CVE-2020-22650

A memory leak vulnerability in sim-organizer.c of AlienVault Ossim v5 causes a denial of service DOS via a system crash triggered by the occurrence of a large number of alarm events...

CVE-2020-22650

A memory leak vulnerability in sim-organizer.c of AlienVault Ossim v5 causes a denial of service DOS via a system crash triggered by the occurrence of a large number of alarm events...

CVE-2020-22650

CVE-2020-22650 affects AlienVault Ossim v5, with a memory leak in sim-organizer.c that can cause denial of service via system crash when a large number of alarm events occur. Public references describe the vulnerability consistently as a memory leak leading to a DOS condition; CVSS data from NVD ...

PT-2021-10775

Name of the Vulnerable Software and Affected Versions AlienVault Ossim version 5 Description A memory leak issue in the sim-organizer.c component causes a denial of service DOS via a system crash. This occurs when a large number of alarm events are triggered. Recommendations For AlienVault Ossim...

CVE-2020-22650: Missing Release of Memory after Effective Lifetime

A memory leak vulnerability in sim-organizer.c of AlienVault Ossim v5 causes a denial of service DOS via a system crash triggered by the occurrence of a large number of alarm events...

AlienVault Ossim security vulnerability

AlienVault Ossim is an open source security information and event management SIEM. A security vulnerability exists in AlienVault Ossim v5, which allows an attacker to trigger a system crash leading to a denial of service via a large number of alert events...

AlienVault OSSIM Remote Code Execution (CVE-2017-6971)

A remote code execution vulnerability exists in AlienVault OSSIM. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

pages.alienvault.com XSS vulnerability

Open Bug Bounty ID: OBB-696022 Description| Value ---|--- Affected Website:| pages.alienvault.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Vote for Malwarebytes Labs: European Security Blogger Awards 2018

It's nearly time for Infosec Europe 2018, and that means it's also time to consider voting for your favourite security blogs, podcasts, video channels, and more for the upcoming European Security Blogger Awards. Thanks to your generous votes, we've been fortunate enough to pick up the award for...

AlienVault USM and OSSIM Remote Code Execution Vulnerabilities

AlienVault USM and OSSIM are both products of AlienVault Inc. of the U.S. USM is a set of security management platform that provides security monitoring, security event management and reporting, threat awareness system, etc. OSSIM is an open source security information management system. A securi...

CVE-2018-7279

A remote code execution issue was discovered in AlienVault USM and OSSIM before 5.5.1...

CVE-2018-7279

A remote code execution issue was discovered in AlienVault USM and OSSIM before 5.5.1...

Remote code execution

A remote code execution issue was discovered in AlienVault USM and OSSIM before 5.5.1...

CVE-2018-7279

A remote code execution issue was discovered in AlienVault USM and OSSIM before 5.5.1...

CVE-2018-7279

CVE-2018-7279 affects AlienVault USM and OSSIM prior to version 5.5.1, describing a remote code execution vulnerability. The available documents identify the affected products and the vulnerability class but do not provide root cause details, exploit vectors, or a confirmed remediation. CNVD and ...

CVE-2018-7279: Undefined Security Weakness

A remote code execution issue was discovered in AlienVault USM and OSSIM before 5.5.1...

PT-2018-17995

Name of the Vulnerable Software and Affected Versions AlienVault USM and OSSIM versions prior to 5.5.1 Description A remote code execution issue was discovered. Recommendations For versions prior to 5.5.1, update to version 5.5.1 or later to resolve the issue...

NfSen Web Interface Privilege Escalation Command Injection

The vulnerability of the NfSen web interface, as well as the systems for management, control, and information security management of AlienVault USM and OSSIM, is related to deficiencies in access control. Exploitation of this vulnerability can allow a malicious actor to enhance their privileges a...

AlienVault : DNS pinning SSRF

Hello there, this is for the otx.alienvault.com domain, but I couldn't mark it in the drop down menu. I saw the note about the 2 weeks so I decide to report this. Summary: I've found that you can perform a SSRF attackwith DNS pinning and read the response from url http://169.254.169.254 Browsers...

AlienVault : Puplic .htaccess/.htpasswd/.canvas files leads to password disclosure.

iam a big fan of fuzzing/bruteforcing after my last submission 288533 on http://data.alienvault.com, i decided to go further, after some bruteforcing i came across this directory which looked kinda interesting for me http://data.alienvault.com/snort/ when u try to access the directory you will ge...