Lucene search
+L

51 matches found

CNNVD
CNNVD
added 2023/10/03 12:00 a.m.12 views

Nxlog 跨站请求伪造漏洞

NXLog Manager is a solution that can be used from a browser to easily manage and monitor a large number of NXLog Enterprise instances. NXLog Manager suffers from a cross-site request forgery vulnerability that can be exploited by a remote attacker to submit a specially crafted malicious request...

6.5CVSS6.8AI score0.00232EPSS
SaveExploits0References2
CNVD
CNVD
added 2021/01/29 12:00 a.m.15 views

Nxlog Code Issue Vulnerability

Nxlog is a U.S. Nxlog company can support a variety of operating systems for log collection, log centralization software. A security vulnerability exists in NXLog Community Edition version 2.10.2150, which originates in the fileop module of the NXLog service that allows remote attackers to cause ...

7.5CVSS6.8AI score0.07599EPSS
SaveExploits3References1
NVD
NVD
added 2021/01/05 3:15 p.m.22 views

CVE-2020-35488

The fileop module of the NXLog service in NXLog Community Edition 2.10.2150 allows remote attackers to cause a denial of service daemon crash via a crafted Syslog payload to the Syslog service. This attack requires a specific configuration. Also, the name of the directory created must use a Syslo...

7.5CVSS7.2AI score0.07599EPSS
SaveExploits3References2
Prion
Prion
added 2021/01/05 3:15 p.m.29 views

Directory traversal

The fileop module of the NXLog service in NXLog Community Edition 2.10.2150 allows remote attackers to cause a denial of service daemon crash via a crafted Syslog payload to the Syslog service. This attack requires a specific configuration. Also, the name of the directory created must use a Syslo...

4.3CVSS7.2AI score0.07599EPSS
SaveExploits3References2Affected Software1
CVE
CVE
added 2021/01/05 2:03 p.m.136 views

CVE-2020-35488

NXLog Community Edition 2.10.2150 is affected via the fileop module, where a crafted Syslog payload can cause a daemon crash (DoS) when the Syslog field is used to name a directory. Exploitation requires a specific configuration (CreateDir enabled and a Syslog-derived directory name), as shown by...

7.5CVSS7.2AI score0.07599EPSS
SaveExploits3References2Affected Software1
Cvelist
Cvelist
added 2021/01/05 2:03 p.m.25 views

CVE-2020-35488

The fileop module of the NXLog service in NXLog Community Edition 2.10.2150 allows remote attackers to cause a denial of service daemon crash via a crafted Syslog payload to the Syslog service. This attack requires a specific configuration. Also, the name of the directory created must use a Syslo...

7.2AI score0.07599EPSS
SaveExploits3References2
CNNVD
CNNVD
added 2021/01/05 12:00 a.m.12 views

Nxlog 代码问题漏洞

Nxlog is a U.S. Nxlog company can support a variety of operating systems for log collection, log centralization software. A security vulnerability exists in NXLog Community Edition version 2.10.2150, which originates in the fileop module of the NXLog service that allows remote attackers to cause ...

7.5CVSS7.2AI score0.07599EPSS
SaveExploits3References3
Packet Storm
Packet Storm
added 2020/12/17 12:00 a.m.304 views

Nxlog Community Edition 2.10.2150 Denial Of Service

Exploit Title: Nxlog Community Edition 2.10.2150 - DoS Poc Date: 15/12/2020 Exploit Author: Guillaume PETIT Vendor Homepage: https://nxlog.co Software Link: https://nxlog.co/products/nxlog-community-edition/download Version: 2.10.2150 Tested on: Linux Debian 10 && Windows Server 2019...

0.1AI score
SaveExploits0
zdt
zdt
added 2020/12/17 12:00 a.m.35 views

nxlog 2.10.2150 - Denial of Service Exploit

Exploit Title: nxlog 2.10.2150 - DoS Poc Exploit Author: Guillaume PETIT Vendor Homepage: https://nxlog.co Software Link: https://nxlog.co/products/nxlog-community-edition/download Version: 2.10.2150 Tested on: Linux Debian 10 && Windows Server 2019 !/usr/bin/python3 import sys import time import...

7.4AI score
SaveExploits0
Exploit DB
Exploit DB
added 2020/12/17 12:00 a.m.646 views

Nxlog Community Edition 2.10.2150 - DoS (Poc)

Exploit Title: Nxlog Community Edition 2.10.2150 - DoS Poc Date: 15/12/2020 Exploit Author: Guillaume PETIT Vendor Homepage: https://nxlog.co Software Link: https://nxlog.co/products/nxlog-community-edition/download Version: 2.10.2150 Tested on: Linux Debian 10 && Windows Server 2019 CVE:...

7.5CVSS7.3AI score0.07599EPSS
SaveExploits3
GithubExploit
GithubExploit
added 2020/12/15 5:55 p.m.153 views

Exploit for Deserialization of Untrusted Data in Nxlog

I have found a vulnerability in product: nxlog-ce2.10.2150...

7.5CVSS7.7AI score0.07599EPSS
SaveExploits3
Rows per page
Query Builder