5 matches found
CVE-2020-13378: Improper Neutralization of Special Elements used in an OS Command
Loadbalancer.org Enterprise VA MAX through 8.3.8 has an OS Command Injection vulnerability that allows a remote authenticated attacker to execute arbitrary code...
CVE-2020-13377: Improper Limitation of a Pathname to a Restricted Directory
The web-services interface of Loadbalancer.org Enterprise VA MAX through 8.3.8 could allow an authenticated, remote, low-privileged attacker to conduct directory traversal attacks and obtain read and write access to sensitive files...
PT-2018-14699
Name of the Vulnerable Software and Affected Versions Loadbalancer.org Enterprise VA MAX versions prior to 8.3.3 Description The issue arises because Apache HTTP Server logs are displayed, leading to a potential XSS problem. Recommendations For versions prior to 8.3.3, update to version 8.3.3 or...
CVE-2018-18864: Improper Neutralization of Input During Web Page Generation
Loadbalancer.org Enterprise VA MAX before 8.3.3 has XSS because Apache HTTP Server logs are displayed...
Loadbalancer.org Enterprise VA 7.5.2 - Static SSH Key
No description provided by source. ----------- Author: ----------- xistence xistenceat0x90.nl ------------------------- Affected products: ------------------------- Loadbalancer.org Enterprise VA 7.5.2 and below ------------------------- Affected vendors: ------------------------- Loadbalancer.or...