According to the versions of the expat package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity     expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat     can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could     lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the     environment and library usage.(CVE-2024-8176)

Tenable has extracted the preceding description block directly from the EulerOS expat security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:3913 advisory.

    * libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat (CVE-2024-8176)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity     expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat     can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could     lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the     environment and library usage. (CVE-2024-8176)

Note that Nessus relies on the presence of the package as reported by the vendor.

According to its self-reported version, the Nessus Network Monitor running on the remote host is prior to 6.5.1. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2025-10 advisory.

  - In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a     heap-based buffer under-read. To exploit this, a crafted XML document must be validated against an XML     schema with certain identity constraints, or a crafted XML schema must be used. (CVE-2025-32415)

  - When installing Tenable Network Monitor to a non-default location on a Windows host, Tenable Network     Monitor versions prior to 6.5.1 did not enforce secure permissions for sub-directories. This could allow     for local privilege escalation if users had not secured the directories in the non-default installation     location. (CVE-2025-24916)

  - In Tenable Network Monitor versions prior to 6.5.1 on a Windows host, it was found that a     non-administrative user could stage files in a local directory to run arbitrary code with SYSTEM     privileges, potentially leading to local privilege escalation. (CVE-2025-24917)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Apple iOS running on the mobile device is prior to 18.5. It is, therefore, affected by multiple vulnerabilities.

The versions of HTTP Server installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2025 CPU advisory.

  - In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-     based buffer under-read. To exploit this, a crafted XML document must be validated against an XML schema     with certain identity constraints, or a crafted XML schema must be used. (CVE-2025-32415)

  - Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where     Oracle HTTP Server executes to compromise Oracle HTTP Server. While the vulnerability is in Oracle HTTP     Server, attacks may significantly impact additional products (scope change). Successful attacks of this     vulnerability can result in unauthorized creation, deletion or modification access to critical data or     all Oracle HTTP Server accessible data as well as unauthorized access to critical data or complete access     to all Oracle HTTP Server accessible data. (CVE-2024-56171)

  - Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise     Oracle HTTP Server. Successful attacks of this vulnerability can result in unauthorized update, insert or     delete access to some of Oracle HTTP Server accessible data as well as unauthorized read access to a subset     of Oracle HTTP Server accessible data and unauthorized ability to cause a partial denial of service (partial     DOS) of Oracle HTTP Server. (CVE-2025-0725)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is running a version of macOS / Mac OS X that is 14.x prior to 14.7.6. It is, therefore, affected by multiple vulnerabilities:

  - A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle     attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how     OpenSSH mishandles error codes in specific conditions when verifying the host key. For an attack to be     considered successful, the attacker needs to manage to exhaust the client's memory resource first, turning     the attack complexity high. (CVE-2025-26465)

  - A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity     expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat     can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could     lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the     environment and library usage. (CVE-2024-8176)

  - A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is     allocated in a memory buffer and stored in a queue of packages. It is only freed when the server/client     key exchange has finished. A malicious client may keep sending such packages, leading to an uncontrolled     increase in memory consumption on the server side. Consequently, the server may become unavailable,     resulting in a denial of service attack. (CVE-2025-26466)

Note that Nessus has not tested for these issues but has instead relied only on the operating system's self-reported version number.

The version of AHV installed on the remote host is prior to AHV-10.0.1.2. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-10.0.1.2 advisory.

  - inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging     improper pointer arithmetic. (CVE-2016-9840)

  - xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result     prefixes. (CVE-2024-55549)

  - numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath     context node can be modified but never restored. This is related to xsltNumberFormatGetValue,     xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal. (CVE-2025-24855)

  - An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not     vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font     files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value     causing it to wrap around and allocate too small of a heap buffer. The code then writes up to 6 signed     long integers out of bounds relative to this buffer. This may result in arbitrary code execution. This     vulnerability may have been exploited in the wild. (CVE-2025-27363)

  - A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity     expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat     can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could     lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the     environment and library usage. (CVE-2024-8176)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
240998	EulerOS 2.0 SP13 : expat (EulerOS-SA-2025-1686)	Nessus	Huawei Local Security Checks	6/30/2025	6/30/2025	high
241020	EulerOS 2.0 SP13 : expat (EulerOS-SA-2025-1701)	Nessus	Huawei Local Security Checks	6/30/2025	6/30/2025	high
243131	RockyLinux 8 : expat (RLSA-2025:3913)	Nessus	Rocky Linux Local Security Checks	7/30/2025	7/30/2025	high
243875	Linux Distros Unpatched Vulnerability : CVE-2024-8176	Nessus	Misc.	8/5/2025	10/14/2025	high
237289	Nessus Network Monitor < 6.5.1 Multiple Vulnerabilities (TNS-2025-10)	Nessus	Misc.	5/27/2025	5/30/2025	high
235719	Apple iOS < 18.5 Multiple Vulnerabilities (122404)	Nessus	Mobile Devices	5/12/2025	10/16/2025	critical
242271	Oracle HTTP Server (July 2025 CPU)	Nessus	Web Servers	7/17/2025	7/18/2025	high
235717	macOS 14.x < 14.7.6 Multiple Vulnerabilities (122717)	Nessus	MacOS X Local Security Checks	5/12/2025	5/16/2025	medium
253664	Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-10.0.1.2)	Nessus	Misc.	8/22/2025	8/22/2025	high

Detections

Analytics

Plugins Search

high

high

high

high

high

critical

high

medium

high