57 matches found
CVE-2019-11363
A SQL injection vulnerability in Snare Central before 7.4.5 allows remote authenticated attackers to execute arbitrary SQL commands via the AgentConsole/UserGroupQuery.php ShowUser parameter...
EUVD-2011-5148
Malware in sbrugna...
EUVD-2017-15066
Malware in sbrugna...
EUVD-2019-3041
Malware in sbrugna...
EUVD-2019-3042
Malware in sbrugna...
EUVD-2011-5149
Malware in sbrugna...
EUVD-2011-5146
Malware in sbrugna...
MAL-2025-36266 Malicious code in test-mlw2-snare-basil (npm)
The package test-mlw2-snare-basil was found to contain malicious code...
Malicious code in test-mlw2-snare-basil (npm)
The package test-mlw2-snare-basil was found to contain malicious code...
CVE-2019-11364
An OS Command Injection vulnerability in Snare Central before 7.4.5 allows remote authenticated attackers to inject arbitrary OS commands via the ServerConf/DataManagement/DiskManager.php FORMNASshare parameter...
Snare for Linux Password Disclosure Vulnerability
Snare for Linux is a log collection and analysis tool for Linux-based platforms. A security vulnerability exists in versions of Snare prior to 1.7.0 for Linux-based platforms, which stems from a rendered page containing a RemotePassword field. An attacker can exploit this vulnerability to obtain ...
Snare for Linux Cross-Site Request Forgery Vulnerability
Snare for Linux is a log collection and analysis tool for Linux-based platforms. A cross-site request forgery vulnerability exists in the web interface in versions of Snare prior to 1.7.0 for Linux-based platforms. The vulnerability stems from a WEB application that does not adequately validate...
CVE-2011-5247
Snare for Linux before 1.7.0 has password disclosure because the rendered page contains the field RemotePassword...
CVE-2011-5250
Snare for Linux before 1.7.0 has CSRF in the web interface...
Design/Logic Flaw
Snare for Linux before 1.7.0 has password disclosure because the rendered page contains the field RemotePassword...
Cross site request forgery (csrf)
Snare for Linux before 1.7.0 has CSRF in the web interface...
CVE-2011-5250
Snare for Linux before 1.7.0 has CSRF in the web interface...
CVE-2011-5250
Snare for Linux prior to version 1.7.0 contains a cross‑site request forgery (CSRF) vulnerability in its web interface. The issue arises from improper implementation of the ChToken CSRF protection, which could allow an attacker to induce an authenticated user to perform unwanted actions via the w...
CVE-2011-5247
Snare for Linux before 1.7.0 has password disclosure because the rendered page contains the field RemotePassword...
CVE-2011-5247
CVE-2011-5247 affects Snare for Linux prior to 1.7.0. The vulnerability arises in the web interface ( RemotePassword field in the /remote page); the password is disclosed by inspecting the page source, as the MD5 hash of the password is exposed. This constitutes an information disclosure vulnerab...