13093 matches found
CVE-2018-10176
Digital Guardian Management Console 7.1.2.0015 has a Directory Traversal issue...
CVE-2018-10175
Digital Guardian Management Console 7.1.2.0015 has an XXE issue...
CVE-2018-10173
Digital Guardian Management Console 7.1.2.0015 allows authenticated remote code execution because of Arbitrary File Upload functionality...
CVE-2018-10174
Digital Guardian Management Console 7.1.2.0015 has an SSRF issue that allows remote attackers to read arbitrary files via file:// URLs, send TCP traffic to intranet hosts, or obtain an NTLM hash. This can occur even if the logged-in user has a read-only role...
CVE-2018-10079
Geist WatchDog Console 3.2.2 uses a weak ACL for the C:\ProgramData\WatchDog Console directory, which allows local users to modify configuration data by updating 1 config.xml or 2 servers.xml...
CVE-2018-10173
Digital Guardian Management Console 7.1.2.0015 allows authenticated remote code execution because of Arbitrary File Upload functionality...
CVE-2018-10077
XML external entity XXE vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to read arbitrary files via crafted XML data...
CVE-2018-10077
XML external entity XXE vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to read arbitrary files via crafted XML data...
CVE-2018-10079
Geist WatchDog Console 3.2.2 uses a weak ACL for the C:\ProgramData\WatchDog Console directory, which allows local users to modify configuration data by updating 1 config.xml or 2 servers.xml...
Cross site scripting
Cross-site scripting XSS vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to inject arbitrary web script or HTML via a server description...
Directory traversal
Digital Guardian Management Console 7.1.2.0015 has a Directory Traversal issue...
Design/Logic Flaw
Digital Guardian Management Console 7.1.2.0015 allows authenticated remote code execution because of Arbitrary File Upload functionality...
CVE-2018-10079
Geist WatchDog Console 3.2.2 CVE-2018-10079: a weak ACL on C:\ProgramData\WatchDog Console allows a local attacker to modify configuration data by updating config.xml or servers.xml. Root cause is insecure file permissions in the data directory. Impact is limited to local modification of configur...
CVE-2018-10175
CVE-2018-10175 affects Digital Guardian Management Console 7.1.2.0015 and is an XML External Entity (XXE) injection vulnerability. The connected CNVD entry specifies an XML external entity injection that could allow an attacker to cause external web requests, enumerate web content, or read files ...
CVE-2018-10173
CVE-2018-10173 affects Digital Guardian Management Console 7.1.2.0015 and enables authenticated remote code execution via an Arbitrary File Upload vulnerability. The NVD entry documents a NETWORK attack with LOW attack complexity and no user interaction, resulting in high impact (C/H/I/A: HIGH). ...
CVE-2018-10176
Digital Guardian Management Console 7.1.2.0015 has a Directory Traversal issue...
CVE-2018-10078
Cross-site scripting XSS vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to inject arbitrary web script or HTML via a server description...
CVE-2018-10077
Geist WatchDog Console 3.2.2 is affected by an XML External Entity (XXE) vulnerability that allows a remote authenticated administrator to read arbitrary files via crafted XML data. The issue is documented across multiple sources (e.g., NVD entry CVE-2018-10077, CNVD-2018-09907) and specifically ...
CVE-2018-10077
XML external entity XXE vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to read arbitrary files via crafted XML data...
CVE-2018-10174
The CVE concerns Digital Guardian Management Console 7.1.2.0015 with a server-side request forgery (SSRF) vulnerability. The issue lets remote attackers induce the console to access file:// URLs to read arbitrary files, and to send TCP traffic to intranet hosts or obtain NTLM hashes, even when th...