13892 matches found
CVE-2024-12831
CVE-2024-12831 affects Arista NG Firewall. The vulnerability lies in the uvm_login module, caused by incorrect authorization , enabling a local attacker who can execute code with low privileges to escalate to resources normally protected by the system. Public disclosures in multiple feeds (e.g., ...
CVE-2024-12832 Arista NG Firewall ReportEntry SQL Injection Arbitrary File Read and Write Vulnerability
Arista NG Firewall ReportEntry SQL Injection Arbitrary File Read and Write Vulnerability. This vulnerability allows remote attackers to create arbitrary files and disclose sensitive information on affected installations of Arista NG Firewall. Authentication is required to exploit this...
CVE-2024-12832
Arista NG Firewall vulnerability CVE-2024-12832: ReportEntry allows SQL injection due to insufficient validation of a user-supplied string used to build queries, enabling arbitrary file read/write and potential code execution under www-data. Authenticated requirement; no concrete fix/version info...
CVE-2024-12832 Arista NG Firewall ReportEntry SQL Injection Arbitrary File Read and Write Vulnerability
Arista NG Firewall ReportEntry SQL Injection Arbitrary File Read and Write Vulnerability. This vulnerability allows remote attackers to create arbitrary files and disclose sensitive information on affected installations of Arista NG Firewall. Authentication is required to exploit this...
CVE-2024-12830 Arista NG Firewall custom_handler Directory Traversal Remote Code Execution Vulnerability
Arista NG Firewall customhandler Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Arista NG Firewall. Authentication is not required to exploit this vulnerability. The specific flaw exists...
CVE-2024-12830
The CVE-2024-12830 entry concerns Arista NG Firewall, where the flaw exists in the custom_handler method and results from insufficient validation of a user-supplied path before file operations. This directory traversal vulnerability allows remote attackers to execute arbitrary code, with no authe...
CVE-2024-12830 Arista NG Firewall custom_handler Directory Traversal Remote Code Execution Vulnerability
Arista NG Firewall customhandler Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Arista NG Firewall. Authentication is not required to exploit this vulnerability. The specific flaw exists...
CVE-2024-12829
The CVE-2024-12829 entry maps to Arista NG Firewall, specifically the ExecManagerImpl component. The flaw is a command-injection vulnerability caused by insufficient validation of a user-supplied string before it is used to execute a system call, allowing remote code execution with root privilege...
CVE-2024-12829 Arista NG Firewall ExecManagerImpl Command Injection Remote Code Execution Vulnerability
Arista NG Firewall ExecManagerImpl Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Arista NG Firewall. Authentication is required to exploit this vulnerability. The specific flaw exists within...
CVE-2024-12829 Arista NG Firewall ExecManagerImpl Command Injection Remote Code Execution Vulnerability
Arista NG Firewall ExecManagerImpl Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Arista NG Firewall. Authentication is required to exploit this vulnerability. The specific flaw exists within...
Arista NG Firewall SQL注入漏洞
Arista NG Firewall is a WEB firewall from Arista USA. Arista NG Firewall suffers from a SQL injection vulnerability that stems from a lack of proper validation before constructing a SQL query using a user-supplied string, resulting in a SQL Injection Arbitrary File Read/Write vulnerability that...
Arista NG Firewall 路径遍历漏洞
Arista NG Firewall is a WEB firewall from Arista Corporation. A path traversal vulnerability exists in Arista NG Firewall that stems from a lack of proper validation before using user-supplied paths in file operations, resulting in a directory traversal remote code execution vulnerability that...
MONITORAPP Application Insight Web Application Firewall 安全漏洞
MONITORAPP Application Insight Web Application Firewall MONITORAPP AIWAF is a WEB FIREWALL from MONITORAPP USA. A security vulnerability exists in MONITORAPP Application Insight Web Application Firewall. An attacker can exploit this vulnerability to inject malicious scripts...
CVE-2021-40959
CVE-2021-40959 – MONITORAPP AIWAF is affected by a reflected cross-site scripting vulnerability on the subpage /process_management/process_status.xhr.php. Affected versions are AIWAF <= 4.1.6 and
Arista NG Firewall 安全漏洞
Arista NG Firewall is a WEB firewall from Arista USA. A security vulnerability exists in Arista NG Firewall that stems from incorrect authorization and allows a local attacker to elevate privileges...
Arista NG Firewall 操作系统命令注入漏洞
Arista NG Firewall is a WEB firewall from Arista USA. Arista NG Firewall suffers from an operating system command injection vulnerability that stems from a lack of proper validation before executing a system call using a user-supplied string, resulting in a command injection remote code execution...
CVE-2021-40959
A reflected cross-site scripting vulnerability in MONITORAPP Application Insight Web Application Firewall AIWAF = 4.1.6 and =5.0 was identified on the subpage /processmanagement/processstatus.xhr.php. This vulnerability allows an attacker to inject malicious scripts that execute in the context of...
CVE-2024-12727
A pre-auth SQL injection vulnerability in the email protection feature of Sophos Firewall versions older than 21.0 MR1 21.0.1 allows access to the reporting database and can lead to remote code execution if a specific configuration of Secure PDF eXchange SPX is enabled in combination with the...
