388 matches found
CVE-2019-7478
SonicWall Global Management System (GMS) Webservice module is affected by CVE-2019-7478: unauthenticated SQL injection in GMS Webservice, affecting GMS versions 8.4, 8.5, 8.6, 8.7, 9.0 and 9.1. Root cause is lack of input validation/execution of externally entered SQL statements in the Webservice...
CVE-2019-7478
A vulnerability in GMS allow unauthenticated user to SQL injection in Webservice module. This vulnerability affected GMS versions GMS 8.4, 8.5, 8.6, 8.7, 9.0 and 9.1...
Global Management System (GMS) Unauthorized User SQL Injection
A vulnerability in GMS allow unauthenticated user to SQL injection in Webservice module. This vulnerability affected GMS versions 8.4, 8.5, 8.6, 8.7, 9.0 and 9.1. CVE: CVE-2019-7478 Last updated: Dec. 30, 2019, 8 p.m...
PT-2019-18621
Name of the Vulnerable Software and Affected Versions GMS versions 8.4 through 9.1 Description A vulnerability in GMS allows an unauthenticated user to perform SQL injection in the Webservice module. Recommendations For GMS versions 8.4 through 9.1, update to a version that contains a fix for thi...
CVE-2019-7478: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability in GMS allow unauthenticated user to SQL injection in Webservice module. This vulnerability affected GMS versions GMS 8.4, 8.5, 8.6, 8.7, 9.0 and 9.1...
Design/Logic Flaw
A vulnerability in SonicWall Global Management System GMS, allow a remote user to gain access to the appliance using existing SSH key. This vulnerability affects GMS versions 9.1, 9.0, 8.7, 8.6, 8.4, 8.3 and earlier...
CVE-2019-7476
A vulnerability in SonicWall Global Management System GMS, allow a remote user to gain access to the appliance using existing SSH key. This vulnerability affects GMS versions 9.1, 9.0, 8.7, 8.6, 8.4, 8.3 and earlier...
CVE-2019-7476
A vulnerability in SonicWall Global Management System GMS, allow a remote user to gain access to the appliance using existing SSH key. This vulnerability affects GMS versions 9.1, 9.0, 8.7, 8.6, 8.4, 8.3 and earlier...
CVE-2019-7476
SonicWall Global Management System (GMS) is affected by CVE-2019-7476, allowing a remote attacker to gain access to the appliance by using an existing SSH key. Affected versions include GMS 9.1, 9.0, 8.7, 8.6, 8.4, 8.3 and earlier. The connected documents do not provide detailed root-cause analys...
PT-2019-18619
Name of the Vulnerable Software and Affected Versions SonicWall Global Management System GMS versions 9.1, 9.0, 8.7, 8.6, 8.4, 8.3 and earlier Description A vulnerability in SonicWall Global Management System GMS allows a remote user to gain access to the appliance using an existing SSH key...
Apache Struts & SonicWall’s GMS exploits key targets of Mirai & Gafgyt IoT malware
By Waqas Security researchers at Palo Alto Networks’ Unit 42 have discovered modified versions of the notorious Mirai and Gafgyt Internet of Things IoT malware. The malware have the capability of targeting flaws that affect Apache Struts and SonicWall Global Management System GMS. Moreover, the...
CVE-2018-9866
A vulnerability in lack of validation of user-supplied parameters pass to XML-RPC calls on SonicWall Global Management System GMS virtual appliance's, allow remote user to execute arbitrary code. This vulnerability affected GMS version 8.1 and earlier...
Code injection
A vulnerability in lack of validation of user-supplied parameters pass to XML-RPC calls on SonicWall Global Management System GMS virtual appliance's, allow remote user to execute arbitrary code. This vulnerability affected GMS version 8.1 and earlier...
CVE-2018-9866
A vulnerability in lack of validation of user-supplied parameters pass to XML-RPC calls on SonicWall Global Management System GMS virtual appliance's, allow remote user to execute arbitrary code. This vulnerability affected GMS version 8.1 and earlier...
CVE-2018-9866
A vulnerability in lack of validation of user-supplied parameters pass to XML-RPC calls on SonicWall Global Management System GMS virtual appliance's, allow remote user to execute arbitrary code. This vulnerability affected GMS version 8.1 and earlier...
CVE-2018-9866
SonicWall GMS (Global Management System) virtual appliances with version 8.1 and earlier are affected by CVE-2018-9866 due to lack of validation of user-supplied parameters passed to XML-RPC calls. This allows a remote attacker to execute arbitrary code on the vulnerable system. The issue affects...
CVE-2018-9866: Improper Neutralization of Special Elements used in a Command
A vulnerability in lack of validation of user-supplied parameters pass to XML-RPC calls on SonicWall Global Management System GMS virtual appliance's, allow remote user to execute arbitrary code. This vulnerability affected GMS version 8.1 and earlier...
SonicWall GMS XML-RPC Remote Code Execution Vulnerability
A vulnerability in lack of validation of user-supplied parameters pass to XML-RPC calls on SonicWall Global Management System GMS virtual appliance's, allow remote user to execute arbitrary code. This vulnerability affected GMS version 8.1 and earlier. CVE: CVE-2018-9866 Last updated: Aug. 3, 201...