リモートホストにインストールされている AOS のバージョンは、5.10.9 より前です。したがって、NXSA-AOS-5.10.9 のアドバイザリに記載されている複数の脆弱性の影響を受けます。

  - Gnome Pango 1.42 以降は、次の影響を受けます。バッファオーバーフロー。影響は次のとおりです。ヒープベースのバッファオーバーフローを使用して、コードが実行される可能性があります。コンポーネントは次のとおりです。関数名：pango_log2vis_get_embedding_levels、ncharsの割り当て、およびループ条件。攻撃手法: アプリケーションが無効な utf-8 文字列を pango_itemize などの関数に渡すとき、バグが使用される可能性があります。(CVE-2019-1010238)

  - バージョン 7.61.1 より前の curl は、NTLM 認証コードにバッファオーバーランの脆弱性があります。内部関数 Curl_ntlm_core_mk_nt_hash は、パスワードの長さに 2 を掛けて (SUM)、ヒープから割り当てる一時ストレージエリアの大きさを計算します。その後、その長さの値を使用してパスワードが繰り返し処理され、割り当てられたストレージバッファに出力が生成されます。32ビットのsize_tを持つシステムでは、パスワードの長さが2GB(2の31乗バイト)を超えるとき、SUMを計算するための計算で整数オーバーフローがトリガーされます。通常、この整数オーバーフローでは、意図された非常に大きなバッファの代わりに非常に小さなバッファが実際に割り当てられ、そのバッファが使用されるとヒープバッファオーバーフローが発生します。(このバグは CVE-2017-8816 とほぼ同じものです。) (CVE-2018-14618)

  - libX11 から 1.6.5 までの ListExt.c の XListExtensions に問題が発見されました。悪意のあるサーバーが、最初の文字列がオーバーフローする返信を送信する可能性がありました。これにより、後で解放される変数が NULL に設定され、DoS (セグメンテーション違反) が発生します。(CVE-2018-14598)

  - 1.6.5 までの libX11 に問題が見つかりました。ListExt.c の XListExtensions 関数は、悪意のあるサーバーの応答に起因する off-by-one エラーに対して脆弱であり、DoS または詳細不明なその他の影響が発生する可能性があります。(CVE-2018-14599)

  - 1.6.5 までの libX11 に問題が見つかりました。ListExt.c の XListExtensions 関数が変数を符号なしではなく符号付きとして解釈するため、境界外書き込み (最大 128 バイト) が発生し、サービス拒否またはリモートコード実行が発生する可能性があります。(CVE-2018-14600)

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

The version of MariaDB installed on the remote host is prior to 10.1.35. It is, therefore, affected by multiple vulnerabilities as referenced in the mariadb-10135-release-notes advisory.

  - Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions     that are affected are 5.6.40 and prior, 5.7.22 and prior and 8.0.11 and prior. Easily exploitable     vulnerability allows low privileged attacker with network access via multiple protocols to compromise     MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang     or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or     delete access to some of MySQL Server accessible data. (CVE-2018-3064)

  - Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: MyISAM). Supported versions     that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Easily exploitable     vulnerability allows low privileged attacker with network access via multiple protocols to compromise     MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete     access to some of MySQL Server accessible data. (CVE-2018-3058)

  - Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges).
    Supported versions that are affected are 5.5.60 and prior. Easily exploitable vulnerability allows high     privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful     attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable     crash (complete DOS) of MySQL Server. (CVE-2018-3063)

  - Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options). Supported     versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Difficult to     exploit vulnerability allows high privileged attacker with network access via multiple protocols to     compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update,     insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a     subset of MySQL Server accessible data. (CVE-2018-3066)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of MariaDB installed on the remote host is prior to 5.5.61. It is, therefore, affected by multiple vulnerabilities as referenced in the mariadb-5561-release-notes advisory.

  - Vulnerability in the MySQL Client component of Oracle MySQL (subcomponent: Client programs). Supported     versions that are affected are 5.5.60 and prior, 5.6.40 and prior, 5.7.22 and prior and 8.0.11 and prior.
    Difficult to exploit vulnerability allows high privileged attacker with network access via multiple     protocols to compromise MySQL Client. Successful attacks of this vulnerability can result in unauthorized     ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Client as well as     unauthorized update, insert or delete access to some of MySQL Client accessible data. (CVE-2018-3081)

  - Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: MyISAM). Supported versions     that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Easily exploitable     vulnerability allows low privileged attacker with network access via multiple protocols to compromise     MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete     access to some of MySQL Server accessible data. (CVE-2018-3058)

  - Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges).
    Supported versions that are affected are 5.5.60 and prior. Easily exploitable vulnerability allows high     privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful     attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable     crash (complete DOS) of MySQL Server. (CVE-2018-3063)

  - Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options). Supported     versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Difficult to     exploit vulnerability allows high privileged attacker with network access via multiple protocols to     compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update,     insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a     subset of MySQL Server accessible data. (CVE-2018-3066)

  - Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are     affected are 5.6.48 and prior, 5.7.30 and prior and 8.0.20 and prior. Difficult to exploit vulnerability     allows low privileged attacker with network access via multiple protocols to compromise MySQL Client.
    Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently     repeatable crash (complete DOS) of MySQL Client. (CVE-2020-14550)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Several issues have been discovered in the MariaDB database server.
The vulnerabilities are addressed by upgrading MariaDB to the new upstream version 10.0.36. Please see the MariaDB 10.0 Release Notes for further details :

https://mariadb.com/kb/en/mariadb/mariadb-10036-release-notes/

CVE-2018-3058

Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.
Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data.

CVE-2018-3063

Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.
Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

CVE-2018-3064

Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.
Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data.

CVE-2018-3066

Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.
Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data.

For Debian 8 'Jessie', these problems have been fixed in version 10.0.36-0+deb8u1.

We recommend that you upgrade your mariadb-10.0 packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges).
    Supported versions that are affected are 5.5.60 and prior. Easily exploitable vulnerability allows high     privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful     attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable     crash (complete DOS) of MySQL Server. (CVE-2018-3063)

Note that Nessus relies on the presence of the package as reported by the vendor.

This update for mariadb fixes the following issues :

Update to MariaDB 10.0.37 GA (bsc#1116686).

Security issues fixed :

CVE-2018-3282: Server Storage Engines unspecified vulnerability (CPU Oct 2018) (bsc#1112432)

CVE-2018-3251: InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112397)

CVE-2018-3174: Client programs unspecified vulnerability (CPU Oct 2018) (bsc#1112368)

CVE-2018-3156: InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112417)

CVE-2018-3143: InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112421)

CVE-2018-3066: Unspecified vulnerability in the MySQL Server component of Oracle MySQL (subcomponent Server Options). (bsc#1101678)

CVE-2018-3064: InnoDB unspecified vulnerability (CPU Jul 2018) (bsc#1103342)

CVE-2018-3063: Unspecified vulnerability in the MySQL Server component of Oracle MySQL (subcomponent Server Security Privileges).
(bsc#1101677)

CVE-2018-3058: Unspecified vulnerability in the MySQL Server component of Oracle MySQL (subcomponent MyISAM). (bsc#1101676)

CVE-2016-9843: Big-endian out-of-bounds pointer (bsc#1013882)

Non-security changes: Remove PerconaFT from the package as it has AGPL licence (bsc#1118754)

do not just remove tokudb plugin but don't build it at all (missing jemalloc dependency)

Release notes and changelog:
https://kb.askmonty.org/en/mariadb-10037-release-notes

https://kb.askmonty.org/en/mariadb-10037-changelog

https://kb.askmonty.org/en/mariadb-10036-release-notes

https://kb.askmonty.org/en/mariadb-10036-changelog

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2327 advisory.

    MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.

    The following packages have been upgraded to a later upstream version: mariadb (5.5.64). (BZ#1610986,     BZ#1664043)

    Security Fix(es):

    * mysql: MyISAM unspecified vulnerability (CPU Jul 2018) (CVE-2018-3058)

    * mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2018) (CVE-2018-3063)

    * mysql: Client programs unspecified vulnerability (CPU Jul 2018) (CVE-2018-3081)

    * mysql: Server: Storage Engines unspecified vulnerability (CPU Oct 2018) (CVE-2018-3282)

    * mysql: Server: Connection Handling unspecified vulnerability (CPU Jan 2019) (CVE-2019-2503)

    * mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2019) (CVE-2019-2529)

    * mysql: Server: Replication unspecified vulnerability (CPU Apr 2019) (CVE-2019-2614)

    * mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019) (CVE-2019-2627)

    * mysql: Server: Options unspecified vulnerability (CPU Jul 2018) (CVE-2018-3066)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.7 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Security Fix(es) :

  - mysql: MyISAM unspecified vulnerability (CPU Jul 2018)     (CVE-2018-3058)

  - mysql: Server: Security: Privileges unspecified     vulnerability (CPU Jul 2018) (CVE-2018-3063)

  - mysql: Client programs unspecified vulnerability (CPU     Jul 2018) (CVE-2018-3081)

  - mysql: Server: Storage Engines unspecified vulnerability     (CPU Oct 2018) (CVE-2018-3282)

  - mysql: Server: Connection Handling unspecified     vulnerability (CPU Jan 2019) (CVE-2019-2503)

  - mysql: Server: Optimizer unspecified vulnerability (CPU     Jan 2019) (CVE-2019-2529)

  - mysql: Server: Replication unspecified vulnerability     (CPU Apr 2019) (CVE-2019-2614)

  - mysql: Server: Security: Privileges unspecified     vulnerability (CPU Apr 2019) (CVE-2019-2627)

  - mysql: Server: Options unspecified vulnerability (CPU     Jul 2018) (CVE-2018-3066)

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Connection Handling). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Difficult to exploit vulnerability allows low privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.4 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H). (CVE-2019-2503 )

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: MyISAM). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector:
(CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N). (CVE-2018-3058 )

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Storage Engines). Supported versions that are affected are 5.5.61 and prior, 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector:
(CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). (CVE-2018-3282)

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.43 and prior, 5.7.25 and prior and 8.0.15 and prior.
Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.
Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).
(CVE-2019-2614)

Vulnerability in the MySQL Client component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior, 5.7.22 and prior and 8.0.11 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Client as well as unauthorized update, insert or delete access to some of MySQL Client accessible data. CVSS 3.0 Base Score 5.0 (Integrity and Availability impacts). CVSS Vector:
(CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H). (CVE-2018-3081)

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.60 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector:
(CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). (CVE-2018-3063)

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior.
Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.
Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
(CVE-2019-2529)

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.6.43 and prior, 5.7.25 and prior and 8.0.15 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
(CVE-2019-2627)

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 3.3 (Confidentiality and Integrity impacts). CVSS Vector:
(CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N). (CVE-2018-3066)

The version of AOS installed on the remote host is prior to 5.16. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-5.16 advisory.

  - Gnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer overflow     can be used to get code execution. The component is: function name: pango_log2vis_get_embedding_levels,     assignment of nchars and the loop condition. The attack vector is: Bug can be used when application pass     invalid utf-8 strings to functions like pango_itemize. (CVE-2019-1010238)

  - curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal     function Curl_ntlm_core_mk_nt_hash multiplies the length of the password by two (SUM) to figure out how     large temporary storage area to allocate from the heap. The length value is then subsequently used to     iterate over the password and generate output into the allocated storage buffer. On systems with a 32 bit     size_t, the math to calculate SUM triggers an integer overflow when the password length exceeds 2GB (2^31     bytes). This integer overflow usually causes a very small buffer to actually get allocated instead of the     intended very huge one, making the use of that buffer end up in a heap buffer overflow. (This bug is     almost identical to CVE-2017-8816.) (CVE-2018-14618)

  - An issue was discovered in XListExtensions in ListExt.c in libX11 through 1.6.5. A malicious server can     send a reply in which the first string overflows, causing a variable to be set to NULL that will be freed     later on, leading to DoS (segmentation fault). (CVE-2018-14598)

  - An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c is vulnerable     to an off-by-one error caused by malicious server responses, leading to DoS or possibly unspecified other     impact. (CVE-2018-14599)

  - An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c interprets a     variable as signed instead of unsigned, resulting in an out-of-bounds write (of up to 128 bytes), leading     to DoS or remote code execution. (CVE-2018-14600)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Oracle reports :

Multiple vulnerabilities have been disclosed by Oracle without further detail. CVSS scores 7.1 - 2.7

The version of MySQL running on the remote host is 5.5.x prior to 5.5.61. It is, therefore, affected by multiple vulnerabilities as noted in the July 2018 Critical Patch Update advisory. Please consult the CVRF details for the applicable CVEs for additional information.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
164581	Nutanix AOS : 複数の脆弱性 (NXSA-AOS-5.10.9)	Nessus	Misc.	2022/9/1	2025/7/22	critical
125732	MariaDB 10.1.0 < 10.1.35 Multiple Vulnerabilities	Nessus	Databases	2019/6/5	2025/7/17	high
167884	MariaDB 5.5.0 < 5.5.61 Multiple Vulnerabilities	Nessus	Databases	2022/11/18	2025/7/17	medium
112227	Debian DLA-1488-1 : mariadb-10.0 security update	Nessus	Debian Local Security Checks	2018/9/4	2024/8/13	high
221859	Linux Distros Unpatched Vulnerability : CVE-2018-3063	Nessus	Misc.	2025/3/4	2025/8/18	medium
119869	SUSE SLED12 / SLES12 Security Update : mariadb (SUSE-SU-2018:4211-1)	Nessus	SuSE Local Security Checks	2018/12/24	2024/7/12	critical
127712	RHEL 7 : mariadb (RHSA-2019:2327)	Nessus	Red Hat Local Security Checks	2019/8/12	2024/11/6	medium
128240	Scientific Linux Security Update : mariadb on SL7.x x86_64 (20190806)	Nessus	Scientific Linux Local Security Checks	2019/8/27	2024/5/1	medium
129071	Amazon Linux 2 : mariadb (ALAS-2019-1292)	Nessus	Amazon Linux Local Security Checks	2019/9/20	2024/4/24	medium
164573	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.16)	Nessus	Misc.	2022/9/1	2025/7/22	critical
111596	FreeBSD : MySQL -- multiple vulnerabilities (909be51b-9b3b-11e8-add2-b499baebfeaf)	Nessus	FreeBSD Local Security Checks	2018/8/9	2024/8/23	high
700616	MySQL 5.5.x < 5.5.61 Multiple Vulnerabilities (July 2018 CPU)	Nessus Network Monitor	Database	2019/4/25	2019/4/25	high

検出

プラグインの検索

critical

high

medium

high

medium

critical

medium

medium

medium

critical

high

high