-2024-9287. (CVE-2024-53899)

  - DHCP can add routes to a client's routing table via the classless static route option (121). VPN-based     security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical     interface. An attacker on the same local network can read, disrupt, or possibly modify network traffic     that was expected to be protected by the VPN. (CVE-2024-3661)

  - A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can     trigger the victim program to execute by sending characters to its standard input (stdin). As this occurs,     the attacker can train the branch predictor to execute an ROP chain speculatively. This flaw could result     in leaked passwords, such as those found in /etc/shadow while performing authentications. (CVE-2024-10041)

  - A flaw was found in pam_access, where certain rules in its configuration file are mistakenly treated as     hostnames. This vulnerability allows attackers to trick the system by pretending to be a trusted hostname,     gaining unauthorized access. This issue poses a risk for systems that rely on this feature to control who     can access certain services or terminals. (CVE-2024-10963)

  - A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an     attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and     uninitialized memory and leak one byte of uninitialized stack data at a time. (CVE-2024-12085)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the pam package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A flaw was found in pam_access, where certain rules in its configuration file are mistakenly treated as     hostnames. This vulnerability allows attackers to trick the system by pretending to be a trusted hostname,     gaining unauthorized access. This issue poses a risk for systems that rely on this feature to control who     can access certain services or terminals.(CVE-2024-10963)

    A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can     trigger the victim program to execute by sending characters to its standard input (stdin). As this occurs,     the attacker can train the branch predictor to execute an ROP chain speculatively. This flaw could result     in leaked passwords, such as those found in /etc/shadow while performing authentications.(CVE-2024-10041)

Tenable has extracted the preceding description block directly from the EulerOS pam security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2024:0264 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2024-10041:
    A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can     trigger the victim program to execute by sending characters to its standard input (stdin). As this occurs,     the attacker can train the branch predictor to execute an ROP chain speculatively. This flaw could result     in leaked passwords, such as those found in /etc/shadow while performing authentications.

    CVE-2024-10963:
    A flaw was found in pam_access, where certain rules in its configuration file are mistakenly treated as     hostnames. This vulnerability allows attackers to trick the system by pretending to be a trusted hostname,     gaining unauthorized access. This issue poses a risk for systems that rely on this feature to control who     can access certain services or terminals.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 7.02, has pam packages installed that are affected by multiple vulnerabilities:

  - A flaw was found in pam_access, where certain rules in its configuration file are mistakenly treated as     hostnames. This vulnerability allows attackers to trick the system by pretending to be a trusted hostname,     gaining unauthorized access. This issue poses a risk for systems that rely on this feature to control who     can access certain services or terminals. (CVE-2024-10963)

  - A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can     trigger the victim program to execute by sending characters to its standard input (stdin). As this occurs,     the attacker can train the branch predictor to execute an ROP chain speculatively. This flaw could result     in leaked passwords, such as those found in /etc/shadow while performing authentications. (CVE-2024-10041)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 7.02, has pam packages installed that are affected by multiple vulnerabilities:

  - linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login     process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY. (CVE-2024-22365)

  - A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can     trigger the victim program to execute by sending characters to its standard input (stdin). As this occurs,     the attacker can train the branch predictor to execute an ROP chain speculatively. This flaw could result     in leaked passwords, such as those found in /etc/shadow while performing authentications. (CVE-2024-10041)

  - A flaw was found in pam_access, where certain rules in its configuration file are mistakenly treated as     hostnames. This vulnerability allows attackers to trick the system by pretending to be a trusted hostname,     gaining unauthorized access. This issue poses a risk for systems that rely on this feature to control who     can access certain services or terminals. (CVE-2024-10963)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:10379 advisory.

    * pam: libpam: Libpam vulnerable to read hashed password (CVE-2024-10041)

    * pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass (CVE-2024-10963)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in pam_access, where certain rules in its configuration file are mistakenly treated as     hostnames. This vulnerability allows attackers to trick the system by pretending to be a trusted hostname,     gaining unauthorized access. This issue poses a risk for systems that rely on this feature to control who     can access certain services or terminals. (CVE-2024-10963)

Note that Nessus relies on the presence of the package as reported by the vendor.

遠端 Redhat Enterprise Linux 9 主機上安裝的多個套件受到 RHSA-2024:10244 公告中提及的一個弱點影響。

    插入式驗證模組 (PAM) 提供一個系統，使用者無需重新編譯用於處理驗證之程式，便可設定驗證原則。

    安全性修正：

    * pam：pam_access 中的不當主機名稱解譯導致存取控制繞過 (CVE-2024-10963)

    如需安全性問題的詳細資料，包括影響、CVSS 分數、致謝及其他相關資訊，請參閱〈參照〉一節列出的 CVE 頁面。

Tenable 已直接從 Red Hat Enterprise Linux 安全公告擷取前置描述區塊。

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端 Redhat Enterprise Linux 9 主機上安裝的多個套件受到 RHSA-2024:10232 公告中提及的一個弱點影響。

    插入式驗證模組 (PAM) 提供一個系統，使用者無需重新編譯用於處理驗證之程式，便可設定驗證原則。

    安全性修正：

    * pam：pam_access 中的不當主機名稱解譯導致存取控制繞過 (CVE-2024-10963)

    如需安全性問題的詳細資料，包括影響、CVSS 分數、致謝及其他相關資訊，請參閱〈參照〉一節列出的 CVE 頁面。

Tenable 已直接從 Red Hat Enterprise Linux 安全公告擷取前置描述區塊。

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端主機上安裝的 AHV 低於 20230302.102005 版。因此會受到 NXSA-AHV-20230302.101060 公告中提及的多個弱點影響。

  - 在 jQuery 1.0.3 或之後版本以及 3.5.0 之前版本中，將包含非受信任來源之 <option> 元素的 HTML (即使是在清理後) 傳送至 jQuery 的其中一個 DOM 操控方法 (即.html()、.append() 等)，可能會執行未受信任的程式碼。此問題已在 jQuery (3.5.0) 中得到修補。
    (CVE-2020-11023)

  - 在 rsync 中發現一個瑕疵。使用 `--safe-links` 選項時rsync 用戶端無法正確驗證從伺服器傳送的符號連結目的地中是否含有另一個符號連結。這會導致一個路徑遊走弱點其可導致所需目錄之外的任意檔案寫入。
    (CVE-2024-12088)

  - 在 Unbound 中發現一個弱點，這是由於預設權限不正確所致，可允許 unbound 群組之外的任何處理程序修改 unbound 執行階段設定。如果處理程序可透過 localhost 連線至連接埠 8953，則可變更 unbound.service 的設定。無權限的攻擊者可利用此缺陷操控執行中的執行個體，進而可能變更轉送工具，追踪本機解析器轉送的所有查詢，且在某些情況下，甚至會一起中斷解析。(CVE-2024-1488)

  - NLnet Labs Unbound 1.21.0 版及其之前的版本在處理含有非常大的 RRset (需要執行名稱壓縮) 的回覆時含有一個弱點。具有非常大 RRset 的惡意上游回應可導致 Unbound 花費大量時間，將名稱壓縮套用至下游回覆。這可導致效能降低，並最終在精心策劃的攻擊中造成拒絕服務。惡意執行者可利用此弱點，向 Unbound 查詢具有極大 RRset 之惡意區域的特製內容。在 Unbound 回覆查詢之前，它會嘗試套用名稱壓縮。名稱壓縮是一種會鎖定 CPU 的無限製作業，直到完成整個封包為止。Unbound 版本 1.21.1 對其願意針對每個封包執行的名稱壓縮計算次數引入了硬性限制。需要進一步壓縮的封包將導致封包半壓縮或截斷，即使對於大型訊息的 TCP 也是如此，以避免長時間鎖定 CPU。
    此變更不應影響正常的 DNS 流量。(CVE-2024-8508)

  - rsync 中包含路徑遊走弱點。此問題源於「--inc-recursive」選項啟用的行為，這是許多用戶端選項預設啟用的行為，並且即使用戶端未明確啟用，也可由伺服器啟用。使用「--inc-recursive」選項時，如果缺少適當的符號連結驗證，再加上針對每個檔案清單進行的重複資料刪除檢查，伺服器即可在用戶端的預定目的地目錄之外寫入檔案。惡意伺服器可將惡意檔案寫入以用戶端上有效目錄/路徑命名的任意位置。(CVE-2024-12087)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端主機上安裝的 AHV 低於 20230302.102005 版。因此會受到 NXSA-AHV-20230302.103032 公告中提及的多個弱點影響。

  - 在 jQuery 1.0.3 或之後版本以及 3.5.0 之前版本中，將包含非受信任來源之 <option> 元素的 HTML (即使是在清理後) 傳送至 jQuery 的其中一個 DOM 操控方法 (即.html()、.append() 等)，可能會執行未受信任的程式碼。此問題已在 jQuery (3.5.0) 中得到修補。
    (CVE-2020-11023)

  - 在 rsync 中發現一個瑕疵。使用 `--safe-links` 選項時rsync 用戶端無法正確驗證從伺服器傳送的符號連結目的地中是否含有另一個符號連結。這會導致一個路徑遊走弱點其可導致所需目錄之外的任意檔案寫入。
    (CVE-2024-12088)

  - 在 Unbound 中發現一個弱點，這是由於預設權限不正確所致，可允許 unbound 群組之外的任何處理程序修改 unbound 執行階段設定。如果處理程序可透過 localhost 連線至連接埠 8953，則可變更 unbound.service 的設定。無權限的攻擊者可利用此缺陷操控執行中的執行個體，進而可能變更轉送工具，追踪本機解析器轉送的所有查詢，且在某些情況下，甚至會一起中斷解析。(CVE-2024-1488)

  - NLnet Labs Unbound 1.21.0 版及其之前的版本在處理含有非常大的 RRset (需要執行名稱壓縮) 的回覆時含有一個弱點。具有非常大 RRset 的惡意上游回應可導致 Unbound 花費大量時間，將名稱壓縮套用至下游回覆。這可導致效能降低，並最終在精心策劃的攻擊中造成拒絕服務。惡意執行者可利用此弱點，向 Unbound 查詢具有極大 RRset 之惡意區域的特製內容。在 Unbound 回覆查詢之前，它會嘗試套用名稱壓縮。名稱壓縮是一種會鎖定 CPU 的無限製作業，直到完成整個封包為止。Unbound 版本 1.21.1 對其願意針對每個封包執行的名稱壓縮計算次數引入了硬性限制。需要進一步壓縮的封包將導致封包半壓縮或截斷，即使對於大型訊息的 TCP 也是如此，以避免長時間鎖定 CPU。
    此變更不應影響正常的 DNS 流量。(CVE-2024-8508)

  - rsync 中包含路徑遊走弱點。此問題源於「--inc-recursive」選項啟用的行為，這是許多用戶端選項預設啟用的行為，並且即使用戶端未明確啟用，也可由伺服器啟用。使用「--inc-recursive」選項時，如果缺少適當的符號連結驗證，再加上針對每個檔案清單進行的重複資料刪除檢查，伺服器即可在用戶端的預定目的地目錄之外寫入檔案。惡意伺服器可將惡意檔案寫入以用戶端上有效目錄/路徑命名的任意位置。(CVE-2024-12087)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端主機受到 GLSA-202508-01 中所述的弱點影響 (PAM多個弱點)

    在 PAM 中發現多個弱點。如需詳細資訊，請檢閱下方提及的 CVE 識別碼。

Tenable 已直接從 Gentoo Linux 安全公告擷取前置描述區塊。

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
243975	GLSA-202508-01 :PAM多种漏洞	Nessus	Gentoo Local Security Checks	2025/8/6	2025/8/6	high
211910	RHEL 9 : pam (RHSA-2024:10232)	Nessus	Red Hat Local Security Checks	2024/11/27	2024/11/27	high
211836	RHEL 9 : pam:1.5.1 (RHSA-2024:10244)	Nessus	Red Hat Local Security Checks	2024/11/26	2025/4/8	high
211828	CentOS 9 : pam-1.5.1-23.el9	Nessus	CentOS Local Security Checks	2024/11/25	2024/11/25	high
240976	Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20230302.101060)	Nessus	Misc.	2025/6/30	2025/7/1	high
241665	Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20230302.103032)	Nessus	Misc.	2025/7/9	2025/7/10	high
243975	GLSA-202508-01 : PAM: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	2025/8/6	2025/8/6	high
233564	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-6.10.1.5)	Nessus	Misc.	2025/3/31	2025/3/31	low
216013	EulerOS 2.0 SP12 : pam (EulerOS-SA-2025-1178)	Nessus	Huawei Local Security Checks	2025/2/10	2025/2/10	high
216017	EulerOS 2.0 SP12 : pam (EulerOS-SA-2025-1194)	Nessus	Huawei Local Security Checks	2025/2/10	2025/2/10	high
235987	Alibaba Cloud Linux 3 : 0264: pam (ALINUX3-SA-2024:0264)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	high
237997	NewStart CGSL MAIN 7.02 : pam Multiple Vulnerabilities (NS-SA-2025-0083)	Nessus	NewStart CGSL Local Security Checks	2025/6/9	2025/6/18	high
242731	NewStart CGSL MAIN 7.02 : pam Multiple Vulnerabilities (NS-SA-2025-0191)	Nessus	NewStart CGSL Local Security Checks	2025/7/25	2025/7/25	medium
213213	RockyLinux 8 : pam (RLSA-2024:10379)	Nessus	Rocky Linux Local Security Checks	2024/12/19	2024/12/19	high
251593	Linux Distros Unpatched Vulnerability : CVE-2024-10963	Nessus	Misc.	2025/8/18	2025/8/18	high
211836	RHEL 9：pam:1.5.1 (RHSA-2024:10244)	Nessus	Red Hat Local Security Checks	2024/11/26	2025/4/8	high
211910	RHEL 9：pam (RHSA-2024:10232)	Nessus	Red Hat Local Security Checks	2024/11/27	2024/11/27	high
240976	Nutanix AHV多個弱點 (NXSA-AHV-20230302.101060)	Nessus	Misc.	2025/6/30	2025/7/1	high
241665	Nutanix AHV多個弱點 (NXSA-AHV-20230302.103032)	Nessus	Misc.	2025/7/9	2025/7/10	high
243975	GLSA-202508-01 PAM多個弱點	Nessus	Gentoo Local Security Checks	2025/8/6	2025/8/6	high

检测

插件搜索

high

high

high

high

high

high

high

low

high

high

high

high

medium

high

high

high

high

high

high

high