7685 matches found
Code injection
Paessler PRTG before 16.2.24.4045 has XSS via SNMP...
Code injection
Spiceworks Desktop before 2015-12-01 has XSS via an SNMP response...
CVE-2015-6021
Spiceworks Desktop before 2015-12-01 has XSS via an SNMP response...
CVE-2015-6035
Opsview before 2015-11-06 has XSS via SNMP...
CVE-2016-5074
CVE-2016-5074 affects CloudView NMS prior to version 2.10a. Connected sources consistently describe a format-string vulnerability in CloudView NMS that is exploitable over SNMP. The vulnerability arises in formatting-related handling within the affected component, enabling potential descriptor in...
CVE-2016-5074
CloudView NMS before 2.10a has a format string issue exploitable over SNMP...
CVE-2016-5077
Netikus EventSentry is affected by a cross-site scripting (XSS) vulnerability via SNMP in versions prior to 3.2.1.44. Root cause: input processed via SNMP is reflected/processed in a way that enables script injection. Impact per CVSS: limited integrity impact, no confidentiality or availability i...
CVE-2016-5642
CVE-2016-5642 affects Opmantek NMIS prior to 8.5.12G, with a cross-site scripting (XSS) flaw exploitable via SNMP. A remote attacker with SNMP access can inject arbitrary web script or HTML into NMIS web sessions, potentially impacting user-facing interfaces. Public sources in connected documents...
CVE-2016-5073
CloudView NMS (before 2.10a) is reported vulnerable to Cross‑Site Scripting (XSS) via SNMP. The CNVD entry confirms a remote attacker can inject arbitrary script/HTML through SNMP, with impact limited to the web interface’s confidentiality/ integrity, and requires no authentication due to SNMP ex...
CVE-2016-5077
Netikus EventSentry before 3.2.1.44 has XSS via SNMP...
CVE-2015-6035
CVE-2015-6035 affects Opsview prior to 2015-11-06. Multiple connected sources confirm a cross-site scripting (XSS) vulnerability exploitable via the SNMP interface, enabling an attacker to injected arbitrary web script/HTML in the user’s browser. The CNVD entry reiterates remote exploitation via ...
CVE-2016-5078
CVE-2016-5078 affects Paessler PRTG before version 16.2.24.4045, containing a cross‑site scripting (XSS) vulnerability via SNMP. The description in multiple sources confirms the issue is a PRTG XSS via SNMP path, with the vulnerable component being the PRTG Web UI flow triggered by SNMP data. The...
CVE-2016-5078
Paessler PRTG before 16.2.24.4045 has XSS via SNMP...
CVE-2015-6021
Spiceworks Desktop is affected by CVE-2015-6021: before 2015-12-01, XSS via an SNMP response can execute script in a user’s browser session. Root cause: improper handling of SNMP responses leads to cross-site scripting. Exploitation details are not provided in the documents. Remediation/patch inf...
CVE-2016-5073
CloudView NMS before 2.10a has XSS via SNMP...
CVE-2016-5642
Opmantek NMIS before 8.5.12G has XSS via SNMP...
CVE-2015-6027
Castle Rock Computing SNMPc is vulnerable to Cross-Site Scripting via SNMP in versions prior to 2015-12-17. Affected component is SNMPc; root cause is a XSS vulnerability exploitable through SNMP. Public impact details are limited to what is stated in the sources (XSS; potential for modification ...
PT-2017-6917
Name of the Vulnerable Software and Affected Versions Spiceworks Desktop versions prior to 2015-12-01 Description The issue is related to a security problem where an SNMP response can lead to XSS. Recommendations For versions prior to 2015-12-01, update to a version released after 2015-12-01 to...
PT-2017-6919
Name of the Vulnerable Software and Affected Versions Castle Rock Computing SNMPc versions prior to 2015-12-17 Description The issue allows for cross-site scripting XSS attacks via SNMP. Recommendations For versions prior to 2015-12-17, update to a version released after 2015-12-17 to resolve the...
