Lucene search
+L

45 matches found

OSV
OSV
•added 2023/02/22 3:15 p.m.•17 views

CVE-2023-23063

Cellinx NVT v1.0.6.002b was discovered to contain a local file disclosure vulnerability via the component /cgi-bin/GetFileContent.cgi...

7.5CVSS5.8AI score0.02431EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2023/02/22 3:15 p.m.•8 views

CVE-2023-23063

Cellinx NVT v1.0.6.002b was discovered to contain a local file disclosure vulnerability via the component /cgi-bin/GetFileContent.cgi...

7.5CVSS7AI score0.02431EPSS
SaveExploits1References3
NVD
NVD
•added 2023/02/22 3:15 p.m.•34 views

CVE-2023-23063

Cellinx NVT v1.0.6.002b was discovered to contain a local file disclosure vulnerability via the component /cgi-bin/GetFileContent.cgi...

7.5CVSS7.4AI score0.02431EPSS
SaveExploits1References1
Prion
Prion
•added 2023/02/22 3:15 p.m.•31 views

Arbitrary file deletion

Cellinx NVT v1.0.6.002b was discovered to contain a local file disclosure vulnerability via the component /cgi-bin/GetFileContent.cgi...

5CVSS7.3AI score0.02431EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2023/02/22 12:00 a.m.•42 views

CVE-2023-23063

Cellinx NVT v1.0.6.002b was discovered to contain a local file disclosure vulnerability via the component /cgi-bin/GetFileContent.cgi...

7.6AI score0.02431EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/22 12:00 a.m.•3 views

CVE-2023-23063: Improper Limitation of a Pathname to a Restricted Directory

Cellinx NVT v1.0.6.002b was discovered to contain a local file disclosure vulnerability via the component /cgi-bin/GetFileContent.cgi...

7.5CVSS5.8AI score0.02431EPSS
SaveExploits1References2
CVE
CVE
•added 2023/02/22 12:00 a.m.•142 views

CVE-2023-23063

The Cellinx NVT camera appliance (version v1.0.6.002b ) is susceptible to a local file disclosure vulnerability within the /cgi-bin/GetFileContent.cgi component. The root cause is a path traversal issue where unauthenticated attackers can read arbitrary files via the PATH parameter. This could le...

7.5CVSS7.3AI score0.02431EPSS
SaveIn wildExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2023/02/22 12:00 a.m.•31 views

PT-2023-18829

Name of the Vulnerable Software and Affected Versions Cellinx NVT version 1.0.6.002b Description The issue is related to a local file disclosure vulnerability. It can be exploited via the /cgi-bin/GetFileContent.cgi component. Recommendations For Cellinx NVT version 1.0.6.002b, consider restricti...

7.5CVSS7.2AI score0.02431EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2022/07/18 12:55 p.m.•39 views

CVE-2022-30621 Cellinx NVT – IP PTZ Camera local file inclusion

Allows a remote user to read files on the camera's OS "GetFileContent.cgi". Reading arbitrary files on the camera's OS as root user...

7.6CVSS7.6AI score0.00711EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/07/18 12:00 a.m.•18 views

Cellinx NVT IP PTZ 安全漏洞

The Cellinx NVT IP PTZ is a camera device from Cellinx Korea. A security vulnerability exists in the Cellinx NVT IP PTZ that allows a remote attacker to read arbitrary files on the camera's operating system as root...

7.6CVSS6.8AI score0.00711EPSS
SaveExploits0References2
NVD
NVD
•added 2020/11/06 7:15 a.m.•35 views

CVE-2020-28250

Cellinx NVT Web Server 5.0.0.014b.test 2019-09-05 allows a remote user to run commands as root via SetFileContent.cgi because authentication is on the client side...

10CVSS9.7AI score0.02886EPSS
SaveExploits2References1
Prion
Prion
•added 2020/11/06 7:15 a.m.•20 views

Authentication flaw

Cellinx NVT Web Server 5.0.0.014b.test 2019-09-05 allows a remote user to run commands as root via SetFileContent.cgi because authentication is on the client side...

10CVSS9.6AI score0.02886EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
•added 2020/11/06 6:15 a.m.•39 views

CVE-2020-28250

Cellinx NVT Web Server 5.0.0.014b.test 2019-09-05 allows a remote user to run commands as root via SetFileContent.cgi because authentication is on the client side...

9.7AI score0.02886EPSS
SaveExploits2References1
CVE
CVE
•added 2020/11/06 6:15 a.m.•72 views

CVE-2020-28250

CVE-2020-28250 affects Cellinx NVT Web Server 5.0.0.014b.test (2019-09-05). The vulnerability allows a remote user to run commands as root via SetFileContent.cgi because authentication is performed on the client side. Exploitation details are not provided in the documents; no patch/version remedi...

10CVSS9.5AI score0.02886EPSS
SaveExploits2References1Affected Software1
Positive Technologies
Positive Technologies
•added 2020/11/06 12:00 a.m.•6 views

PT-2020-16955

Name of the Vulnerable Software and Affected Versions Cellinx NVT Web Server version 5.0.0.014b.test Description The issue allows a remote user to run commands as root via SetFileContent.cgi because authentication is performed on the client side. This means that the authentication checks are done...

10CVSS0.02886EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/11/06 12:00 a.m.•8 views

CVE-2020-28250: Undefined Security Weakness

Cellinx NVT Web Server 5.0.0.014b.test 2019-09-05 allows a remote user to run commands as root via SetFileContent.cgi because authentication is on the client side...

10CVSS5.9AI score0.02886EPSS
SaveExploits2References1
FreeBSD
FreeBSD
•added 2020/05/04 12:00 a.m.•24 views

zeek -- Various vulnerabilities

Jon Siwek of Corelight reports: This release fixes the following security issues: Fix potential stack overflow in NVT analyzer Fix NVT analyzer memory leak from multiple telnet authn name options Fix multiple content-transfer-encoding headers causing a memory leak Fix potential leak of Analyzers...

3.7AI score
SaveExploits0References1
Information Security Automation
Information Security Automation
•added 2017/08/31 9:17 p.m.•72 views

Great OpenVAS news: delay in plugin feed will be dropped, new GVM-Tools for remote management released

Jan Oliver Wagner, CEO of Greenbone and OpenVAS Community leader sent recently several messages to community email list with the great news. First of all, Greenbone decided to drop two weeks delay in a free plugin feed, that was implemented in June 2017 and made some OpenVAS users pretty nervous....

6.3AI score
SaveExploits0
n0where
n0where
•added 2012/05/31 12:03 a.m.•32 views

Open Source Vulnerability Scanner: OpenVAS

OpenVAS is a framework of several services and tools offering a comprehensive and powerful vulnerability scanning and vulnerability management solution.The powerful and comprehensive OpenVAS solution is available as Free Software and maintained on a daily basis. Open Source Vulnerability Scanner:...

SaveExploits0
OpenVAS
OpenVAS
•added 2011/05/26 12:00 a.m.•40 views

Microsoft .NET Framework Security Bypass Vulnerability

The host is installed with Microsoft .NET Framework and is prone to security bypass vulnerability This NVT has been replaced by NVT secpodms11-044.nasl OID:1.3.6.1.4.1.25623.1.0.902522. OpenVAS Vulnerability Test $Id: secpodmsdotnetsecuritybypassvuln.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft...

5.1CVSS6.5AI score0.20096EPSS
SaveExploits3References1
Rows per page
Query Builder