Question: what vulnerabilities does nessus scan for?
Answer: Vulnerabilities that could allow unauthorized control or access to sensitive data on a system.
Misconfiguration (e.g. open mail relay, missing patches, etc.).