Securitycenter

This hub aggregates every CVE we track for Securitycenter, a product in the security products space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 10 most recently published vulnerabilities affecting Securitycenter.

• CVE-2023-2005Tenable Plugin Feed ID #202306261202 Fixes Privilege Escalation Vulnerability6.3Jun 26, 2023
• CVE-2019-11049mail() may release string with refcount==1 twice6.5Dec 23, 2019
• CVE-2019-11050Use-after-free in exif parsing under memory sanitizer4.8Dec 23, 2019
• CVE-2019-11046Buffer underflow in bc_shift_addsub3.7Dec 23, 2019
• CVE-2019-11045DirectoryIterator class silently truncates after a null byte3.7Dec 23, 2019
• CVE-2019-11044link() silently truncates after a null byte on Windows3.7Dec 23, 2019
• CVE-2018-1155In SecurityCenter versions prior to 5.7.0, a cross-site scripting (XSS) issue could allow an authenticated attacker to inject JavaScript code into an image filename parameter within the Reports fea...5.4Aug 2, 2018
• CVE-2018-1154In SecurityCenter versions prior to 5.7.0, a username enumeration issue could allow an unauthenticated attacker to automate the discovery of username aliases via brute force, ultimately facilitatin...8.8Aug 2, 2018
• CVE-2017-11508SecurityCenter versions 5.5.0, 5.5.1 and 5.5.2 contain a SQL Injection vulnerability that could be exploited by an authenticated user with sufficient privileges to run diagnostic scans. An attacker...8.8Nov 2, 2017
• CVE-2013-5911Cross-site scripting (XSS) vulnerability in devform.php in Tenable SecurityCenter 4.6 through 4.7 allows remote attackers to inject arbitrary web script or HTML via the message parameter.4.3Sep 24, 2013