CVE-2018-10174

Digital Guardian Management Console 7.1.2.0015 has an SSRF issue that allows remote attackers to read arbitrary files via file:// URLs, send TCP traffic to intranet hosts, or obtain an NTLM hash. This can occur even if the logged-in user has a read-only role...

CVE-2018-10176

Digital Guardian Management Console 7.1.2.0015 has a Directory Traversal issue...

Directory traversal

Digital Guardian Management Console 7.1.2.0015 has a Directory Traversal issue...

CVE-2018-10176

Digital Guardian Management Console 7.1.2.0015 has a Directory Traversal issue...

CVE-2018-10174

Digital Guardian Management Console 7.1.2.0015 has an SSRF issue that allows remote attackers to read arbitrary files via file:// URLs, send TCP traffic to intranet hosts, or obtain an NTLM hash. This can occur even if the logged-in user has a read-only role...

CVE-2018-10175

Digital Guardian Management Console 7.1.2.0015 has an XXE issue...

CVE-2018-10174

The CVE concerns Digital Guardian Management Console 7.1.2.0015 with a server-side request forgery (SSRF) vulnerability. The issue lets remote attackers induce the console to access file:// URLs to read arbitrary files, and to send TCP traffic to intranet hosts or obtain NTLM hashes, even when th...

CVE-2018-10175

CVE-2018-10175 affects Digital Guardian Management Console 7.1.2.0015 and is an XML External Entity (XXE) injection vulnerability. The connected CNVD entry specifies an XML external entity injection that could allow an attacker to cause external web requests, enumerate web content, or read files ...

CVE-2018-10173

Digital Guardian Management Console 7.1.2.0015 allows authenticated remote code execution because of Arbitrary File Upload functionality...

CVE-2018-10173

CVE-2018-10173 affects Digital Guardian Management Console 7.1.2.0015 and enables authenticated remote code execution via an Arbitrary File Upload vulnerability. The NVD entry documents a NETWORK attack with LOW attack complexity and no user interaction, resulting in high impact (C/H/I/A: HIGH). ...

CVE-2018-10176

The CVE-2018-10176 entry concerns Digital Guardian Management Console 7.1.2.0015, which exposes a directory traversal vulnerability enabling an attacker to read arbitrary files on the server. Publicly documented details come from CNVD-2018-08777, which explicitly describes a path traversal flaw i...

CVE-2018-10176

Digital Guardian Management Console 7.1.2.0015 has a Directory Traversal issue...

CVE-2018-10174

Digital Guardian Management Console 7.1.2.0015 has an SSRF issue that allows remote attackers to read arbitrary files via file:// URLs, send TCP traffic to intranet hosts, or obtain an NTLM hash. This can occur even if the logged-in user has a read-only role...

CVE-2018-10175

Digital Guardian Management Console 7.1.2.0015 has an XXE issue...

CVE-2018-10176: Improper Limitation of a Pathname to a Restricted Directory

Digital Guardian Management Console 7.1.2.0015 has a Directory Traversal issue...

CVE-2018-10175: Improper Restriction of XML External Entity Reference

Digital Guardian Management Console 7.1.2.0015 has an XXE issue...

PT-2018-9732

Name of the Vulnerable Software and Affected Versions: Digital Guardian Management Console version 7.1.2.0015 Description: The issue allows remote attackers to read arbitrary files via file:// URLs, send TCP traffic to intranet hosts, or obtain an NTLM hash. This can occur even if the logged-in...

PT-2018-9734

Name of the Vulnerable Software and Affected Versions: Digital Guardian Management Console version 7.1.2.0015 Description: The issue is related to a Directory Traversal problem. Recommendations: For Digital Guardian Management Console version 7.1.2.0015, at the moment, there is no information abo...

PT-2018-9731

Name of the Vulnerable Software and Affected Versions: Digital Guardian Management Console version 7.1.2.0015 Description: The issue allows authenticated remote code execution due to Arbitrary File Upload functionality. Recommendations: For Digital Guardian Management Console version 7.1.2.0015,...

PT-2018-9733

Name of the Vulnerable Software and Affected Versions: Digital Guardian Management Console version 7.1.2.0015 Description: The issue is related to an XXE problem. Recommendations: For Digital Guardian Management Console version 7.1.2.0015, at the moment, there is no information about a newer...