13911 matches found
CVE-2022-3226
An OS command injection vulnerability allows admins to execute code via SSL VPN configuration uploads in Sophos Firewall releases older than version 19.5 GA...
PT-2022-5774 · Sophos · Sophos Firewall
Name of the Vulnerable Software and Affected Versions: Sophos Firewall versions prior to 19.5 GA Description: The issue allows for OS command injection, enabling the execution of code via SSL VPN configuration uploads. This can be exploited by a remote attacker to execute arbitrary code...
CVE-2022-3709
A stored XSS vulnerability allows admin to super-admin privilege escalation in the Webadmin import group wizard of Sophos Firewall releases older than version 19.5 GA...
PT-2022-23706 · Sophos · Sophos Firewall
Name of the Vulnerable Software and Affected Versions: Sophos Firewall versions prior to 19.5 GA Description: A post-auth code injection issue allows admins to execute code in the Webadmin of Sophos Firewall. This issue does not specify the estimated number of potentially affected devices worldwi...
CVE-2022-3710
Sophos Firewall (pre-19.5 GA) is affected by a post-auth, read‑only SQL injection in the API controller that enables API clients to read non‑sensitive configuration data from the configuration database. The vulnerability’s exploit is described as read access without altering data (impact: confide...
Mitsubishi Electric MELSEC iQ-R Series
1. EXECUTIVE SUMMARY CVSS v3 8.6 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mitsubishi Electric Equipment: MELSEC iQ-R Series Vulnerability: Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a remote unauthenticated attacker...
CVE-2022-3711
A post-auth read-only SQL injection vulnerability allows users to read non-sensitive configuration database contents in the User Portal of Sophos Firewall releases older than version 19.5 GA...
Sophos Firewall 跨站脚本漏洞
Sophos Firewall is a firewall from Sophos UK. A cross-site scripting vulnerability exists in versions prior to Sophos Firewall 19.5GA that allows administrators to escalate Super Administrator privileges via stored cross-site scripting...
CVE-2022-3710
A post-auth read-only SQL injection vulnerability allows API clients to read non-sensitive configuration database contents in the API controller of Sophos Firewall releases older than version 19.5 GA...
PT-2022-23827 · Sophos · Sophos Firewall
Name of the Vulnerable Software and Affected Versions: Sophos Firewall versions prior to 19.5 GA Description: A code injection issue allows adjacent attackers to execute code in the Wifi controller. Recommendations: For versions prior to 19.5 GA, update to version 19.5 GA or later to resolve the...
CVE-2022-3696
A post-auth code injection vulnerability allows admins to execute code in Webadmin of Sophos Firewall releases older than version 19.5 GA...
Sophos Firewall SQL注入漏洞
Sophos Firewall is a firewall from Sophos UK. A SQL injection vulnerability exists in versions prior to Sophos Firewall 19.5GA that allows API clients to read the contents of the configuration database in their API controller via SQL injection...
CVE-2022-3696
A post-auth code injection vulnerability allows admins to execute code in Webadmin of Sophos Firewall releases older than version 19.5 GA...
Sophos Firewall 操作系统命令注入漏洞
Sophos Firewall is a firewall from Sophos UK. Sophos Firewall version 19.5GA suffers from an operating system command injection vulnerability that stems from the fact that an attacker can achieve command injection leading to code execution by an administrator via its SSL VPN configuration file...
CVE-2022-3711
CVE-2022-3711 affects Sophos Firewall (User Portal) and is a post-auth, read-only SQL injection that enables reading non-sensitive configuration database contents. The issue exists in releases older than 19.5 GA. Root cause: SQL injection in the User Portal component, allowing an authenticated us...
CVE-2022-3713
A code injection vulnerability allows adjacent attackers to execute code in the Wifi controller of Sophos Firewall releases older than version 19.5 GA...
WordPress All-In-One Security (AIOS) - Security and Firewall plugin cross-site request forgery vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress All-In-One Security AIOS - Security and Firewall plugin version 5.1.0 and earlier is vulnerable to...
WordPress All In One WP Security & Firewall Plugin < 5.1.1 CSRF Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:tipsandtricks-hq:allinonewpsecurity%26firewall"; ifdescripti...
Sophos XG Firewall <= 19.0.1 RCE
A code injection vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v19.0 MR1 and older. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenable, Inc...
