289 matches found
CVE-2022-1799
Incorrect signature trust exists within Google Play services SDK play-services-basement. A debug version of Google Play services is trusted by the SDK for devices that are non-GMS. We recommend upgrading the SDK past the 2022-05-03 release...
Information disclosure
Incorrect signature trust exists within Google Play services SDK play-services-basement. A debug version of Google Play services is trusted by the SDK for devices that are non-GMS. We recommend upgrading the SDK past the 2022-05-03 release...
CVE-2022-1799 Incorrect signature verification on Google play-services-basement in Google Play SDK
Incorrect signature trust exists within Google Play services SDK play-services-basement. A debug version of Google Play services is trusted by the SDK for devices that are non-GMS. We recommend upgrading the SDK past the 2022-05-03 release...
PT-2022-14122 · Google · Google Play Services Sdk Play-Services-Basement
Name of the Vulnerable Software and Affected Versions: Google Play services SDK play-services-basement versions prior to 2022-05-03 release Description: The issue is related to incorrect signature trust within the Google Play services SDK play-services-basement. Specifically, a debug version of...
SonicWall urges customers to patch critical SQL injection bug ASAP
Cybersecurity hardware company, SonicWall, recently released a public security notice about a critical SQL injection flaw affecting its GMS Global Management System and Analytics On-Prem products. The flaw, which is tracked as CVE-2022-22280, is given a 9.4 critical rating. With the high capabili...
SonicWall Issues Patch for Critical Bug Affecting its Analytics and GMS Products
Network security company SonicWall on Friday rolled out fixes to mitigate a critical SQL injection SQLi vulnerability affecting its Analytics On-Prem and Global Management System GMS products. The vulnerability, tracked as CVE-2022-22280, is rated 9.4 for severity on the CVSS scoring system and...
Unauthenticated SQL Injection in SonicWall GMS and Analytics
Improper Neutralization of Special Elements used in an SQL Command leading to Unauthenticated SQL Injection vulnerability, impacting SonicWall GMS and Analytics On-Prem. CVE: CVE-2022-22280 Last updated: Oct. 13, 2022, 7:30 p.m...
PT-2022-3851 · Sonicwall · Sonicwall Analytics On-Prem +1
Name of the Vulnerable Software and Affected Versions: SonicWall GMS versions 9.3.1-SP2-Hotfix1 and earlier SonicWall Analytics On-Prem versions 2.5.0.3-2520 and earlier Description: The issue is related to the improper neutralization of special elements used in an SQL command, leading to an...
kazino-gms-deluxe.com Cross Site Scripting vulnerability OBB-2323645
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2021-20020
A command execution vulnerability in SonicWall GMS 9.3 allows a remote unauthenticated attacker to locally escalate privilege to root...
Command injection
A command execution vulnerability in SonicWall GMS 9.3 allows a remote unauthenticated attacker to locally escalate privilege to root...
CVE-2021-20020
CVE-2021-20020 affects SonicWall Global Management System (GMS) 9.3 . The vulnerability is described as a remote, unauthenticated command execution that leads to local privilege escalation to root on the appliance. Connected sources corroborate a high-severity, network-exposed issue with root-lev...
CVE-2021-20020
A command execution vulnerability in SonicWall GMS 9.3 allows a remote unauthenticated attacker to locally escalate privilege to root...
SonicWall GMS 9.3 unauthenticated remote command execution vulnerability
A command execution vulnerability in SonicWall GMS 9.3 allows a remote unauthenticated attacker to locally escalate privilege to root. CVE: CVE-2021-20020 Last updated: April 10, 2021, 1:08 a.m...
CVE-2021-20020
A command execution vulnerability in SonicWall GMS 9.3 allows a remote unauthenticated attacker to locally escalate privilege to root. Recent assessments: wvu-r7 at April 29, 2021 9:39pm UTC reported: CVE-2021-20020? Seems to be Postgres running in trust mode on TCP port 5029, which essentially...
CVE-2013-1360
An Authentication Bypass vulnerability exists in DELL SonicWALL Global Management System GMS 4.1, 5.0, 5.1, 6.0, and 7.0, Analyzer 7.0, Universal Management Appliance UMA 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, and 6.0 via a crafted request to the SGMS interface, which could let a remote...
CVE-2013-1360
This CVE affects DELL SonicWALL GMS, Analyzer, UMA, and ViewPoint products. A crafted request to the SGMS interface (/sgms/) allows an unauthenticated remote attacker to bypass authentication and gain full administrative access to the web interface, potentially compromising all managed appliances...
CVE-2019-7478
A vulnerability in GMS allow unauthenticated user to SQL injection in Webservice module. This vulnerability affected GMS versions GMS 8.4, 8.5, 8.6, 8.7, 9.0 and 9.1...