2089 matches found
SonicWall Global Management System XMLRPC Exploit
This Metasploit module exploits a vulnerability in SonicWall Global Management System Virtual Appliance versions 8.1 Build 8110.1197 and below. This virtual appliance can be downloaded from http://www.sonicwall.com/products/sonicwall-gms/ and is used 'in a holistic way to manage your entire netwo...
CVE-2014-8420
creationtimestamp| type| source ---|---|--- 2018-07-30 19:24:25+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/sonicwall/sonicwallxmlrpcrce.rb 2025-10-23 21:12:57+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7 2026-09-08 06:50:39+00:00| seen|...
SonicWall GMS XML-RPC Remote Code Execution Vulnerability
A vulnerability in lack of validation of user-supplied parameters pass to XML-RPC calls on SonicWall Global Management System GMS virtual appliance's, allow remote user to execute arbitrary code. This vulnerability affected GMS version 8.1 and earlier. CVE: CVE-2018-9866 Last updated: Aug. 3, 201...
SonicWALL Global Management System (GMS) / Analyzer sgms Webapp File Deletion
The SonicWALL Global Management System GMS / Analyzer running on the remote host is affected by a file deletion vulnerability within the sgms web application due to the failure to validate user input to the ChartDisplayServlet servlet. An unauthenticated, remote attacker can exploit this issue to...
Dell SonicWALL Global Management System Cross-Site Scripting Vulnerability
The Dell SonicWall Global Management System GMS is a global management system from Dell, USA. The system enables rapid deployment and centralized management of Dell SonicWALL firewall, anti-spam, backup and recovery, and secure remote access solutions. A cross-site scripting vulnerability exists ...
CVE-2018-5691
SonicWall Global Management System GMS 8.1 has XSS via the newName and Name values of the /sgms/TreeControl module...
Design/Logic Flaw
SonicWall Global Management System GMS 8.1 has XSS via the newName and Name values of the /sgms/TreeControl module...
CVE-2018-5691
SonicWall Global Management System GMS 8.1 has XSS via the newName and Name values of the /sgms/TreeControl module...
SonicWall Global Management System (GMS) 8.1 cross-site scripting
SonicWall Global Management System GMS 8.1 has XSS via the newName and Name values of the /sgms/TreeControl module. CVE: CVE-2018-5691 Last updated: March 12, 2018, 5:31 p.m...
CVE-2018-5691
SonicWall Global Management System GMS 8.1 has XSS via the newName and Name values of the /sgms/TreeControl module...
CVE-2018-5691
The CVE-2018-5691 entry concerns Dell SonicWall Global Management System (GMS) v8.1. Affected component: the /sgms/TreeControl module; vulnerability type: Cross-Site Scripting (XSS) via the values of newName and Name. Root cause is an input handling flaw that allows malicious script injection thr...
SonicWall GMS v8.1 - Filter Bypass & Persistent Vulnerability
Document Title: =============== SonicWall GMS v8.1 - Filter Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1819 Release Notes:...
SonicWall GMS v8.1 - Filter Bypass & Persistent Vulnerability
Document Title: =============== SonicWall GMS v8.1 - Filter Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1819 Release Notes:...
SonicWall GMS 8.1 Filter Bypass / Input Validation
Document Title: =============== SonicWall GMS v8.1 - Filter Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1819 Release Notes:...
Dell SonicWall SonicOS NSA Cross-Site Scripting Vulnerability
The Dell SonicWall Network Security Appliance NSA 2016 Q4 devices is a firewall appliance from Dell USA.SonicWall SonicOS is a system that runs... A cross-site scripting vulnerability exists in SonicWall SonicOS in Dell SonicWall NSA 2016 Q4 devices. A remote attacker could exploit the...
Dell SonicWall SonicOS NSA Cross-Site Scripting Vulnerability (CNVD-2018-03085)
The Dell SonicWall Network Security Appliance NSA 2017 Q4 devices is a firewall appliance from Dell USA.SonicWall SonicOS is a system that runs on it.CFS Custom Category and Cloud AV DB Exclusion Settings are among the modules. A cross-site scripting vulnerability exists in the CFS Custom Categor...
Dell SonicWall SonicOS NSA CVE-2018-5281 Multiple HTML Injection Vulnerabilities
SonicWall SonicOS on Network Security Appliance NSA 2017 Q4 devices has XSS via the CFS Custom Category and Cloud AV DB Exclusion Settings screens. CVE: CVE-2018-5281 Last updated: Jan. 30, 2018, 4:12 p.m...
Information disclosure
SonicWall SonicOS on Network Security Appliance NSA 2017 Q4 devices has XSS via the CFS Custom Category and Cloud AV DB Exclusion Settings screens...