The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - systemd before 247 does not adequately block local privilege escalation for some Sudo configurations,     e.g., plausible sudoers files in which the systemctl status command may be executed. Specifically,     systemd does not set LESSSECURE to 1, and thus other programs may be launched from the less program. This     presents a substantial security risk when running systemctl from Sudo, because less executes as root when     the terminal size is too small to show the complete systemctl output. (CVE-2023-26604)

Note that Nessus relies on the presence of the package as reported by the vendor.

遠端 Redhat Enterprise Linux 7 主機上安裝的多個套件受到 RHSA-2024:7705 公告中提及的一個弱點影響。

    systemd 套件含有與 SysV 和 LSB init 指令碼相容的 systemd，是適用於 Linux 的系統與服管理員。其提供主動的平行處理功能、利用封包和 D-Bus 啟用功能來啟動服務、提供程序隨需啟動並可利用 Linux cgroups 追蹤處理程序。
    此外，其還支援系統狀態快照建立與還原、維持裝載與自動裝載點，並實施精密的交易式相依型服務控制邏輯。它也可作為 sysvinit 的直接替換元件。

    安全性修正：

    * systemd：可透過 less 分頁器觸發特權提升 (CVE-2023-26604)

    如需安全性問題的詳細資料，包括影響、CVSS 分數、致謝及其他相關資訊，請參閱〈參照〉一節列出的 CVE 頁面。

Tenable 已直接從 Red Hat Enterprise Linux 安全公告擷取前置描述區塊。

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端主機上安裝的 AHV 低於 20230302.102005 版。因此，它受到 NXSA-AHV-20230302.1011 公告中所提及的多個弱點影響。

  - 在 (1) SSH Tectia Client and Server 與 Connector 4.0 到 4.4.11、5.0 到 5.2.4，以及 5.3 到 5.3.8；Client and Server 與 ConnectSecure 6.0 到 6.0.4；IBM System z 6.0.4 上的 Server for Linux；Server for IBM z/OS 5.5.1 和之前版本、6.0.0 和 6.0.1；與 Client 4.0-J 到 4.3.3-J 和 4.0-K 到 4.3.10-K；以及 (2) OpenSSH 4.7p1 和可能其他版本中，於 Cipher Block Chaining (CBC) 模式下使用區塊加密演算法時，對 SSH 通訊協定的錯誤處理會使遠端攻擊者更容易透過未知的向量，從 SSH 工作階段中加密文字的任意區塊復原某些純文字資料。(CVE-2008-5161)

  - 在 9.3p2 版之前的 OpenSSH 中，ssh-agent 的 PKCS#11 功能的可信任搜尋路徑不足，如果代理程式被轉送到攻擊者控制的系統，會導致遠端程式碼執行。(將 /usr/lib 中的程式碼載入 ssh-agent 不一定安全。) 注意：此問題之所以存在，是因為 CVE-2016-10009 的修正不完整。(CVE-2023-38408)

  - 在重新設定金鑰期間使用演算法導致 libssh 中出現 NULL 指標解除參照。此問題可能允許經驗證的用戶端造成拒絕服務。(CVE-2023-1667)

  - 在 libssh 中發現一個弱點，可以在記憶體配置問題的 `pki_verify_data_signature` 函式中繞過連線用戶端的驗證檢查。如果記憶體不足或記憶體使用量有限，可能會發生此問題。此問題是由傳回值 `rc,` 所造成，該值初始化為 SSH_ERROR，之後又重新寫入以儲存函式呼叫 `pki_key_check_hash_compatible` 的傳回值。在此點和密碼編譯驗證之間，變數的值並未變更。因此，它們之間的任何錯誤都會呼叫 `goto error` 並傳回 SSH_OK。
    (CVE-2023-2283)

  - 設定作為遞回解析器執行的每個`named`執行個體，都會維護一個快取資料庫，其中包含最近傳送至授權伺服器的查詢回應。快取資料庫的大小限制可使用設定檔中的 max-cache-size 陳述式進行設定；它預設為主機上可用記憶體總量的 90%。當快取大小達到設定限制的 7/8 時，快取清理演算法將開始從快取中移除過期和/或最近不常用的 RRset，以使記憶體使用量保持在設定的限制之下。據發現，以特定順序查詢特定 RRset 的解析器可嚴重降低 `named` 中所用快取清理演算法的有效性，進而有效地允許顯著超出設定的 max-cache-size 限制。此問題會影響 BIND 9 9.11.0 至 9.16.41、9.18.0 至 9.18.15、9.19.0 至 9.19.13、9.11.3-S1 至 9.16.41-S1 和 9.18.11-S1 至 9.18.15-S1。
    (CVE-2023-2828)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2023:0108 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2023-26604:
    systemd before 247 does not adequately block local privilege escalation for some Sudo configurations,     e.g., plausible sudoers files in which the systemctl status command may be executed. Specifically,     systemd does not set LESSSECURE to 1, and thus other programs may be launched from the less program. This     presents a substantial security risk when running systemctl from Sudo, because less executes as root when     the terminal size is too small to show the complete systemctl output.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:7705 advisory.

    The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and     LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for     starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups.
    In addition, it supports snapshotting and restoring of the system state, maintains mount and automount     points, and implements an elaborate transactional dependency-based service control logic. It can also work     as a drop-in replacement for sysvinit.

    Security Fix(es):

    * systemd: privilege escalation via the less pager (CVE-2023-26604)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-7705 advisory.

    [219-78.0.17]
    - Backport secure pager invocation for CVE-2023-26604 [Orabug: 37139943]

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AHV installed on the remote host is prior to 20230302.102005. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-20230302.1011 advisory.

  - Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through 4.4.11,     5.0 through 5.2.4, and 5.3 through 5.3.8; Client and Server and ConnectSecure 6.0 through 6.0.4; Server     for Linux on IBM System z 6.0.4; Server for IBM z/OS 5.5.1 and earlier, 6.0.0, and 6.0.1; and Client 4.0-J     through 4.3.3-J and 4.0-K through 4.3.10-K; and (2) OpenSSH 4.7p1 and possibly other versions, when using     a block cipher algorithm in Cipher Block Chaining (CBC) mode, makes it easier for remote attackers to     recover certain plaintext data from an arbitrary block of ciphertext in an SSH session via unknown     vectors. (CVE-2008-5161)

  - The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path,     leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in     /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an     incomplete fix for CVE-2016-10009. (CVE-2023-38408)

  - A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may     allow an authenticated client to cause a denial of service. (CVE-2023-1667)

  - A vulnerability was found in libssh, where the authentication check of the connecting client can be     bypassed in the`pki_verify_data_signature` function in memory allocation problems. This issue may happen     if there is insufficient memory or the memory usage is limited. The problem is caused by the return value     `rc,` which is initialized to SSH_ERROR and later rewritten to save the return value of the function call     `pki_key_check_hash_compatible.` The value of the variable is not changed between this point and the     cryptographic verification. Therefore any error between them calls `goto error` returning SSH_OK.
    (CVE-2023-2283)

  - Every `named` instance configured to run as a recursive resolver maintains a cache database holding the     responses to the queries it has recently sent to authoritative servers. The size limit for that cache     database can be configured using the `max-cache-size` statement in the configuration file; it defaults to     90% of the total amount of memory available on the host. When the size of the cache reaches 7/8 of the     configured limit, a cache-cleaning algorithm starts to remove expired and/or least-recently used RRsets     from the cache, to keep memory use below the configured limit. It has been discovered that the     effectiveness of the cache-cleaning algorithm used in `named` can be severely diminished by querying the     resolver for specific RRsets in a certain order, effectively allowing the configured `max-cache-size`     limit to be significantly exceeded. This issue affects BIND 9 versions 9.11.0 through 9.16.41, 9.18.0     through 9.18.15, 9.19.0 through 9.19.13, 9.11.3-S1 through 9.16.41-S1, and 9.18.11-S1 through 9.18.15-S1.
    (CVE-2023-2828)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

远程 Redhat Enterprise Linux 7 主机上安装的多个程序包受到 RHSA-2024:7705 公告中提及的一个漏洞影响。

    systemd 程序包中包含 systemd，此为系统和 Linux 服务管理器，与 SysV 和 LSB init 脚本兼容。其提供激进并行能力、使用套接字和 D-Bus 激活以开启服务、提供守护进程按需开启功能，并可利用 Linux cgroups 跟踪进程。
    此外，它提供系统状态的快照和还原、维护装载和自动装载点，并实现详细的交易式依赖型服务控制逻辑。它还可以作为 sysvinit 的替代项。

    安全修复：

    * systemd：通过 less pager 进行的特权提升 (CVE-2023-26604)

    有关上述安全问题的更多详细信息，包括其影响、CVSS 得分、致谢，以及其他相关信息，请参阅列于“参考”部分的 CVE 页面。

Tenable 已直接从 Red Hat Enterprise Linux 安全公告中提取上述描述块。

请注意，Nessus 尚未测试此问题，而是只依据应用程序自我报告的版本号进行判断。

远程主机上安装的 AHV 版本低于 20230302.102005。因此，它受到 NXSA-AHV-20230302.1011 公告中提及的多个漏洞影响。

  - 在密码块链接 (CBC) 模式下使用块密码算法时，远程攻击者可利用以下产品中 SSH 协议内的错误处理，更轻松地通过未知矢量从 SSH 会话中的任意密码文本块恢复特定明文数据：(1) SSH Tectia Client and Server and Connector 4.0 到 4.4.11，5.0 到 5.2.4，以及 5.3 到 5.3.8；Client and Server and ConnectSecure 6.0 到 6.0.4；Server for Linux on IBM System z 6.0.4；Server for IBM z/OS 5.5.1 及更低版本，6.0.0 和 6.0.1；以及 Client 4.0-J 到 4.3.3-J 和 4.0-K 到 4.3.10-K；以及 (2) OpenSSH 4.7p1 以及可能其他版本。(CVE-2008-5161)

  - 在 9.3p2 之前的 OpenSSH 中，ssh-agent 的 PKCS#11 功能具有不够可信的搜索路径，将代理转发到攻击者控制的系统会导致远程代码执行。（/usr/lib 中的代码加载到 ssh-agent 时未必安全。）注意：存在此问题的原因是 CVE-2016-10009 的修正尚不完整。(CVE-2023-38408)

  - 在更新密钥期间通过算法猜测在 libssh 中造成空指针取消引用。此问题可能允许经身份验证的客户端造成拒绝服务。(CVE-2023-1667)

  - 在 libssh 中发现因内存分配问题产生的漏洞，导致可以通过 `pki_verify_data_signature` 函数对连接的客户端绕过认证检查。如果内存不足或内存使用量有限，则可能发生此问题。此问题由返回值 `rc` 引起，该值被初始化为 SSH_ERROR 并在之后被重写以保存函数调用 `pki_key_check_hash_compatible` 的返回值。变量的值在此点验证和加密验证之间不会发生改变。因此，它们之间的任何错误都会调用返回 SSH_OK 的 `goto error`。
    (CVE-2023-2283)

  - 配置为作为递归解析器运行的每个 `named` 实例都会维护一个缓存数据库，该数据库中包含对最近发送至授权服务器的查询做出的响应。可以使用配置文件中的“max-cache-size”语句配置该缓存数据库的大小限制；其大小默认为主机上可用内存总量的 90%。当缓存大小达到配置限制的 7/8 时，缓存清除算法开始从缓存中删除过期和/或最近最少使用的 RRset，以保持内存使用量低于配置的限制。已发现按特定顺序查询特定 RRset 的解析器可严重削弱“named”中所用缓存清除算法的有效性，从而严重超出配置的 max-cache-size 限制。此问题影响 BIND 9 版本 9.11.0 至 9.16.41、9.18.0 至 9.18.15、9.19.0 至 9.19.13、9.11.3-S1 至 9.16.41-S1 和 9.18.11-S1 至 9.18.15-S1。
    (CVE-2023-2828)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

According to the versions of the systemd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A vulnerability was found in systemd. This security flaw can cause a local information leak due to     systemd-coredump not respecting the fs.suid_dumpable kernel setting. (CVE-2022-4415)

  - systemd before 247 does not adequately block local privilege escalation for some Sudo configurations,     e.g., plausible sudoers files in which the 'systemctl status' command may be executed. Specifically,     systemd does not set LESSSECURE to 1, and thus other programs may be launched from the less program. This     presents a substantial security risk when running systemctl from Sudo, because less executes as root when     the terminal size is too small to show the complete systemctl output. (CVE-2023-26604)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the systemd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - systemd before 247 does not adequately block local privilege escalation for some Sudo configurations,     e.g., plausible sudoers files in which the 'systemctl status' command may be executed. Specifically,     systemd does not set LESSSECURE to 1, and thus other programs may be launched from the less program. This     presents a substantial security risk when running systemctl from Sudo, because less executes as root when     the terminal size is too small to show the complete systemctl output. (CVE-2023-26604)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:1622-1 advisory.

  - systemd before 247 does not adequately block local privilege escalation for some Sudo configurations,     e.g., plausible sudoers files in which the systemctl status command may be executed. Specifically,     systemd does not set LESSSECURE to 1, and thus other programs may be launched from the less program. This     presents a substantial security risk when running systemctl from Sudo, because less executes as root when     the terminal size is too small to show the complete systemctl output. (CVE-2023-26604)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - systemd before 247 does not adequately block local privilege escalation for some Sudo configurations,     e.g., plausible sudoers files in which the 'systemctl status' command may be executed. Specifically,     systemd does not set LESSSECURE to 1, and thus other programs may be launched from the less program. This     presents a substantial security risk when running systemctl from Sudo, because less executes as root when     the terminal size is too small to show the complete systemctl output. (CVE-2023-26604)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote NewStart CGSL host, running version MAIN 6.02, has systemd packages installed that are affected by multiple vulnerabilities:

  - A use-after-free vulnerability was found in systemd. This issue occurs due to the on_stream_io() function     and dns_stream_complete() function in 'resolved-dns-stream.c' not incrementing the reference counting for     the DnsStream object. Therefore, other functions and callbacks called can dereference the DNSStream     object, causing the use-after-free when the reference is still used later. (CVE-2022-2526)

  - A vulnerability was found in the systemd package. The systemd package does not adequately block local     privilege escalation for some Sudo configurations, for example, plausible sudoers files, in which the     systemctl status command may be executed. Specifically, systemd does not set LESSSECURE to 1, and thus     other programs may be launched from the less program. This issue presents a substantial security risk when     running systemctl from Sudo because less executes as root when the terminal size is too small to show the     complete systemctl output. (CVE-2023-26604)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02019-1 advisory.

    - CVE-2025-4598: Race condition that allows a local attacker to crash a SUID program and gain read access     to the resulting core dump (bsc#1243935).
    - CVE-2023-26604: Privilege escalation via the less pager (bsc#1208958).
    - CVE-2022-4415: systemd-coredump was not respecting fs.suid_dumpable kernel setting (bsc#1205000).

    Other bugfixes:

    - clarify passno and noauto combination in /etc/fstab (bsc#1211725)
    - handle -EINTR return from bus_poll() (bsc#1215241)
    - /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AHV installed on the remote host is prior to 20230302.102005. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-20230302.207 advisory.

  - In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in     xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes, or only freeing memory).
    (CVE-2021-45960)

  - The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path,     leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in     /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an     incomplete fix for CVE-2016-10009. (CVE-2023-38408)

  - An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the     attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content     to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing     filenames with two or more newlines where selected content and the target file names are embedded in     crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write     arbitrary files on the system. (CVE-2022-1271)

  - http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5     allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR     and LF control characters in the first argument of HTTPConnection.request. (CVE-2020-26116)

  - urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as     demonstrated by inserting CR and LF control characters in the first argument of putrequest(). NOTE: this     is similar to CVE-2020-26116. (CVE-2020-26137)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AHV installed on the remote host is prior to 20230302.102005. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-20230302.216 advisory.

  - The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path,     leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in     /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an     incomplete fix for CVE-2016-10009. (CVE-2023-38408)

  - A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may     allow an authenticated client to cause a denial of service. (CVE-2023-1667)

  - A vulnerability was found in libssh, where the authentication check of the connecting client can be     bypassed in the`pki_verify_data_signature` function in memory allocation problems. This issue may happen     if there is insufficient memory or the memory usage is limited. The problem is caused by the return value     `rc,` which is initialized to SSH_ERROR and later rewritten to save the return value of the function call     `pki_key_check_hash_compatible.` The value of the variable is not changed between this point and the     cryptographic verification. Therefore any error between them calls `goto error` returning SSH_OK.
    (CVE-2023-2283)

  - Every `named` instance configured to run as a recursive resolver maintains a cache database holding the     responses to the queries it has recently sent to authoritative servers. The size limit for that cache     database can be configured using the `max-cache-size` statement in the configuration file; it defaults to     90% of the total amount of memory available on the host. When the size of the cache reaches 7/8 of the     configured limit, a cache-cleaning algorithm starts to remove expired and/or least-recently used RRsets     from the cache, to keep memory use below the configured limit. It has been discovered that the     effectiveness of the cache-cleaning algorithm used in `named` can be severely diminished by querying the     resolver for specific RRsets in a certain order, effectively allowing the configured `max-cache-size`     limit to be significantly exceeded. This issue affects BIND 9 versions 9.11.0 through 9.16.41, 9.18.0     through 9.18.15, 9.19.0 through 9.19.13, 9.11.3-S1 through 9.16.41-S1, and 9.18.11-S1 through 9.18.15-S1.
    (CVE-2023-2828)

  - Buffer Overflow vulnerability found in SQLite3 v.3.27.1 and before allows a local attacker to cause a     denial of service via a crafted script. (CVE-2020-24736)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
252082	Linux Distros Unpatched Vulnerability : CVE-2023-26604	Nessus	Misc.	2025/8/19	2025/8/19	high
208241	RHEL 7：systemd (RHSA-2024:7705)	Nessus	Red Hat Local Security Checks	2024/10/7	2025/1/14	high
187269	Nutanix AHV：多個弱點 (NXSA-AHV-20230302.1011)	Nessus	Misc.	2023/12/22	2025/2/19	low
236442	Alibaba Cloud Linux 3 : 0108: systemd (ALINUX3-SA-2023:0108)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	high
208241	RHEL 7 : systemd (RHSA-2024:7705)	Nessus	Red Hat Local Security Checks	2024/10/7	2025/1/14	high
208694	Oracle Linux 7 : systemd (ELSA-2024-7705)	Nessus	Oracle Linux Local Security Checks	2024/10/10	2024/11/2	high
187269	Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20230302.1011)	Nessus	Misc.	2023/12/22	2025/2/19	low
208241	RHEL 7：systemd (RHSA-2024:7705)	Nessus	Red Hat Local Security Checks	2024/10/7	2025/1/14	high
187269	Nutanix AHV：多个漏洞 (NXSA-AHV-20230302.1011)	Nessus	Misc.	2023/12/22	2025/2/19	low
175491	EulerOS 2.0 SP9 : systemd (EulerOS-SA-2023-1855)	Nessus	Huawei Local Security Checks	2023/5/13	2023/5/13	high
175290	EulerOS 2.0 SP10 : systemd (EulerOS-SA-2023-1832)	Nessus	Huawei Local Security Checks	2023/5/8	2023/5/8	high
173640	SUSE SLES12 Security Update : systemd (SUSE-SU-2023:1622-1)	Nessus	SuSE Local Security Checks	2023/3/29	2023/7/14	high
178980	EulerOS Virtualization 2.10.1 : systemd (EulerOS-SA-2023-2470)	Nessus	Huawei Local Security Checks	2023/7/28	2023/7/28	high
206847	NewStart CGSL MAIN 6.02 : systemd Multiple Vulnerabilities (NS-SA-2024-0062)	Nessus	NewStart CGSL Local Security Checks	2024/9/10	2024/9/10	critical
240826	SUSE SLES15 Security Update : systemd (SUSE-SU-2025:02019-1)	Nessus	SuSE Local Security Checks	2025/6/27	2025/6/27	medium
180469	Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20230302.207)	Nessus	Misc.	2023/9/4	2025/2/17	low
181785	Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20230302.216)	Nessus	Misc.	2023/9/22	2025/2/19	critical

偵測

搜尋 Plugin

high

high

low

high

high

high

low

high

low

high

high

high

high

critical

medium

low

critical