As information about new vulnerabilities is discovered and released into the general public domain, Tenable Research designs programs to detect them. These programs are named plugins and are written in the Nessus Attack Scripting Language (NASL). The plugins contain vulnerability information, a simplified set of remediation actions and the algorithm to test for the presence of the security issue. Tenable Research has published 337441 plugins, covering 124180 CVE IDs and 30933 Bugtraq IDs.
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 505525 | Tridium Niagara Use of GET Request Method With Sensitive Query Strings (CVE-2025-3943) | Tenable OT Security | Tenable.ot | medium |
| 505524 | Tridium Niagara Incorrect Permission Assignment for Critical Resource (CVE-2025-3944) | Tenable OT Security | Tenable.ot | high |
| 505523 | Tridium Niagara Improper Encoding or Escaping of Output (CVE-2025-3942) | Tenable OT Security | Tenable.ot | medium |
| 505522 | Tridium Niagara Use of Incorrectly-Resolved Name or Reference (CVE-2025-3941) | Tenable OT Security | Tenable.ot | medium |
| 505521 | Tridium Niagara Use of a Broken or Risky Cryptographic Algorithm (CVE-2025-3938) | Tenable OT Security | Tenable.ot | medium |
| 505520 | Tridium Niagara Use of Password Hash With Insufficient Computational Effort (CVE-2025-3937) | Tenable OT Security | Tenable.ot | high |
| 505519 | Tridium Niagara Observable Discrepancy (CVE-2025-3939) | Tenable OT Security | Tenable.ot | medium |
| 505518 | Tridium Niagara Incorrect Permission Assignment for Critical Resource (CVE-2025-3936) | Tenable OT Security | Tenable.ot | medium |
| 505517 | Tridium Niagara Argument Injection (CVE-2025-3945) | Tenable OT Security | Tenable.ot | high |
| 505516 | Tridium Niagara Improper Use of Validation Framework (CVE-2025-3940) | Tenable OT Security | Tenable.ot | medium |
| 322832 | Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : web.py vulnerability (USN-8443-1) | Nessus | Ubuntu Local Security Checks | medium |
| 322831 | Oracle Linux 9 : python-urllib3 (ELSA-2026-28158) | Nessus | Oracle Linux Local Security Checks | high |
| 322830 | Oracle Linux 9 : libpng15 (ELSA-2026-28244) | Nessus | Oracle Linux Local Security Checks | high |
| 322829 | Fedora 43 : goose (2026-08bb036c3e) | Nessus | Fedora Local Security Checks | high |
| 322828 | Debian dsa-6364 : chromium - security update | Nessus | Debian Local Security Checks | critical |
| 322827 | AlmaLinux 8 : nginx:1.24 (ALSA-2026:28921) | Nessus | Alma Linux Local Security Checks | critical |
| 322826 | AlmaLinux 8 : tigervnc (ALSA-2026:28923) | Nessus | Alma Linux Local Security Checks | high |
| 322825 | AlmaLinux 8 : libreoffice (ALSA-2026:28922) | Nessus | Alma Linux Local Security Checks | medium |
| 322824 | AlmaLinux 9 : tomcat (ALSA-2026:26323) | Nessus | Alma Linux Local Security Checks | high |
| 322823 | AlmaLinux 8 : evince (ALSA-2026:28998) | Nessus | Alma Linux Local Security Checks | high |
| 322822 | AlmaLinux 9 : python-urllib3 (ALSA-2026:28158) | Nessus | Alma Linux Local Security Checks | high |
| 322821 | AlmaLinux 8 : postgresql:12 (ALSA-2026:28999) | Nessus | Alma Linux Local Security Checks | high |
| 322820 | AlmaLinux 9 : libxslt (ALSA-2026:28243) | Nessus | Alma Linux Local Security Checks | medium |
| 322819 | AlmaLinux 9 : nginx (ALSA-2026:28973) | Nessus | Alma Linux Local Security Checks | critical |
| 322818 | FreeBSD : go-git -- DoS vulnerability (6a472f75-6fdc-11f1-bc26-8447094a420f) | Nessus | FreeBSD Local Security Checks | high |
| 322817 | Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.3.1.12) | Nessus | Misc. | critical |
| 322816 | RHEL 8 : libxslt (RHSA-2026:29975) | Nessus | Red Hat Local Security Checks | medium |
| 322815 | RHEL 10 : golang (RHSA-2026:29980) | Nessus | Red Hat Local Security Checks | medium |
| 322814 | RHEL 9 : thunderbird (RHSA-2026:29940) | Nessus | Red Hat Local Security Checks | critical |
| 322813 | Oracle Linux 9 : memcached (ELSA-2026-27862) | Nessus | Oracle Linux Local Security Checks | high |
| 322812 | Oracle Linux 9 : xorg-x11-server (ELSA-2026-26610) | Nessus | Oracle Linux Local Security Checks | high |
| 322811 | Oracle Linux 9 : 389-ds-base (ELSA-2026-26455) | Nessus | Oracle Linux Local Security Checks | high |
| 322810 | Oracle Linux 9 : giflib (ELSA-2026-19367) | Nessus | Oracle Linux Local Security Checks | medium |
| 322809 | Oracle Linux 9 : vim (ELSA-2026-28209) | Nessus | Oracle Linux Local Security Checks | medium |
| 322808 | Oracle Linux 9 : skopeo (ELSA-2026-28074) | Nessus | Oracle Linux Local Security Checks | high |
| 322807 | Oracle Linux 9 : hplip (ELSA-2026-26297) | Nessus | Oracle Linux Local Security Checks | critical |
| 322806 | Oracle Linux 9 : tomcat (ELSA-2026-26323) | Nessus | Oracle Linux Local Security Checks | high |
| 322805 | Oracle Linux 9 : postgresql-jdbc (ELSA-2026-22304) | Nessus | Oracle Linux Local Security Checks | high |
| 322804 | Oracle Linux 9 : podman (ELSA-2026-26447) | Nessus | Oracle Linux Local Security Checks | high |
| 322803 | Oracle Linux 9 : xorg-x11-server-Xwayland (ELSA-2026-26590) | Nessus | Oracle Linux Local Security Checks | high |
| 322802 | Oracle Linux 9 : rsync (ELSA-2026-26410) | Nessus | Oracle Linux Local Security Checks | high |
| 322801 | Oracle Linux 9 : python3.12-urllib3 (ELSA-2026-28159) | Nessus | Oracle Linux Local Security Checks | high |
| 322800 | Oracle Linux 9 : firefox (ELSA-2026-27734) | Nessus | Oracle Linux Local Security Checks | critical |
| 322799 | Oracle Linux 9 : evince (ELSA-2026-27819) | Nessus | Oracle Linux Local Security Checks | high |
| 322798 | Cline Installed (macOS) | Nessus | Artificial Intelligence | info |
| 322797 | Oracle WebCenter Portal (June 2026 CSPU) | Nessus | Misc. | critical |
| 322796 | Oracle Siebel Server <= 26.5 (June 2026 CSPU) | Nessus | Misc. | critical |
| 322795 | ImageMagick < 6.9.13-40 / 7.x < 7.1.2-15 Multiple Vulnerabilities | Nessus | Misc. | medium |
| 322794 | Dell Wyse Management Suite < 2605 Multiple Vulnerabilities (DSA-2026-247) | Nessus | Windows | high |
| 322793 | Node.js 22.x < 22.23.0 / 24.x < 24.17.0 / 26.x < 26.3.1 Multiple Vulnerabilities (Thursday, June 18, 2026 Security Releases). | Nessus | Misc. | critical |
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 99671 | Apache Struts Detection for Linux / UNIX | Nessus | Misc. | info |
| 99171 | Microsoft Azure Instance Metadata Enumeration (Unix) | Nessus | General | info |
| 97862 | YARA File Scan (Linux) | Nessus | Backdoors | critical |
| 96534 | Firefox Browser Extension Enumeration | Nessus | Windows | info |
| 95923 | EMC Avamar ADS / AVE Installed (credentialed check) | Nessus | Misc. | info |
| 95259 | Fortinet FortiClient Detection (macOS) | Nessus | MacOS X Local Security Checks | info |
| 93561 | Docker Service Detection | Nessus | Service detection | info |
| 93522 | VMware Tools Detection (Mac OS X) | Nessus | MacOS X Local Security Checks | info |
| 93346 | Symantec Protection Engine Detection | Nessus | Misc. | info |
| 91231 | 7-Zip Installed | Nessus | Windows | info |
| 90679 | Oracle WebLogic Server Multiple Vulnerabilities (April 2016 CPU) | Nessus | Misc. | critical |
| 88087 | Oracle WebLogic Portal Detection | Nessus | Misc. | info |
| 88086 | Oracle WebLogic Portal Apache Commons File Upload (January 2016 CPU) | Nessus | Misc. | high |
| 87989 | McAfee Agent Detection (Linux/MacOS) | Nessus | Misc. | info |
| 87414 | Host Tagging (Linux) | Nessus | Settings | info |
| 87209 | Oracle WebLogic Server Java Object Deserialization RCE (Local Check) | Nessus | Misc. | critical |
| 86913 | Cisco Mobility Services Engine Detection | Nessus | Databases | info |
| 86575 | Oracle Enterprise Manager Agent Installation Detection (credentialed check) | Nessus | Misc. | info |
| 86383 | Microsoft Office Installed (Mac OS X) | Nessus | MacOS X Local Security Checks | info |
| 86325 | IBM Tivoli Storage FlashCopy Manager Installed (Linux) | Nessus | Misc. | info |
| 84916 | Oracle WebCenter Portal Multiple Vulnerabilities (July 2015 CPU) | Nessus | Misc. | medium |
| 84823 | Oracle WebLogic Server Multiple Vulnerabilities (July 2015 CPU) | Nessus | Misc. | medium |
| 84584 | VideoLAN VLC for OS X Web Plugin Installed (Mac OS X) | Nessus | MacOS X Local Security Checks | info |
| 83991 | List Installed Mac OS X Software | Nessus | MacOS X Local Security Checks | info |
| 82849 | ArcSight Enterprise Security Management (ESM) Installed | Nessus | Misc. | info |
| 82822 | Oracle WebLogic Server Multiple Vulnerabilities (April 2015 CPU) (POODLE) | Nessus | Misc. | medium |
| 82709 | VMware vCenter Operations Manager Installed (Linux) | Nessus | Misc. | info |
| 81883 | Opera Installed (Mac OS X) | Nessus | MacOS X Local Security Checks | info |
| 81048 | Oracle Forms and Reports Multiple Unspecified Vulnerabilities (January 2015 CPU) | Nessus | Misc. | medium |
| 80963 | IBM Storwize Detection | Nessus | Misc. | info |
| 80909 | Oracle WebLogic Server Multiple Vulnerabilities (January 2015 CPU) | Nessus | Misc. | high |
| 78672 | WinZip Installed (Mac OS X) | Nessus | MacOS X Local Security Checks | info |
| 78541 | Oracle WebLogic Server Multiple Vulnerabilities (October 2014 CPU) | Nessus | Misc. | high |
| 77421 | Oracle Access Manager Unspecified Vulnerability (credentialed check, April 2014 CPU) | Nessus | Windows | medium |
| 77405 | Symantec Encryption Desktop Installed (MacOS X) | Nessus | MacOS X Local Security Checks | info |
| 77276 | Tenable Log Correlation Engine (LCE) Unix / Linux Client Installed (credentialed check) | Nessus | Misc. | info |
| 76963 | VMware Horizon View Client Detection (Mac OS X) | Nessus | MacOS X Local Security Checks | info |
| 76787 | F-Secure Key Detection (Mac OS X) | Nessus | MacOS X Local Security Checks | info |
| 76527 | Oracle WebLogic Server Multiple Vulnerabilities (July 2014 CPU) | Nessus | Misc. | high |
| 76189 | Countertack Sentinel Detection | Nessus | Misc. | info |
| 74466 | Oracle Siebel CRM Server Detection | Nessus | Windows | info |
| 74151 | Oracle Event Processing CVE-2014-2424 Unspecified Vulnerability (April 2014 CPU) | Nessus | Misc. | medium |
| 74150 | Oracle Event Processing Installation Detection (credentialed check) | Nessus | Misc. | info |
| 74042 | Oracle WebLogic Server Multiple Vulnerabilities (April 2013 CPU) | Nessus | CGI abuses | medium |
| 73914 | Oracle WebLogic Server Security Subcomponent Unspecified Vulnerability (April 2014 CPU) | Nessus | Misc. | medium |
| 73913 | Oracle WebLogic Server Detection | Nessus | Misc. | info |
| 73852 | McAfee VirusScan Enterprise for Linux Detection | Nessus | Misc. | info |
| 73825 | Oracle Data Quality and Profiling Client Detection | Nessus | Windows | info |
| 73597 | Oracle WebCenter Portal People Connection Subcomponent Unspecified Information Disclosure (April 2014 CPU) | Nessus | Misc. | medium |
| 72776 | Oracle WebCenter Sites Local Installation Detection | Nessus | Windows | info |