Lucene search
+L

625 matches found

ATTACKERKB
ATTACKERKB
added 2022/07/08 8:15 p.m.4 views

CVE-2022-35412

Digital Guardian Agent 7.7.4.0042 allows an administrator who ordinarily does not have a supported way to uninstall the product to disable some of the agent functionality and then exfiltrate files to an external USB device...

5.1CVSS6.1AI score0.00229EPSS
SaveExploits0References3
OSV
OSV
added 2022/07/08 8:15 p.m.9 views

CVE-2022-35412

Digital Guardian Agent 7.7.4.0042 allows an administrator who ordinarily does not have a supported way to uninstall the product to disable some of the agent functionality and then exfiltrate files to an external USB device...

5.1CVSS5.8AI score0.00229EPSS
SaveExploits0References2
NVD
NVD
added 2022/07/08 8:15 p.m.28 views

CVE-2022-35412

Digital Guardian Agent 7.7.4.0042 allows an administrator who ordinarily does not have a supported way to uninstall the product to disable some of the agent functionality and then exfiltrate files to an external USB device...

5.1CVSS0.00229EPSS
SaveExploits0References2
Prion
Prion
added 2022/07/08 8:15 p.m.15 views

Design/Logic Flaw

Digital Guardian Agent 7.7.4.0042 allows an administrator who ordinarily does not have a supported way to uninstall the product to disable some of the agent functionality and then exfiltrate files to an external USB device...

3.6CVSS5.2AI score0.00229EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2022/07/08 7:03 p.m.70 views

CVE-2022-35412

Digital Guardian Agent 7.7.4.0042 contains an information-disclosure risk: an administrator (who normally cannot uninstall the product) can disable certain agent features and exfiltrate files to an external USB device. This CVE (CVE-2022-35412) is a local-attack scenario with Privileges Required:...

5.1CVSS5.1AI score0.00229EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/07/08 7:03 p.m.27 views

CVE-2022-35412

Digital Guardian Agent 7.7.4.0042 allows an administrator who ordinarily does not have a supported way to uninstall the product to disable some of the agent functionality and then exfiltrate files to an external USB device...

5.5AI score0.00229EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/07/08 12:00 a.m.8 views

Digital Guardian Agent 安全漏洞

Digital Guardian Agent is a widely used data protection platform for cloud environments from US-based Digital Guardian. Discover, categorize and control data movement across endpoints, networks and clouds. An information disclosure vulnerability exists in Digital Guardian Agent version 7.7.4.0042...

5.1CVSS5.5AI score0.00229EPSS
SaveExploits0References3
OSV
OSV
added 2022/03/24 3:15 p.m.12 views

CVE-2022-0550

Improper Input Validation vulnerability in custom report logo upload in Nozomi Networks Guardian, and CMC allows an authenticated attacker with admin or report manager roles to execute unattended commands on the appliance using web server user privileges. This issue affects: Nozomi Networks...

7.2CVSS7.2AI score0.00904EPSS
SaveExploits0References1
OSV
OSV
added 2022/03/24 3:15 p.m.7 views

CVE-2022-0551

Improper Input Validation vulnerability in project file upload in Nozomi Networks Guardian and CMC allows an authenticated attacker with admin or import manager roles to execute unattended commands on the appliance using web server user privileges. This issue affects: Nozomi Networks Guardian...

7.2CVSS5.9AI score0.00904EPSS
SaveExploits0References1
NVD
NVD
added 2022/03/24 3:15 p.m.34 views

CVE-2022-0551

Improper Input Validation vulnerability in project file upload in Nozomi Networks Guardian and CMC allows an authenticated attacker with admin or import manager roles to execute unattended commands on the appliance using web server user privileges. This issue affects: Nozomi Networks Guardian...

8.6CVSS0.00904EPSS
SaveExploits0References1
NVD
NVD
added 2022/03/24 3:15 p.m.36 views

CVE-2022-0550

Improper Input Validation vulnerability in custom report logo upload in Nozomi Networks Guardian, and CMC allows an authenticated attacker with admin or report manager roles to execute unattended commands on the appliance using web server user privileges. This issue affects: Nozomi Networks...

8.6CVSS0.00904EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/03/24 3:15 p.m.10 views

CVE-2022-0551

Improper Input Validation vulnerability in project file upload in Nozomi Networks Guardian and CMC allows an authenticated attacker with admin or import manager roles to execute unattended commands on the appliance using web server user privileges. This issue affects: Nozomi Networks Guardian...

8.6CVSS7.3AI score0.00904EPSS
SaveExploits0References2
Prion
Prion
added 2022/03/24 3:15 p.m.23 views

Input validation

Improper Input Validation vulnerability in project file upload in Nozomi Networks Guardian and CMC allows an authenticated attacker with admin or import manager roles to execute unattended commands on the appliance using web server user privileges. This issue affects: Nozomi Networks Guardian...

6.5CVSS7.1AI score0.00904EPSS
SaveExploits0References1Affected Software2
Prion
Prion
added 2022/03/24 3:15 p.m.26 views

Input validation

Improper Input Validation vulnerability in custom report logo upload in Nozomi Networks Guardian, and CMC allows an authenticated attacker with admin or report manager roles to execute unattended commands on the appliance using web server user privileges. This issue affects: Nozomi Networks...

6.5CVSS7.1AI score0.00904EPSS
SaveExploits0References1Affected Software2
CVE
CVE
added 2022/03/24 2:15 p.m.100 views

CVE-2022-0551

CVE-2022-0551 concerns Nozomi Networks Guardian and Nozomi Networks CMC prior to version 22.0.0. The vulnerability is an improper input validation flaw in the project file upload feature, allowing an authenticated attacker with admin or import manager roles to execute unattended commands on the a...

8.6CVSS7.1AI score0.00904EPSS
SaveExploits0References1Affected Software2
Vulnrichment
Vulnrichment
added 2022/03/24 2:15 p.m.24 views

CVE-2022-0551 Authenticated RCE on project configuration import in Guardian/CMC before 22.0.0

Improper Input Validation vulnerability in project file upload in Nozomi Networks Guardian and CMC allows an authenticated attacker with admin or import manager roles to execute unattended commands on the appliance using web server user privileges. This issue affects: Nozomi Networks Guardian...

8.6CVSS7.2AI score0.00904EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/03/24 2:15 p.m.32 views

CVE-2022-0551 Authenticated RCE on project configuration import in Guardian/CMC before 22.0.0

Improper Input Validation vulnerability in project file upload in Nozomi Networks Guardian and CMC allows an authenticated attacker with admin or import manager roles to execute unattended commands on the appliance using web server user privileges. This issue affects: Nozomi Networks Guardian...

8.6CVSS7.3AI score0.00904EPSS
SaveExploits0References1
CVE
CVE
added 2022/03/24 2:15 p.m.116 views

CVE-2022-0550

CVE-2022-0550 describes an Improper Input Validation in the custom report logo upload feature of Nozomi Networks Guardian and CMC. An authenticated attacker with admin or report manager roles can execute unattended commands on the appliance using web server privileges. Affected: Nozomi Networks G...

8.6CVSS7.1AI score0.00904EPSS
SaveExploits0References1Affected Software2
Positive Technologies
Positive Technologies
added 2022/03/24 12:00 a.m.11 views

PT-2022-13255 · Nozomi Networks · Nozomi Networks Cmc +1

Name of the Vulnerable Software and Affected Versions: Nozomi Networks Guardian versions prior to 22.0.0 Nozomi Networks CMC versions prior to 22.0.0 Description: The issue is related to an Improper Input Validation vulnerability in the project file upload feature of Nozomi Networks Guardian and...

8.6CVSS7.5AI score0.00904EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2022/03/24 12:00 a.m.11 views

Nozomi Networks Guardian 输入验证错误漏洞

Nozomi Networks Guardian is an IoT device and software inspection system from Nozomi Networks, Switzerland. An input validation error vulnerability exists in versions of Nozomi Networks Guardian prior to 22.0.0, which can be exploited by an authenticated attacker with the administrator or import...

8.6CVSS5.8AI score0.00904EPSS
SaveExploits0References2
Rows per page
Query Builder