45 matches found
CVE-2023-23063
Cellinx NVT v1.0.6.002b was discovered to contain a local file disclosure vulnerability via the component /cgi-bin/GetFileContent.cgi...
CVE-2023-23063
Cellinx NVT v1.0.6.002b was discovered to contain a local file disclosure vulnerability via the component /cgi-bin/GetFileContent.cgi...
CVE-2023-23063
Cellinx NVT v1.0.6.002b was discovered to contain a local file disclosure vulnerability via the component /cgi-bin/GetFileContent.cgi...
Arbitrary file deletion
Cellinx NVT v1.0.6.002b was discovered to contain a local file disclosure vulnerability via the component /cgi-bin/GetFileContent.cgi...
CVE-2023-23063
Cellinx NVT v1.0.6.002b was discovered to contain a local file disclosure vulnerability via the component /cgi-bin/GetFileContent.cgi...
CVE-2023-23063: Improper Limitation of a Pathname to a Restricted Directory
Cellinx NVT v1.0.6.002b was discovered to contain a local file disclosure vulnerability via the component /cgi-bin/GetFileContent.cgi...
CVE-2023-23063
The Cellinx NVT camera appliance (version v1.0.6.002b ) is susceptible to a local file disclosure vulnerability within the /cgi-bin/GetFileContent.cgi component. The root cause is a path traversal issue where unauthenticated attackers can read arbitrary files via the PATH parameter. This could le...
PT-2023-18829
Name of the Vulnerable Software and Affected Versions Cellinx NVT version 1.0.6.002b Description The issue is related to a local file disclosure vulnerability. It can be exploited via the /cgi-bin/GetFileContent.cgi component. Recommendations For Cellinx NVT version 1.0.6.002b, consider restricti...
CVE-2022-30621 Cellinx NVT – IP PTZ Camera local file inclusion
Allows a remote user to read files on the camera's OS "GetFileContent.cgi". Reading arbitrary files on the camera's OS as root user...
Cellinx NVT IP PTZ 安全漏洞
The Cellinx NVT IP PTZ is a camera device from Cellinx Korea. A security vulnerability exists in the Cellinx NVT IP PTZ that allows a remote attacker to read arbitrary files on the camera's operating system as root...
CVE-2020-28250
Cellinx NVT Web Server 5.0.0.014b.test 2019-09-05 allows a remote user to run commands as root via SetFileContent.cgi because authentication is on the client side...
Authentication flaw
Cellinx NVT Web Server 5.0.0.014b.test 2019-09-05 allows a remote user to run commands as root via SetFileContent.cgi because authentication is on the client side...
CVE-2020-28250
Cellinx NVT Web Server 5.0.0.014b.test 2019-09-05 allows a remote user to run commands as root via SetFileContent.cgi because authentication is on the client side...
CVE-2020-28250
CVE-2020-28250 affects Cellinx NVT Web Server 5.0.0.014b.test (2019-09-05). The vulnerability allows a remote user to run commands as root via SetFileContent.cgi because authentication is performed on the client side. Exploitation details are not provided in the documents; no patch/version remedi...
PT-2020-16955
Name of the Vulnerable Software and Affected Versions Cellinx NVT Web Server version 5.0.0.014b.test Description The issue allows a remote user to run commands as root via SetFileContent.cgi because authentication is performed on the client side. This means that the authentication checks are done...
CVE-2020-28250: Undefined Security Weakness
Cellinx NVT Web Server 5.0.0.014b.test 2019-09-05 allows a remote user to run commands as root via SetFileContent.cgi because authentication is on the client side...
zeek -- Various vulnerabilities
Jon Siwek of Corelight reports: This release fixes the following security issues: Fix potential stack overflow in NVT analyzer Fix NVT analyzer memory leak from multiple telnet authn name options Fix multiple content-transfer-encoding headers causing a memory leak Fix potential leak of Analyzers...
Great OpenVAS news: delay in plugin feed will be dropped, new GVM-Tools for remote management released
Jan Oliver Wagner, CEO of Greenbone and OpenVAS Community leader sent recently several messages to community email list with the great news. First of all, Greenbone decided to drop two weeks delay in a free plugin feed, that was implemented in June 2017 and made some OpenVAS users pretty nervous....
Open Source Vulnerability Scanner: OpenVAS
OpenVAS is a framework of several services and tools offering a comprehensive and powerful vulnerability scanning and vulnerability management solution.The powerful and comprehensive OpenVAS solution is available as Free Software and maintained on a daily basis. Open Source Vulnerability Scanner:...
Microsoft .NET Framework Security Bypass Vulnerability
The host is installed with Microsoft .NET Framework and is prone to security bypass vulnerability This NVT has been replaced by NVT secpodms11-044.nasl OID:1.3.6.1.4.1.25623.1.0.902522. OpenVAS Vulnerability Test $Id: secpodmsdotnetsecuritybypassvuln.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft...