71 matches found
CVE-2011-5247
Snare for Linux before 1.7.0 has password disclosure because the rendered page contains the field RemotePassword...
CVE-2011-5247
CVE-2011-5247 affects Snare for Linux prior to 1.7.0. The vulnerability arises in the web interface ( RemotePassword field in the /remote page); the password is disclosed by inspecting the page source, as the MD5 hash of the password is exposed. This constitutes an information disclosure vulnerab...
CVE-2011-5250: Cross-Site Request Forgery (CSRF)
Snare for Linux before 1.7.0 has CSRF in the web interface...
CVE-2011-5247: Cleartext Storage of Sensitive Information
Snare for Linux before 1.7.0 has password disclosure because the rendered page contains the field RemotePassword...
PT-2020-7158
Name of the Vulnerable Software and Affected Versions Snare for Linux versions prior to 1.7.0 Description The issue concerns a CSRF in the web interface. Recommendations For versions prior to 1.7.0, update to version 1.7.0 or later to resolve the issue...
PT-2020-7157
Name of the Vulnerable Software and Affected Versions Snare for Linux versions prior to 1.7.0 Description The issue is related to password disclosure. The rendered page contains the field RemotePassword, which leads to the exposure of passwords. Recommendations For versions prior to 1.7.0, update...
CVE-2019-11364
An OS Command Injection vulnerability in Snare Central before 7.4.5 allows remote authenticated attackers to inject arbitrary OS commands via the ServerConf/DataManagement/DiskManager.php FORMNASshare parameter...
CVE-2019-11363
A SQL injection vulnerability in Snare Central before 7.4.5 allows remote authenticated attackers to execute arbitrary SQL commands via the AgentConsole/UserGroupQuery.php ShowUser parameter...
CVE-2019-11364
An OS Command Injection vulnerability in Snare Central before 7.4.5 allows remote authenticated attackers to inject arbitrary OS commands via the ServerConf/DataManagement/DiskManager.php FORMNASshare parameter...
CVE-2019-11363
A SQL injection vulnerability in Snare Central before 7.4.5 allows remote authenticated attackers to execute arbitrary SQL commands via the AgentConsole/UserGroupQuery.php ShowUser parameter...
Sql injection
A SQL injection vulnerability in Snare Central before 7.4.5 allows remote authenticated attackers to execute arbitrary SQL commands via the AgentConsole/UserGroupQuery.php ShowUser parameter...
Command injection
An OS Command Injection vulnerability in Snare Central before 7.4.5 allows remote authenticated attackers to inject arbitrary OS commands via the ServerConf/DataManagement/DiskManager.php FORMNASshare parameter...
CVE-2019-11364
CVE-2019-11364 describes an OS command injection in Snare Central prior to 7.4.5. The vulnerability allows remote authenticated attackers to inject arbitrary OS commands via the ServerConf/DataManagement/DiskManager.php FORMNAS_share parameter. Affected product is Snare Central; root cause is uns...
CVE-2019-11364
An OS Command Injection vulnerability in Snare Central before 7.4.5 allows remote authenticated attackers to inject arbitrary OS commands via the ServerConf/DataManagement/DiskManager.php FORMNASshare parameter...
CVE-2019-11363
A SQL injection vulnerability in Snare Central before 7.4.5 allows remote authenticated attackers to execute arbitrary SQL commands via the AgentConsole/UserGroupQuery.php ShowUser parameter...
CVE-2019-11363
CVE-2019-11363: Snare Central is affected by an SQL injection in versions prior to 7.4.5. The vulnerability allows remote authenticated attackers to execute arbitrary SQL commands via the AgentConsole/UserGroupQuery.php ShowUser parameter. Red Hat and other sources corroborate the issue and refer...
PT-2019-12259
Name of the Vulnerable Software and Affected Versions Snare Central versions prior to 7.4.5 Description The issue allows remote authenticated attackers to inject arbitrary OS commands. This is achieved via the FORMNAS share parameter in the ServerConf/DataManagement/DiskManager.php file...
Prophecy International Snare Central SQL Injection Vulnerability
Prophecy International Snare Central is a suite of log collection and management tools from Prophecy International Australia. A SQL injection vulnerability exists in Prophecy International Snare Central versions prior to 7.4.5, which stems from a lack of validation of externally-entered SQL...
CVE-2019-11363: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in Snare Central before 7.4.5 allows remote authenticated attackers to execute arbitrary SQL commands via the AgentConsole/UserGroupQuery.php ShowUser parameter...
CVE-2019-11364: Improper Neutralization of Special Elements used in an OS Command
An OS Command Injection vulnerability in Snare Central before 7.4.5 allows remote authenticated attackers to inject arbitrary OS commands via the ServerConf/DataManagement/DiskManager.php FORMNASshare parameter...