Detections
Analytics

Oracle WebLogic Server Java Object Deserialization RCE (Local Check)

critical Nessus Plugin ID 87209

Language:

Version 1.493

Nov 20, 2024, 5:30 PM

  • Detection (Reports vulnerable dpkg based packages as structured data.)

Plugin Feed: 202411201730

Version 1.492

Nov 18, 2024, 8:22 PM

  • Detection (Reports vulnerable rpm based packages as structured data.)

Plugin Feed: 202411182022

Version 1.490

Nov 12, 2024, 8:29 PM

  • Logic Changes (Adding installs report)

Plugin Feed: 202411122029

Version 1.488

Nov 7, 2024, 8:25 PM

  • Logic Changes

Plugin Feed: 202411072025

Version 1.487

Nov 6, 2024, 2:41 PM

  • Detection (adding support for Forescout CounterACT)

Plugin Feed: 202411061441

Version 1.486

Nov 4, 2024, 6:02 PM

  • Plugin requirements

Plugin Feed: 202411041802

Version 1.485

Oct 30, 2024, 4:21 PM

  • Detection (Process file exclusion wildcards in a consistent way across find, locate, etc.)

Plugin Feed: 202410301621

Version 1.484

Oct 29, 2024, 8:44 PM

  • Logic Changes (Extend structured reporting to vcf_extras)

Plugin Feed: 202410292044

Version 1.478

Oct 10, 2024, 11:57 PM

  • New

Plugin Feed: 202410102357

Version 1.477

Oct 10, 2024, 4:58 AM

  • Detection (Change dir to $HOME before find commands to handle weird find behavior with escalation.)

Plugin Feed: 202410100458

Version 1.476

Oct 9, 2024, 5:56 PM

  • Logic Changes (Corrects vulnerability-finding structured data tags to include the port.)

Plugin Feed: 202410091756

Version 1.472

Oct 3, 2024, 6:29 PM

  • Detection (Adding hardware constraint support to VCF and UCF)

Plugin Feed: 202410031829

Version 1.471

Oct 2, 2024, 4:10 PM

  • Logic Changes (Adds structured data reports to a subset of manual plugins.)

Plugin Feed: 202410021610

Version 1.470

Sep 26, 2024, 4:34 PM

  • Detection (adding package association overrides)

Plugin Feed: 202409261634

Version 1.469

Sep 25, 2024, 3:12 PM

  • Detection (Adding support for user-supplied timeout value for the find command.)

Plugin Feed: 202409251512

Version 1.467

Sep 23, 2024, 4:07 PM

  • Logic Changes (Consolidate all calls to "rpm -qa")

Plugin Feed: 202409231607

Version 1.465

Sep 11, 2024, 5:35 PM

  • New (Detects QUIC servers running on the target. Implement a NASL QUIC library to support detection of HTTP/3 and possibly more)

Plugin Feed: 202409111735

Version 1.464

Sep 10, 2024, 4:59 PM

  • New

Plugin Feed: 202409101659

Version 1.462

Sep 3, 2024, 11:47 PM

  • Logic Changes (additional data collection for runtime scanning. fixed logic bug causing potential false negatives. fixed logic bug causing potential false positives. fixed logic bug with potential to break cyberark logins)

Plugin Feed: 202409032347

Version 1.459

Sep 3, 2024, 5:26 PM

  • Detection (Support for Aruba CPPM SSH based local checks)

Plugin Feed: 202409031726

Version 1.457

Aug 14, 2024, 8:33 PM

  • Logic Changes (Endianness fix in Kerberos authentication for SCAP scanning)

Plugin Feed: 202408142033

Version 1.456

Aug 14, 2024, 2:40 AM

  • New
  • Plugin requirements (Trusted)

Plugin Feed: 202408140240

Version 1.454

Aug 8, 2024, 4:43 PM

  • Logic Changes (Support OpenSSH private key formats for authentication.)

Plugin Feed: 202408081643

Version 1.453

Aug 6, 2024, 4:43 PM

  • Detection (Fix to allow Nessus Agent audits to query security settings registry key default values.)

Plugin Feed: 202408061643

Version 1.449

Jul 24, 2024, 6:31 PM

  • Logic Changes (Modernize SSH usage to optimize behavior on Nessus Agents.. adding AI family)

Plugin Feed: 202407241831

Version 1.448

Jul 23, 2024, 9:24 PM

  • New

Plugin Feed: 202407232124

Version 1.445

Jul 17, 2024, 11:02 PM

  • Logic Changes

Plugin Feed: 202407172302

Version 1.444

Jul 16, 2024, 4:34 PM

  • Logic Changes (Revised plugin logging)

Plugin Feed: 202407161634

Version 1.443

Jul 6, 2024, 12:22 AM

  • Detection (Changes to support Juniper Session Smart Router)

Plugin Feed: 202407060022

Version 1.442

Jul 5, 2024, 9:04 PM

  • Detection (Adding detection of Juniper SSR devices)

Plugin Feed: 202407052104

Version 1.441

Jun 27, 2024, 9:09 PM

  • New (Deploy nessus_utils binaries on the Nessus Agent)

Plugin Feed: 202406272109

Version 1.438

Jun 21, 2024, 9:43 PM

  • New

Plugin Feed: 202406212143

Version 1.437

Jun 21, 2024, 6:31 PM

  • Detection (updated detection for SonicOS devices)

Plugin Feed: 202406211831

Version 1.436

Jun 21, 2024, 2:16 PM

  • Logic Changes

Plugin Feed: 202406211416

Version 1.434

Jun 12, 2024, 4:30 PM

  • Logic Changes (Prefer replace_kb_item in debug KBs to prevent unintentional duplication/forking)

Plugin Feed: 202406121630

Version 1.432

May 20, 2024, 10:13 AM

  • Logic Changes

Plugin Feed: 202405201013

Version 1.431

May 9, 2024, 6:10 PM

  • New

Plugin Feed: 202405091810

Version 1.430

May 7, 2024, 10:55 AM

  • Logic Changes (Streamling reporting for unpatched rpm based vuln checks.)

Plugin Feed: 202405071055

Version 1.425

Apr 16, 2024, 4:33 PM

  • Logic Changes (Structured reporting for unpatched rpm based vuln checks.)

Plugin Feed: 202404161633

Version 1.421

Mar 30, 2024, 4:20 PM

  • New

Plugin Feed: 202403301620

Version 1.420

Mar 27, 2024, 7:16 PM

  • Detection (Debian kernel vulns will now be evaluated against the running kernel version instead of the highest installed version)

Plugin Feed: 202403271916

Version 1.420

Mar 30, 2024, 1:01 AM

  • New

Plugin Feed: 202403300101

Version 1.417

Mar 19, 2024, 6:40 PM

  • Logic Changes (Improving logging to reduce disk space usage)

Plugin Feed: 202403191840

Version 1.411

Mar 5, 2024, 2:40 PM

  • Detection (improved file verification for Windows Agents)

Plugin Feed: 202403051440

Version 1.410

Mar 5, 2024, 1:15 AM

  • Logic Changes (Report structured data for Microsoft Exchange checks.. Report structured data for RPM version checks.)

Plugin Feed: 202403050115

Version 1.408

Mar 4, 2024, 5:08 PM

  • Logic Changes (Add support functions for unpatched debian/ubuntu vuln checks.)

Plugin Feed: 202403041708

Version 1.407

Feb 27, 2024, 8:49 PM

  • Logic Changes (Report structured data for DPKG version checks.)

Plugin Feed: 202402272049

Version 1.401

Feb 9, 2024, 11:22 AM

  • New

Plugin Feed: 202402091122

Version 1.400

Jan 20, 2024, 7:10 PM

  • Logic Changes (Updated parse_rpm_name() to handle package names that have no release information.)

Plugin Feed: 202401201910

Version 1.399

Jan 16, 2024, 8:55 PM

  • Logic Changes (Improving debug logging)

Plugin Feed: 202401162055

Version 1.397

Jan 16, 2024, 5:39 PM

  • Detection (Add carrier grade NAT IPs to the IPv4 private address ranges.. Support privacy mode DCOM over Kerberos)
  • Logic Changes (Improving debug logging)

Plugin Feed: 202401161739

Version 1.395

Jan 15, 2024, 9:56 AM

  • Detection (improved regex)

Plugin Feed: 202401150956

Version 1.394

Jan 8, 2024, 6:41 PM

  • Detection (retooled detection to better handle managed installs)

Plugin Feed: 202401081841

Version 1.389

Dec 11, 2023, 6:11 PM

  • Detection (Fix error handling for find_cmd. Remove bash error from the output of commands that timed out)

Plugin Feed: 202312111811

Version 1.388

Dec 6, 2023, 12:08 AM

  • Logic Changes (Fixes bug in special case shell handling logic.)

Plugin Feed: 202312060008

Version 1.387

Dec 5, 2023, 9:49 PM

  • Logic Changes (Fixes bug in special case shell handling logic.)

Plugin Feed: 202312052149

Version 1.385

Nov 28, 2023, 11:17 AM

  • Detection (Fixing detection of Cisco Firepower devices)

Plugin Feed: 202311281117

Version 1.384

Nov 27, 2023, 6:11 PM

  • Detection (No longer fall back to the legacy SSH library. Only use the old library explicitly.)

Plugin Feed: 202311271811

Version 1.383

Nov 14, 2023, 4:21 PM

  • Detection (Support SHA2 based encryption for Kerberos)

Plugin Feed: 202311141621

Version 1.383

Nov 27, 2023, 4:16 PM

  • Detection (No longer fall back to the legacy SSH library. Only use the old library explicitly.)

Plugin Feed: 202311271616

Version 1.377

Oct 30, 2023, 1:08 PM

  • Detection (Fixed detection of JUNOS)

Plugin Feed: 202310301308

Version 1.376

Oct 25, 2023, 5:17 PM

  • Detection (Handle SSH exec hang and pagination ctrl codes for PanOS)

Plugin Feed: 202310251717

Version 1.374

Oct 18, 2023, 7:26 PM

  • New

Plugin Feed: 202310181926

Version 1.367

Oct 9, 2023, 8:58 PM

  • New

Plugin Feed: 202310092058

Version 1.365

Oct 4, 2023, 11:07 PM

  • Detection (Fixed Cisco Firepower detection)

Plugin Feed: 202310042307

Version 1.364

Oct 3, 2023, 9:02 PM

  • Detection (Added Alma Linux to package association checks)

Plugin Feed: 202310032102

Version 1.363

Oct 3, 2023, 6:16 PM

  • New

Plugin Feed: 202310031816

Version 1.362

Sep 26, 2023, 8:16 PM

  • Logic Changes

Plugin Feed: 202309262016

Version 1.360

Aug 9, 2023, 11:01 PM

  • Logic Changes

Plugin Feed: 202308092301

Version 1.355

Jul 24, 2023, 7:10 PM

  • Logic Changes (added debugging)

Plugin Feed: 202307241910

Version 1.353

Jul 17, 2023, 5:15 PM

  • Logic Changes (Make torture_cgi library PCP clean and consolidate utf16_to_ascii(). Permit CIDR entries in target priority list)

Plugin Feed: 202307171715

Version 1.351

Jul 10, 2023, 7:11 PM

  • Logic Changes (Restrict ClientHello ciphersuites by encapsulation)

Plugin Feed: 202307101911

Version 1.350

Jul 5, 2023, 9:03 PM

  • Logic Changes (added ingestion and ability of target priority lists for SSH credentials)

Plugin Feed: 202307052103

Version 1.348

Jun 20, 2023, 9:07 PM

  • Logic Changes (Temporarily limit debug logging)

Plugin Feed: 202306202107

Version 1.343

Jun 9, 2023, 12:10 AM

  • Logic Changes (Fix two function returns)

Plugin Feed: 202306090010

Version 1.341

Jun 1, 2023, 5:27 AM

  • Logic Changes (Better logging)

Plugin Feed: 202306010527

Version 1.339

May 18, 2023, 1:08 AM

  • Detection (Port Alcatel-Lucent OmniSwitch support from ssh_get_info.nasl to ssh_lib as a rate limited device.)

Plugin Feed: 202305180108

Version 1.337

May 16, 2023, 7:02 PM

  • Detection (Authenticate WMI/DCOM using Kerberos credentials.)

Plugin Feed: 202305161902

Version 1.334

May 1, 2023, 9:07 PM

  • Detection (Make and use compatibility wrapper for running commands on scanner localhost to handle deprecation of pread().)

Plugin Feed: 202305012107

Version 1.331

Apr 6, 2023, 6:58 PM

  • Detection (Add Kerberos debug logging)

Plugin Feed: 202304061858

Version 1.328

Mar 8, 2023, 1:05 AM

  • Logic Changes

Plugin Feed: 202303080105

* Changelogs are generally available for changes made after Nov 1, 2022