According to its self-reported version, the Nessus Network Monitor running on the remote host is prior to 6.5.4. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2026-14 advisory.

  - An integer overflow can be triggered in SQLite's `concat_ws()` function. The resulting, truncated integer     is then used to allocate a buffer. When SQLite then writes the resulting string to the buffer, it uses the     original, untruncated size and thus a wild Heap Buffer overflow of size ~4GB can be triggered. This can     result in arbitrary code execution. (CVE-2025-3277)

  - When using `CURLOPT_PINNEDPUBLICKEY` option with libcurl or `--pinnedpubkey` with the curl tool,curl     should check the public key of the server certificate to verify the peer. This check was skipped in a     certain condition that would then make curl allow the connection without performing the proper check, thus     not noticing a possible impostor. To skip this check, the connection had to be done with QUIC with ngtcp2     built to use GnuTLS and the user had to explicitly disable the standard certificate verification.
    (CVE-2025-13034)

  - When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl, changing TLS options in one thread     would inadvertently change them globally and therefore possibly also affect other concurrently setup     transfers. Disabling certificate verification for a specific transfer could unintentionally disable the     feature for other threads as well. (CVE-2025-14017)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1456-1 advisory.

    - CVE-2025-29087,CVE-2025-3277: Fixed integer overflow in sqlite concat function (bsc#1241020)
    - CVE-2025-29088: Fixed integer overflow through the SQLITE_DBCONFIG_LOOKASIDE component (bsc#1241078)

    Other fixes:

    - Updated to version 3.49.1 from Factory (jsc#SLE-16032)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01455-1 advisory.

    - CVE-2025-3277,CVE-2025-29087: Fixed integer overflow in sqlite concat function (bsc#1241020)
    - CVE-2025-29088: Fixed integer overflow through the SQLITE_DBCONFIG_LOOKASIDE component (bsc#1241078)

    Other fixes:

    - Updated to version 3.49.1 from Factory (jsc#SLE-16032)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the sqlite package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    In SQLite 3.49.0 before 3.49.1, certain argument values to sqlite3_db_config (in the C-language API) can     cause a denial of service (application crash). An sz*nBig multiplication is not cast to a 64-bit integer,     and consequently some memory allocations may be incorrect.(CVE-2025-29088)

Tenable has extracted the preceding description block directly from the EulerOS sqlite security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 6989312e-8366-11f0-9bc6-b42e991fc52e advisory.

    cve@mitre.org reports:
    In SQLite 3.49.0 before 3.49.1, certain argument values               to sqlite3_db_config (in the C-language API) can cause a               denial of service (application crash). An sz*nBig               multiplication is not cast to a 64-bit integer, and               consequently some memory allocations may be incorrect.

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01456-2 advisory.

    - CVE-2025-29087,CVE-2025-3277: Fixed integer overflow in sqlite concat function (bsc#1241020)
    - CVE-2025-29088: Fixed integer overflow through the SQLITE_DBCONFIG_LOOKASIDE component (bsc#1241078)

    Other fixes:

    - Updated to version 3.49.1 from Factory (jsc#SLE-16032)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0288 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2025-29088:
    An issue in sqlite v.3.49.0 allows an attacker to cause a denial of service via the     SQLITE_DBCONFIG_LOOKASIDE component

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1455-1 advisory.

    - CVE-2025-3277,CVE-2025-29087: Fixed integer overflow in sqlite concat function (bsc#1241020)
    - CVE-2025-29088: Fixed integer overflow through the SQLITE_DBCONFIG_LOOKASIDE component (bsc#1241078)

    Other fixes:

    - Updated to version 3.49.1 from Factory (jsc#SLE-16032)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-976 advisory.

    An issue in sqlite v.3.49.0 allows an attacker to cause a denial of service via the     SQLITE_DBCONFIG_LOOKASIDE component (CVE-2025-29088)

    A process isolation vulnerability in Firefox stemmed from improper handling of javascript: URIs, which     could allow content to execute in the top-level document's process instead of the intended frame,     potentially enabling a sandbox escape. This vulnerability affects Firefox < 138, Firefox ESR < 128.10,     Firefox ESR < 115.23, Thunderbird < 138, and Thunderbird ESR < 128.10. (CVE-2025-4083)

    A vulnerability was identified in Thunderbird where XPath parsing could trigger undefined behavior due to     missing null checks during attribute access. This could lead to out-of-bounds read access and potentially,     memory corruption. This vulnerability affects Firefox < 138, Firefox ESR < 128.10, Thunderbird < 138, and     Thunderbird < 128.10. (CVE-2025-4087)

    Memory safety bugs present in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9. Some     of these bugs showed evidence of memory corruption and we presume that with enough effort some of these     could have been exploited to run arbitrary code. This vulnerability affects Firefox < 138, Firefox ESR <     128.10, Thunderbird < 138, and Thunderbird < 128.10. (CVE-2025-4091)

    Memory safety bug present in Firefox ESR 128.9, and Thunderbird 128.9. This bug showed evidence of memory     corruption and we presume that with enough effort this could have been exploited to run arbitrary code.
    This vulnerability affects Firefox ESR < 128.10 and Thunderbird < 128.10. (CVE-2025-4093)

    Integer Overflow vulnerability in SQLite SQLite3 v.3.50.0 allows a remote attacker to cause a denial of     service via the setupLookaside function (CVE-2025-52099)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7679-1 advisory.

    It was discovered that SQLite incorrectly handled aggregate terms. An attacker could use this issue to     cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code.
    (CVE-2025-6965)

    It was discovered that SQLite incorrectly handled certain argument values to sqlite3_db_config(). An     attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly     execute arbitrary code. This update fixes the issue in Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu     18.04 LTS. This issue was previously fixed in Ubuntu 20.04 LTS via USN-7528-1. (CVE-2025-29088)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the sqlite package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    In SQLite 3.49.0 before 3.49.1, certain argument values to sqlite3_db_config (in the C-language API) can     cause a denial of service (application crash). An sz*nBig multiplication is not cast to a 64-bit integer,     and consequently some memory allocations may be incorrect.(CVE-2025-29088)

    There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could     exceed the number of columns available. This could lead to a memory corruption issue. We recommend     upgrading to version 3.50.2 or above.(CVE-2025-6965)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization sqlite security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
314931	Nessus Network Monitor < 6.5.4 Multiple Vulnerabilities (TNS-2026-14)	Nessus	Misc.	2026/5/15	2026/5/15	medium
235652	SUSE SLED15: libsqlite3-0 / libsqlite3-0-32bit / sqlite3 / sqlite3-devel / etc (SUSE-SU-2025:1456-1)	Nessus	SuSE Local Security Checks	2025/5/9	2026/6/25	medium
240904	SUSE SLES12: libsqlite3-0 / libsqlite3-0-32bit / sqlite3 / sqlite3-devel / etc (SUSE-SU-2025:01455-1)	Nessus	SuSE Local Security Checks	2025/6/28	2026/6/26	medium
249183	EulerOS 2.0 SP11 : sqlite (EulerOS-SA-2025-1943)	Nessus	Huawei Local Security Checks	2025/8/13	2025/8/13	high
258087	FreeBSD : SQLite -- application crash (6989312e-8366-11f0-9bc6-b42e991fc52e)	Nessus	FreeBSD Local Security Checks	2025/8/28	2025/8/28	medium
274952	EulerOS 2.0 SP12 : sqlite (EulerOS-SA-2025-2372)	Nessus	Huawei Local Security Checks	2025/11/12	2025/11/12	medium
240892	SUSE SLES15 Security Update : sqlite3 (SUSE-SU-2025:01456-2)	Nessus	SuSE Local Security Checks	2025/6/28	2026/1/21	medium
276151	TencentOS Server 4: sqlite (TSSA-2025:0288)	Nessus	Tencent Local Security Checks	2025/11/20	2025/11/20	medium
235650	SUSE SLES12: libsqlite3-0 / libsqlite3-0-32bit / sqlite3 / sqlite3-devel / etc (SUSE-SU-2025:1455-1)	Nessus	SuSE Local Security Checks	2025/5/9	2026/6/25	medium
237666	Amazon Linux 2023 : firefox (ALAS2023-2025-976)	Nessus	Amazon Linux Local Security Checks	2025/6/2	2025/12/9	medium
243224	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS : SQLite vulnerabilities (USN-7679-1)	Nessus	Ubuntu Local Security Checks	2025/7/31	2026/1/21	high
281634	EulerOS Virtualization 2.10.1 : sqlite (EulerOS-SA-2026-1006)	Nessus	Huawei Local Security Checks	2026/1/3	2026/1/3	high
302546	EulerOS Virtualization 2.12.1 : sqlite (EulerOS-SA-2026-1463)	Nessus	Huawei Local Security Checks	2026/3/16	2026/4/14	high
302632	EulerOS Virtualization 2.12.0 : sqlite (EulerOS-SA-2026-1520)	Nessus	Huawei Local Security Checks	2026/3/16	2026/4/14	high

检测

插件搜索

medium

medium

medium

high

medium

medium

medium

medium

medium

medium

high

high

high

high