As information about new vulnerabilities is discovered and released into the general public domain, Tenable Research designs programs to detect them. These programs are named plugins and are written in the Nessus Attack Scripting Language (NASL). The plugins contain vulnerability information, a simplified set of remediation actions and the algorithm to test for the presence of the security issue. Tenable Research has published 305692 plugins, covering 113902 CVE IDs and 30933 Bugtraq IDs.
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 505006 | Qnap QTS and QuTS hero Improper Limitation of a Pathname to a Restricted Directory (CVE-2023-51365) | Tenable OT Security | Tenable.ot | high |
| 505005 | Qnap QTS and QuTS hero Authentication Bypass by Spoofing (CVE-2025-59385) | Tenable OT Security | Tenable.ot | critical |
| 505004 | Qnap QTS and QuTS hero Improper Neutralization of Special Elements used in an SQL Command (CVE-2025-62849) | Tenable OT Security | Tenable.ot | critical |
| 505003 | Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-62848) | Tenable OT Security | Tenable.ot | high |
| 505002 | Qnap QTS and QuTS hero Improper Neutralization of Argument Delimiters in a Command (CVE-2025-62847) | Tenable OT Security | Tenable.ot | high |
| 505001 | Qnap QTS and QuTS hero Improper Neutralization of Special Elements used in an OS Command (CVE-2023-34980) | Tenable OT Security | Tenable.ot | high |
| 505000 | Qnap QTS and QuTS hero Improper Limitation of a Pathname to a Restricted Directory (CVE-2023-51364) | Tenable OT Security | Tenable.ot | high |
| 504999 | Qnap QTS and QuTS hero Uncontrolled Resource Consumption (CVE-2022-27600) | Tenable OT Security | Tenable.ot | high |
| 504998 | Qnap QTS and QuTS hero Integer Overflow or Wraparound (CVE-2024-21905) | Tenable OT Security | Tenable.ot | high |
| 504997 | Synology DiskStation Manager Out-of-bounds Write (CVE-2024-45539) | Tenable OT Security | Tenable.ot | high |
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 504956 | Rockwell Automation Allen-Bradley Stratix 5950 Improper Access Control (CVE-2019-1649) | Tenable OT Security | Tenable.ot | medium |
| 291270 | Linux Distros Unpatched Vulnerability : CVE-2025-15497 (deprecated) | Nessus | Misc. | high |
| 290977 | Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001372) | Nessus | Unity Linux Local Security Checks | high |
| 290252 | KB5074109: Windows 11 Version 24H2 / Windows 11 Version 25H2 / Windows 2025 Security Update (January 2026) | Nessus | Windows : Microsoft Bulletins | high |
| 290250 | Cisco Secure Email Gateway RCE (cisco-sa-sma-attack-N9bf4) | Nessus | CISCO | critical |
| 290141 | MiracleLinux 7 : kernel-3.10.0-514.16.1.el7 (AXSA:2017-1648:04) | Nessus | Miracle Linux Local Security Checks | high |
| 290130 | MiracleLinux 7 : openslp-2.0.0-8.el7 (AXSA:2019-4405:01) | Nessus | Miracle Linux Local Security Checks | critical |
| 290129 | MiracleLinux 4 : kernel-2.6.32-696.10.2.el6 (AXSA:2017-2297:06) | Nessus | Miracle Linux Local Security Checks | high |
| 290113 | MiracleLinux 4 : java-1.7.0-openjdk-1.7.0.9-2.3.4.1.AXS4 (AXSA:2013-76:01) | Nessus | Miracle Linux Local Security Checks | critical |
| 290103 | MiracleLinux 4 : kernel-2.6.32-696.18.7.el6 (AXSA:2018-2508:01) | Nessus | Miracle Linux Local Security Checks | medium |