Lucene search
+L

6 matches found

CNVD
CNVD
•added 2021/01/29 12:00 a.m.•21 views

Nxlog Code Issue Vulnerability

Nxlog is a U.S. Nxlog company can support a variety of operating systems for log collection, log centralization software. A security vulnerability exists in NXLog Community Edition version 2.10.2150, which originates in the fileop module of the NXLog service that allows remote attackers to cause ...

7.5CVSS6.8AI score0.07599EPSS
SaveExploits3References1
OSV
OSV
•added 2021/01/05 3:15 p.m.•19 views

CVE-2020-35488

The fileop module of the NXLog service in NXLog Community Edition 2.10.2150 allows remote attackers to cause a denial of service daemon crash via a crafted Syslog payload to the Syslog service. This attack requires a specific configuration. Also, the name of the directory created must use a Syslo...

7.5CVSS7.2AI score0.07599EPSS
SaveExploits3References2
Prion
Prion
•added 2021/01/05 3:15 p.m.•31 views

Directory traversal

The fileop module of the NXLog service in NXLog Community Edition 2.10.2150 allows remote attackers to cause a denial of service daemon crash via a crafted Syslog payload to the Syslog service. This attack requires a specific configuration. Also, the name of the directory created must use a Syslo...

4.3CVSS7.2AI score0.07599EPSS
SaveExploits3References2Affected Software1
CVE
CVE
•added 2021/01/05 2:03 p.m.•145 views

CVE-2020-35488

NXLog Community Edition 2.10.2150 is affected via the fileop module, where a crafted Syslog payload can cause a daemon crash (DoS) when the Syslog field is used to name a directory. Exploitation requires a specific configuration (CreateDir enabled and a Syslog-derived directory name), as shown by...

7.5CVSS7.2AI score0.07599EPSS
SaveExploits3References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/05 12:00 a.m.•5 views

CVE-2020-35488: Deserialization of Untrusted Data

The fileop module of the NXLog service in NXLog Community Edition 2.10.2150 allows remote attackers to cause a denial of service daemon crash via a crafted Syslog payload to the Syslog service. This attack requires a specific configuration. Also, the name of the directory created must use a Syslo...

7.5CVSS5.8AI score0.07599EPSS
SaveExploits3References2
CNNVD
CNNVD
•added 2021/01/05 12:00 a.m.•19 views

Nxlog 代码问题漏洞

Nxlog is a U.S. Nxlog company can support a variety of operating systems for log collection, log centralization software. A security vulnerability exists in NXLog Community Edition version 2.10.2150, which originates in the fileop module of the NXLog service that allows remote attackers to cause ...

7.5CVSS7.2AI score0.07599EPSS
SaveExploits3References3
Rows per page
Query Builder