The remote host is running a version of macOS / Mac OS X that is 10.15.x prior to 10.15.5, 10.13.x prior to 10.13.6 Security Update 2020-003, 10.14.x prior to 10.14.6 Security Update 2020-003. It is, therefore, affected by multiple vulnerabilities:

  - In ksh version 20120801, a flaw was found in the way it     evaluates certain environment variables. An attacker     could use this flaw to override or bypass environment     restrictions to execute shell commands. Services and     applications that allow remote unauthenticated attackers     to provide one of those environment variables could     allow them to exploit this issue remotely.
    (CVE-2019-14868)

  - In Zsh before 5.8, attackers able to execute commands     can regain privileges dropped by the --no-PRIVILEGED     option. Zsh fails to overwrite the saved uid, so the     original privileges can be restored by executing     MODULE_PATH=/dir/with/module zmodload with a module that     calls setuid(). (CVE-2019-20044)

  - An out-of-bounds read was addressed with improved input     validation. This issue is fixed in iOS 13.3.1 and iPadOS     13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS     6.1.2. Processing a maliciously crafted image may lead     to arbitrary code execution. (CVE-2020-3878)

Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and     iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5, iTunes 12.10.7 for Windows, iCloud for     Windows 11.2, iCloud for Windows 7.19. A malicious application may cause a denial of service or     potentially disclose memory contents. (CVE-2020-9794)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of Apple iOS running on the mobile device is prior to 13.5. It is, therefore, affected by multiple vulnerabilities.

ID	Name	Product	Family	Published	Updated	Severity
136930	macOS 10.15.x < 10.15.5 / 10.14.x < 10.14.6 Security Update 2020-003 / 10.13.x < 10.13.6 Security Update 2020-003	Nessus	MacOS X Local Security Checks	5/28/2020	5/28/2024	high
263089	Linux Distros Unpatched Vulnerability : CVE-2020-9794	Nessus	Misc.	9/10/2025	9/10/2025	high
136920	Apple iOS < 13.5 Multiple Vulnerabilities	Nessus	Mobile Devices	5/27/2020	7/14/2025	critical

Detections

Analytics

Plugins Search

high

high

critical