Lucene search
+L

12625 matches found

Prion
Prion
•added 2017/02/22 5:59 a.m.•25 views

Command injection

The SonicWall Secure Remote Access server version 8.1.0.2-14sv is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. This vulnerability occurs in the 'extensionsettings' CGI /cgi-bin/extensionsettings component responsible for handling some of the server's...

10CVSS8AI score0.11554EPSS
SaveExploits3References4Affected Software1
osv_cve
osv_cve
•added 2017/02/22 5:59 a.m.•23 views

CVE-2016-9683

The SonicWall Secure Remote Access server version 8.1.0.2-14sv is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. This vulnerability occurs in the 'extensionsettings' CGI /cgi-bin/extensionsettings component responsible for handling some of the server's...

9.8CVSS5.8AI score0.11554EPSS
SaveExploits3References4
Prion
Prion
•added 2017/02/22 5:59 a.m.•15 views

Command injection

The SonicWall Secure Remote Access server version 8.1.0.2-14sv is vulnerable to two Remote Command Injection vulnerabilities in its web administrative interface. These vulnerabilities occur in the diagnostics CGI /cgi-bin/diagnostics component responsible for emailing out information about the...

10CVSS8.2AI score0.23296EPSS
SaveExploits5References4Affected Software1
Prion
Prion
•added 2017/02/22 5:59 a.m.•28 views

Command injection

The SonicWall Secure Remote Access server version 8.1.0.2-14sv is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. This vulnerability occurs in the 'viewcert' CGI /cgi-bin/viewcert component responsible for processing SSL certificate information. The CGI...

10CVSS8.1AI score0.07064EPSS
SaveExploits3References4Affected Software1
osv_cve
osv_cve
•added 2017/02/22 5:59 a.m.•10 views

CVE-2016-9682

The SonicWall Secure Remote Access server version 8.1.0.2-14sv is vulnerable to two Remote Command Injection vulnerabilities in its web administrative interface. These vulnerabilities occur in the diagnostics CGI /cgi-bin/diagnostics component responsible for emailing out information about the...

9.8CVSS5.8AI score0.23296EPSS
SaveExploits5References4
osv_cve
osv_cve
•added 2017/02/22 5:59 a.m.•18 views

CVE-2016-9684

The SonicWall Secure Remote Access server version 8.1.0.2-14sv is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. This vulnerability occurs in the 'viewcert' CGI /cgi-bin/viewcert component responsible for processing SSL certificate information. The CGI...

9.8CVSS5.8AI score0.07064EPSS
SaveExploits3References4
NVD
NVD
•added 2017/02/22 5:59 a.m.•35 views

CVE-2016-9683

The SonicWall Secure Remote Access server version 8.1.0.2-14sv is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. This vulnerability occurs in the 'extensionsettings' CGI /cgi-bin/extensionsettings component responsible for handling some of the server's...

10CVSS9.8AI score0.11554EPSS
SaveExploits3References4
NVD
NVD
•added 2017/02/22 5:59 a.m.•31 views

CVE-2016-9684

The SonicWall Secure Remote Access server version 8.1.0.2-14sv is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. This vulnerability occurs in the 'viewcert' CGI /cgi-bin/viewcert component responsible for processing SSL certificate information. The CGI...

10CVSS9.9AI score0.07064EPSS
SaveExploits3References4
Cvelist
Cvelist
•added 2017/02/22 5:00 a.m.•40 views

CVE-2016-9682

The SonicWall Secure Remote Access server version 8.1.0.2-14sv is vulnerable to two Remote Command Injection vulnerabilities in its web administrative interface. These vulnerabilities occur in the diagnostics CGI /cgi-bin/diagnostics component responsible for emailing out information about the...

10AI score0.23296EPSS
SaveExploits5References4
CVE
CVE
•added 2017/02/22 5:00 a.m.•67 views

CVE-2016-9684

Dell SonicWALL Secure Remote Access (SRA) server, version 8.1.0.2-14sv, is vulnerable to a remote command injection in the web admin CGI at /cgi-bin/viewcert. The CGI does not properly escape the CERT input before a system() call, enabling an attacker to execute arbitrary shell commands and gain ...

10CVSS9.8AI score0.07064EPSS
SaveExploits3References4Affected Software1
CVE
CVE
•added 2017/02/22 5:00 a.m.•85 views

CVE-2016-9682

The provided connected sources confirm CVE-2016-9682 affects SonicWall Secure Remote Access (SRA) 8.1.0.2-14sv. The vulnerabilities are remote command injections in the diagnostics CGI (/cgi-bin/diagnostics) used for emailing system state. Root cause: the application fails to properly escape data...

10CVSS9.9AI score0.23296EPSS
SaveExploits5References4Affected Software1
Cvelist
Cvelist
•added 2017/02/22 5:00 a.m.•40 views

CVE-2016-9683

The SonicWall Secure Remote Access server version 8.1.0.2-14sv is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. This vulnerability occurs in the 'extensionsettings' CGI /cgi-bin/extensionsettings component responsible for handling some of the server's...

9.9AI score0.11554EPSS
SaveExploits3References4
Positive Technologies
Positive Technologies
•added 2017/02/22 12:00 a.m.•5 views

PT-2017-3171

Name of the Vulnerable Software and Affected Versions SonicWall Secure Remote Access server version 8.1.0.2-14sv Description The issue is related to the diagnostics component of the CGI application in the web administrative interface, specifically the /cgi-bin/diagnostics endpoint. It is caused b...

10CVSS0.23296EPSS
SaveExploits5References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/02/22 12:00 a.m.•8 views

CVE-2017-6188: Improper Input Validation

Munin before 2.999.6 has a local file write vulnerability when CGI graphs are enabled. Setting multiple upperlimit GET parameters allows overwriting any file accessible to the www-data user...

5.5CVSS5.8AI score0.00421EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2017/02/22 12:00 a.m.•21 views

UBUNTU-CVE-2017-6188

Munin before 2.999.6 has a local file write vulnerability when CGI graphs are enabled. Setting multiple upperlimit GET parameters allows overwriting any file accessible to the www-data user...

5.5CVSS6.1AI score0.00421EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2017/02/22 12:00 a.m.•4 views

PT-2017-16936

Name of the Vulnerable Software and Affected Versions Munin versions prior to 2.999.6 Description The issue allows for local file write access when CGI graphs are enabled. By setting multiple upper limit GET parameters, it is possible to overwrite any file accessible to the www-data user. This ca...

5.5CVSS0.00421EPSS
SaveExploits0References25
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/02/22 12:00 a.m.•8 views

CVE-2016-9683: Improper Neutralization of Special Elements used in a Command

The SonicWall Secure Remote Access server version 8.1.0.2-14sv is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. This vulnerability occurs in the 'extensionsettings' CGI /cgi-bin/extensionsettings component responsible for handling some of the server's...

10CVSS6AI score0.11554EPSS
SaveExploits3References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/02/22 12:00 a.m.•6 views

CVE-2016-9682: Improper Neutralization of Special Elements used in a Command

The SonicWall Secure Remote Access server version 8.1.0.2-14sv is vulnerable to two Remote Command Injection vulnerabilities in its web administrative interface. These vulnerabilities occur in the diagnostics CGI /cgi-bin/diagnostics component responsible for emailing out information about the...

10CVSS6.1AI score0.23296EPSS
SaveExploits5References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/02/22 12:00 a.m.•8 views

CVE-2016-9684: Improper Neutralization of Special Elements used in a Command

The SonicWall Secure Remote Access server version 8.1.0.2-14sv is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. This vulnerability occurs in the 'viewcert' CGI /cgi-bin/viewcert component responsible for processing SSL certificate information. The CGI...

10CVSS6AI score0.07064EPSS
SaveExploits3References2
Positive Technologies
Positive Technologies
•added 2017/02/22 12:00 a.m.•5 views

PT-2017-3169

Name of the Vulnerable Software and Affected Versions SonicWall Secure Remote Access server version 8.1.0.2-14sv Description The issue is related to the viewcert CGI component in the web administrative interface, specifically the /cgi-bin/viewcert API endpoint. It is caused by a lack of input...

10CVSS0.07064EPSS
SaveExploits3References8
Rows per page
Query Builder