GHSA-8VH5-J6XJ-5953 Centreon XSS Vulnerability

Centreon 3.4.x fixed in Centreon 18.10.0 allows XSS via the Service field to the main.php?p=20201 URI, as demonstrated by the "Monitoring Status Details Services" screen...

DEBIAN-CVE-2022-0583

Crash in the PVFS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file...

PT-2022-16596 · Mastodon · Mastodon

Name of the Vulnerable Software and Affected Versions: Mastodon versions 1.6.0 through 3.3.2 Mastodon versions 3.4.x through 3.4.5 Description: The issue is related to incorrect access control due to the failure to compact incoming signed JSON-LD activities. JSON-LD signing has been supported sin...

Wireshark 3.4.x < 3.4.11 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 3.4.11. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-3.4.11 advisory. - Crash in the Gryphon dissector in Wireshark 3.4.0 to 3.4.10 allows denial of service via packet...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices Cameralyzer, which stems from incorrect access control. The following versions are affected:...

Advisory ROSA-SA-2021-1973

Software: spamassassin 3.4.0 OS: Cobalt 7.9 CVE-ID: CVE-2018-11780 CVE-Crit: CRITICAL CVE-DESC: A potential remote code execution bug exists with the PDFInfo plugin in Apache SpamAssassin before 3.4.2. CVE-STATUS: Default CVE-REV: default CVE-ID: CVE-2018-11805 CVE-Crit: MEDIUM CVE-DESC: In Apach...

DEBIAN-CVE-2021-22207

Excessive memory consumption in MS-WSP dissector in Wireshark 3.4.0 to 3.4.4 and 3.2.0 to 3.2.12 allows denial of service via packet injection or crafted capture file...

KLA12114 DoS vulnerability in Wireshark

A denial of service vulnerability was found in Wireshark. Malicious users can exploit this vulnerability to cause denial of service. Original advisories wnpa-sec-2021-03 · Wireshark could open unsafe URLs. Related products Wireshark CVE list CVE-2021-22191 critical Solution Update to the latest...

CVE-2020-4000

The SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3, 3.4.x prior to 3.4.4, and 4.0.x prior to 4.0.1 allows for executing files through directory traversal. An authenticated SD-WAN Orchestrator user is able to traversal directories which may lead to code execution of files...

CVE-2016-10742

Zabbix before 2.2.21rc1, 3.x before 3.0.13rc1, 3.1.x and 3.2.x before 3.2.10rc1, and 3.3.x and 3.4.x before 3.4.4rc1 allows open redirect via the request parameter...

CVE-2018-19312

Centreon 3.4.x fixed in Centreon 18.10.0 and Centreon web 2.8.24 allows SQL Injection via the searchVM parameter to the main.php?p=20408 URI...

CVE-2018-19311

Centreon 3.4.x fixed in Centreon 18.10.0 allows XSS via the Service field to the main.php?p=20201 URI, as demonstrated by the "Monitoring Status Details Services" screen...

CVE-2018-19312

CVE-2018-19312 affects Centreon 3.4.x, with the vulnerability exposed via the searchVM parameter to the main.php?p=20408 URI. The issue is a SQL Injection flaw in Centreon 3.4.x, and a fixed version exists: Centreon 18.10.0 and Centreon web 2.8.24. The connected documents consistently describe th...

Centreon SQL Injection Vulnerability

Centreon formerly known as Merethis Centreon is an open source IT monitoring software suite from Centreon France that needs to be paired with Nagios to manage Nagios via the web and third-party components to enable monitoring of networks, operating systems and applications. A SQL injection...

Centreon Cross-Site Scripting Vulnerability (CNVD-2019-00831)

Centreon formerly known as Merethis Centreon is an open source IT monitoring software suite from Centreon France that needs to be paired with Nagios to manage Nagios via the web and third-party components to enable monitoring of networks, operating systems and applications. A cross-site scripting...

CVE-2018-19281

Centreon 3.4.x fixed in Centreon 18.10.0 and Centreon web 2.8.27 allows SNMP trap SQL Injection...

CVE-2018-19280

Centreon 3.4.x fixed in Centreon 18.10.0 has XSS via the resource name or macro expression of a poller macro...

CVE-2018-19280

Centreon 3.4.x fixed in Centreon 18.10.0 has XSS via the resource name or macro expression of a poller macro...

Design/Logic Flaw

Centreon 3.4.x fixed in Centreon 18.10.0 has XSS via the resource name or macro expression of a poller macro...

CVE-2018-19281

CVE-2018-19281 affects Centreon 3.4.x and is resolved in Centreon 18.10.0 and Centreon Web 2.8.27. The vulnerability is described as a SQL injection via SNMP trap, indicating that untrusted data from SNMP traps could be used to manipulate the backend database. Publicly provided connected document...