Skip to Main Navigation
Skip to Main Content
Skip to Footer

Tenable Research

CVE-2017-7391: Vulnerability in Magento Mass Import (MAGMI) Plugin Exploited in the Wild

Just as Magento 1 reaches end of life, attackers are exploiting a vulnerability in a Magento plugin from 2017. Site owners should prepare to migrate...
Read More
CVE-2020-2021: Palo Alto Networks PAN-OS Vulnerable to Critical Authentication Bypass Vulnerability

Critical authentication bypass vulnerability in PAN-OS devices could be exploited in certain configurations, which are commonly recommended by...
Read More
CVE-2020-11896, CVE-2020-11897, CVE-2020-11901: Ripple20 Zero-Day Vulnerabilities in Treck TCP/IP Libraries Disclosed

Researchers discovered 19 new zero-day vulnerabilities in a TCP/IP software library developed by Treck. Dubbed Ripple20, the batch includes CVE-2020-...
Read More
Tenable Research
Podcast
Listen Now!

Security Alerts

Cyber Exposure Alerts

July 1, 2020 - 12:00pm CVE-2017-7391: Vulnerability in Magento Mass Import (MAGMI) Plugin Exploited in the Wild

June 29, 2020 - 8:06pm CVE-2020-2021: Palo Alto Networks PAN-OS Vulnerable to Critical Authentication Bypass Vulnerability

June 16, 2020 - 9:26pm CVE-2020-11896, CVE-2020-11897, CVE-2020-11901: Ripple20 Zero-Day Vulnerabilities in Treck TCP/IP Libraries Disclosed

June 10, 2020 - 1:43pm SMBleed (CVE-2020-1206) and SMBLost (CVE-2020-1301) Vulnerabilities Affect Microsoft SMBv3 and SMBv1

June 9, 2020 - 5:24pm Microsoft’s June 2020 Patch Tuesday Addresses 129 CVEs Including Newly Disclosed SMBv3 Vulnerability (CVE-2020-1206)

June 8, 2020 - 7:24pm CVE-2020-12695: CallStranger Vulnerability in Universal Plug and Play (UPnP) Puts Billions of Devices At Risk

View All

Latest Plugins

MariaDB 10.3.0 < 10.3.23 Multiple Vulnerabilities

MariaDB 10.4.0 < 10.4.13 Multiple Vulnerabilities

MariaDB 10.2.0 < 10.2.32 Multiple Vulnerabilities

MariaDB 5.5.0 < 5.5.68 Multiple Vulnerabilities

MariaDB 10.1.0 < 10.1.45 Multiple Vulnerabilities

Apache Tomcat 9.0.0.M1 < 9.0.36 a vulnerability

View All

Research Blog

June 16, 20
Tenable Research Discloses Multiple Vulnerabilities in Plex Media Server

June 10, 20
How Organizations Can Reduce the Economic Incentives of Vulnerabilities

June 09, 20
Microsoft’s June 2020 Patch Tuesday Addresses 129 CVEs Including Newly Disclosed SMBv3 Vulnerability (CVE-2020-1206)

June 08, 20
What Is the Lifespan of a Vulnerability?

June 04, 20
A Look at What Makes a Vulnerability Survive in the Remediation Race

May 13, 20
Scams Exploit COVID-19 Giveaways Via Venmo, PayPal and Cash App

May 12, 20
Microsoft’s May 2020 Patch Tuesday Addresses 111 CVEs

May 05, 20
Instacart Patches SMS Spoofing Vulnerability Discovered by Tenable Research

View More

Webinars and Reports

Webinar: How Lucrative Are Vulnerabilities?

Webinar: Reduce Your Cyber Exposure and Protect Your Organization from Ransomware

Webinar: Tenable Research Explores Headline

Webinar: Tenable Research Explores Key Vulnerability Trends

Report: Persistent Vulnerabilities, Their Causes and the Path Forward

Report: How much do you know about the supply chain that takes a vulnerability and turns it into an exploit?

Report: The real scoop on the vulnerabilities in the news

Report: What are the top vulnerabilities found in the enterprise?

Explore Research

Research Community

Research Community

Research Blog

Research Blog

Nessus Plugins

Nessus Plugins

Learn More about Industrial Security