CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2089 matches found

Cvelist•added 2019/04/02 5:20 p.m.•26 views

CVE-2019-7474

A vulnerability in SonicWall SonicOS and SonicOSv, allow authenticated read-only admin to leave the firewall in an unstable state by downloading certificate with specific extension. This vulnerability affected SonicOS Gen 5 version 5.9.1.10 and earlier, Gen 6 version 6.2.7.3, 6.5.1.3, 6.5.2.2,...

6.4AI score0.00671EPSS

SaveExploits0References1

Prion•added 2019/02/19 9:29 p.m.•21 views

Design/Logic Flaw

In SonicWall SonicOS, administrators without full permissions can download imported certificates. Occurs when administrators who are not in the SonicWall Administrators user group attempt to download imported certificates. This vulnerability affected SonicOS Gen 5 version 5.9.1.10 and earlier, Ge...

2.1CVSS5.5AI score0.00207EPSS

SaveExploits0References2Affected Software2

OSV•added 2019/02/19 9:29 p.m.•8 views

CVE-2018-9867

5.5CVSS5.8AI score0.00207EPSS

SaveExploits0References2

NVD•added 2019/02/19 9:29 p.m.•21 views

CVE-2018-9867

5.5CVSS5.5AI score0.00207EPSS

SaveExploits0References2

CVE•added 2019/02/19 9:00 p.m.•50 views

CVE-2018-9867

Summary : CVE-2018-9867 affects SonicWall SonicOS. The issue allows administrators who are not in the SonicWall Administrators user group (i.e., with insufficient permissions) to download imported certificates. This is documented across multiple sources (NVD entry and SonicWall PSIRT) and applies...

5.5CVSS5.4AI score0.00207EPSS

SaveExploits0References2Affected Software2

Cvelist•added 2019/02/19 9:00 p.m.•28 views

CVE-2018-9867

5.5AI score0.00207EPSS

SaveExploits0References2

SonicWall•added 2019/02/15 8:00 p.m.•31 views

Administrators without full permissions can download imported certificates

6.5CVSS6.8AI score0.00207EPSS

SaveExploits0

VulnCheck KEV•added 2018/10/27 12:00 a.m.•9 views

VulnCheck KEV: CVE-2018-9866

A vulnerability in lack of validation of user-supplied parameters pass to XML-RPC calls on SonicWall Global Management System GMS virtual appliance's, allow remote user to execute arbitrary code. This vulnerability affected GMS version 8.1 and earlier...

9.8CVSS7.6AI score0.04504EPSS

SaveExploits1References1

Check Point Advisories•added 2018/09/27 12:00 a.m.•12 views

SonicWall Global Management System Remote Code Execution (CVE-2018-9866)

A remote code execution vulnerability exists in SonicWall Global Management System. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.5CVSS5.6AI score0.04504EPSS

SaveExploits1

HackRead•added 2018/09/15 7:52 p.m.•30 views

Apache Struts & SonicWall’s GMS exploits key targets of Mirai & Gafgyt IoT malware

By Waqas Security researchers at Palo Alto Networks’ Unit 42 have discovered modified versions of the notorious Mirai and Gafgyt Internet of Things IoT malware. The malware have the capability of targeting flaws that affect Apache Struts and SonicWall Global Management System GMS. Moreover, the...

3AI score

SaveExploits0

ThreatPost•added 2018/09/10 2:23 p.m.•484 views

Mirai, Gafgyt Botnets Return to Target Infamous Apache Struts, SonicWall Flaws

Researchers have discovered new variants for the infamous Mirai and Gafgyt IoT botnets – now targeting well-known vulnerabilities in Apache Struts and SonicWall. The new Mirai strain targets the Apache Struts flaw associated with the 2017 Equifax breach, while the Gafgyt variant uses a...

10CVSS0.5AI score0.99999EPSS

SaveExploits103References12

OSV•added 2018/08/03 8:29 p.m.•11 views

CVE-2018-9866

9.8CVSS6.1AI score0.04504EPSS

SaveExploits1References3

Prion•added 2018/08/03 8:29 p.m.•22 views

Code injection

7.5CVSS9.6AI score0.04504EPSS

SaveExploits1References3Affected Software1

NVD•added 2018/08/03 8:29 p.m.•25 views

CVE-2018-9866

9.8CVSS9.7AI score0.04504EPSS

SaveExploits1References3

Cvelist•added 2018/08/03 8:00 p.m.•28 views

CVE-2018-9866

9.7AI score0.04504EPSS

SaveExploits1References3

Vulnrichment•added 2018/08/03 8:00 p.m.•13 views

CVE-2018-9866

9.7AI score0.04504EPSS

SaveExploits1References3

CVE•added 2018/08/03 8:00 p.m.•75 views

CVE-2018-9866

SonicWall GMS (Global Management System) virtual appliances with version 8.1 and earlier are affected by CVE-2018-9866 due to lack of validation of user-supplied parameters passed to XML-RPC calls. This allows a remote attacker to execute arbitrary code on the vulnerable system. The issue affects...

9.8CVSS9.7AI score0.04504EPSS

SaveIn wildExploits1References3Affected Software1

Positive Technologies•added 2018/08/03 12:00 a.m.•14 views

PT-2018-19085 · Sonicwall · Sonicwall Global Management System

Name of the Vulnerable Software and Affected Versions: SonicWall Global Management System GMS versions 8.1 and earlier Description: A vulnerability in the lack of validation of user-supplied parameters passed to XML-RPC calls allows remote users to execute arbitrary code. Recommendations: For...

9.8CVSS9.6AI score0.04504EPSS

SaveExploits1References6

Exploit DB•added 2018/08/01 12:00 a.m.•61 views

SonicWall Global Management System - XMLRPC set_time_zone Command Injection (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "SonicWall Global Management System XMLRPC settimezone Unath RCE", 'Description' = %q This module exploits a vulnerability in SonicWall Global...

5.3AI score

SaveExploits0

Packet Storm•added 2018/07/31 12:00 a.m.•57 views

SonicWall Global Management System XMLRPC

7.4AI score

SaveExploits0

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by