Lucene search
+L

12615 matches found

CNVD
CNVD
•added 2017/02/24 12:00 a.m.•23 views

Dell SonicWall Secure Remote Access Server Command Injection Vulnerability

Dell SonicWall Secure Remote Access is a SonicWALL Secure Remote Access Series appliance within the Dell SonicWall Secure Mobile Access solution. An input validation vulnerability in the diagnostics CGI /cgi-bin/diagnostics component of the web management interface of the Dell SonicWall Secure...

10CVSS7.5AI score0.23296EPSS
SaveExploits5References1
OpenVAS
OpenVAS
•added 2017/02/24 12:00 a.m.•17 views

Debian: Security Advisory (DSA-3794-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.5AI score0.00421EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2017/02/22 7:59 p.m.•29 views

CVE-2017-6188

Munin before 2.999.6 has a local file write vulnerability when CGI graphs are enabled. Setting multiple upperlimit GET parameters allows overwriting any file accessible to the www-data user...

5.5CVSS6.4AI score
SaveExploits0References5
NVD
NVD
•added 2017/02/22 7:59 p.m.•22 views

CVE-2017-6188

Munin before 2.999.6 has a local file write vulnerability when CGI graphs are enabled. Setting multiple upperlimit GET parameters allows overwriting any file accessible to the www-data user...

5.5CVSS5.3AI score0.00421EPSS
SaveExploits0References5
Prion
Prion
•added 2017/02/22 7:59 p.m.•25 views

Design/Logic Flaw

Munin before 2.999.6 has a local file write vulnerability when CGI graphs are enabled. Setting multiple upperlimit GET parameters allows overwriting any file accessible to the www-data user...

1.9CVSS5.2AI score0.00421EPSS
SaveExploits0References5Affected Software2
Cvelist
Cvelist
•added 2017/02/22 7:00 p.m.•37 views

CVE-2017-6188

Munin before 2.999.6 has a local file write vulnerability when CGI graphs are enabled. Setting multiple upperlimit GET parameters allows overwriting any file accessible to the www-data user...

5.2AI score0.00421EPSS
SaveExploits0References5
Mend
Mend
•added 2017/02/22 7:00 p.m.•7 views

CVE-2017-6188

Munin before 2.999.6 has a local file write vulnerability when CGI graphs are enabled. Setting multiple upperlimit GET parameters allows overwriting any file accessible to the www-data user...

6.8CVSS0.00421EPSS
SaveExploits0References7
CVE
CVE
•added 2017/02/22 7:00 p.m.•171 views

CVE-2017-6188

CVE-2017-6188 affects Munin prior to a fixed version where CGI graphs enabled allow a local file overwrite by abusing multiple upper_limit GET parameters. The vulnerability enables overwriting any file accessible to the webserver user (www-data). Public disclosures and advisories in connected doc...

5.5CVSS5.2AI score0.00421EPSS
SaveExploits0References5Affected Software1
AlpineLinux
AlpineLinux
•added 2017/02/22 7:00 p.m.•89 views

CVE-2017-6188

Munin before 2.999.6 has a local file write vulnerability when CGI graphs are enabled. Setting multiple upperlimit GET parameters allows overwriting any file accessible to the www-data user...

5.5CVSS5.4AI score0.00421EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2017/02/22 7:00 p.m.•38 views

CVE-2017-6188

Munin before 2.999.6 has a local file write vulnerability when CGI graphs are enabled. Setting multiple upperlimit GET parameters allows overwriting any file accessible to the www-data user...

5.5CVSS5.3AI score0.00421EPSS
SaveExploits0
NVD
NVD
•added 2017/02/22 5:59 a.m.•35 views

CVE-2016-9683

The SonicWall Secure Remote Access server version 8.1.0.2-14sv is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. This vulnerability occurs in the 'extensionsettings' CGI /cgi-bin/extensionsettings component responsible for handling some of the server's...

10CVSS9.8AI score0.11554EPSS
SaveExploits3References4
NVD
NVD
•added 2017/02/22 5:59 a.m.•31 views

CVE-2016-9684

The SonicWall Secure Remote Access server version 8.1.0.2-14sv is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. This vulnerability occurs in the 'viewcert' CGI /cgi-bin/viewcert component responsible for processing SSL certificate information. The CGI...

10CVSS9.9AI score0.07064EPSS
SaveExploits3References4
Prion
Prion
•added 2017/02/22 5:59 a.m.•25 views

Command injection

The SonicWall Secure Remote Access server version 8.1.0.2-14sv is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. This vulnerability occurs in the 'extensionsettings' CGI /cgi-bin/extensionsettings component responsible for handling some of the server's...

10CVSS8AI score0.11554EPSS
SaveExploits3References4Affected Software1
osv_cve
osv_cve
•added 2017/02/22 5:59 a.m.•23 views

CVE-2016-9683

The SonicWall Secure Remote Access server version 8.1.0.2-14sv is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. This vulnerability occurs in the 'extensionsettings' CGI /cgi-bin/extensionsettings component responsible for handling some of the server's...

9.8CVSS5.8AI score0.11554EPSS
SaveExploits3References4
Prion
Prion
•added 2017/02/22 5:59 a.m.•15 views

Command injection

The SonicWall Secure Remote Access server version 8.1.0.2-14sv is vulnerable to two Remote Command Injection vulnerabilities in its web administrative interface. These vulnerabilities occur in the diagnostics CGI /cgi-bin/diagnostics component responsible for emailing out information about the...

10CVSS8.2AI score0.23296EPSS
SaveExploits5References4Affected Software1
osv_cve
osv_cve
•added 2017/02/22 5:59 a.m.•10 views

CVE-2016-9682

The SonicWall Secure Remote Access server version 8.1.0.2-14sv is vulnerable to two Remote Command Injection vulnerabilities in its web administrative interface. These vulnerabilities occur in the diagnostics CGI /cgi-bin/diagnostics component responsible for emailing out information about the...

9.8CVSS5.8AI score0.23296EPSS
SaveExploits5References4
osv_cve
osv_cve
•added 2017/02/22 5:59 a.m.•18 views

CVE-2016-9684

The SonicWall Secure Remote Access server version 8.1.0.2-14sv is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. This vulnerability occurs in the 'viewcert' CGI /cgi-bin/viewcert component responsible for processing SSL certificate information. The CGI...

9.8CVSS5.8AI score0.07064EPSS
SaveExploits3References4
Prion
Prion
•added 2017/02/22 5:59 a.m.•27 views

Command injection

The SonicWall Secure Remote Access server version 8.1.0.2-14sv is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. This vulnerability occurs in the 'viewcert' CGI /cgi-bin/viewcert component responsible for processing SSL certificate information. The CGI...

10CVSS8.1AI score0.07064EPSS
SaveExploits3References4Affected Software1
CVE
CVE
•added 2017/02/22 5:00 a.m.•67 views

CVE-2016-9684

Dell SonicWALL Secure Remote Access (SRA) server, version 8.1.0.2-14sv, is vulnerable to a remote command injection in the web admin CGI at /cgi-bin/viewcert. The CGI does not properly escape the CERT input before a system() call, enabling an attacker to execute arbitrary shell commands and gain ...

10CVSS9.8AI score0.07064EPSS
SaveExploits3References4Affected Software1
Cvelist
Cvelist
•added 2017/02/22 5:00 a.m.•40 views

CVE-2016-9682

The SonicWall Secure Remote Access server version 8.1.0.2-14sv is vulnerable to two Remote Command Injection vulnerabilities in its web administrative interface. These vulnerabilities occur in the diagnostics CGI /cgi-bin/diagnostics component responsible for emailing out information about the...

10AI score0.23296EPSS
SaveExploits5References4
Rows per page
Query Builder