21 matches found
CVE-2026-8474 Possible to run a Cross Site Scripting request on the login API available on Stormshield SNS appliances.
A vulnerability was discovered on Stormshield Network Security 4.3.0 to 4.3.41, 4.8.0 to 4.8.15, 5.0.0 to 5.0.5 It is possible to execute a reflected XSS attack on the login API available on Stormshield SNS appliance by executing a script on the victim's machine. The risks include the theft of...
CVE-2021-28127
An issue was discovered in Stormshield SNS through 4.2.1. A brute-force attack can occur...
EUVD-2020-4053
Malware in sbrugna...
EUVD-2021-14800
Malware in sbrugna...
EUVD-2021-14827
Malware in sbrugna...
CVE-2021-28665
Stormshield SNS with versions before 3.7.18, 3.11.6 and 4.1.6 has a memory-management defect in the SNMP plugin that can lead to excessive consumption of memory and CPU resources, and possibly a denial of service...
CVE-2020-11711
An issue was discovered in Stormshield SNS 3.8.0. Authenticated Stored XSS in the admin login panel leads to SSL VPN credential theft. A malicious disclaimer file can be uploaded from the admin panel. The resulting file is rendered on the authentication interface of the admin panel. It is possibl...
CVE-2020-11711
An issue was discovered in Stormshield SNS 3.8.0. Authenticated Stored XSS in the admin login panel leads to SSL VPN credential theft. A malicious disclaimer file can be uploaded from the admin panel. The resulting file is rendered on the authentication interface of the admin panel. It is possibl...
CVE-2020-11711
An issue was discovered in Stormshield SNS 3.8.0. Authenticated Stored XSS in the admin login panel leads to SSL VPN credential theft. A malicious disclaimer file can be uploaded from the admin panel. The resulting file is rendered on the authentication interface of the admin panel. It is possibl...
CVE-2020-11711
An issue was discovered in Stormshield SNS 3.8.0. Authenticated Stored XSS in the admin login panel leads to SSL VPN credential theft. A malicious disclaimer file can be uploaded from the admin panel. The resulting file is rendered on the authentication interface of the admin panel. It is possibl...
PT-2023-11453 · Stormshield · Stormshield Sns
Name of the Vulnerable Software and Affected Versions: Stormshield SNS version 3.8.0 Description: An issue was discovered in the admin login panel, allowing authenticated Stored XSS, which can lead to SSL VPN credential theft. A malicious disclaimer file can be uploaded from the admin panel and...
CVE-2021-28096
An issue was discovered in Stormshield SNS before 4.2.3 when the proxy is used. An attacker can saturate the proxy connection table. This would result in the proxy denying any new connections...
Code injection
An issue was discovered in Stormshield SNS before 4.2.3 when the proxy is used. An attacker can saturate the proxy connection table. This would result in the proxy denying any new connections...
CVE-2021-28096
An issue was discovered in Stormshield SNS before 4.2.3 when the proxy is used. An attacker can saturate the proxy connection table. This would result in the proxy denying any new connections...
CVE-2021-28127
An issue was discovered in Stormshield SNS through 4.2.1. A brute-force attack can occur...
Design/Logic Flaw
An issue was discovered in Stormshield SNS through 4.2.1. A brute-force attack can occur...
CVE-2021-28127
An issue was discovered in Stormshield SNS through 4.2.1. A brute-force attack can occur...
CVE-2021-28665
Stormshield SNS with versions before 3.7.18, 3.11.6 and 4.1.6 has a memory-management defect in the SNMP plugin that can lead to excessive consumption of memory and CPU resources, and possibly a denial of service...
CVE-2021-28665
CVE-2021-28665 affects Stormshield SNS (Stormshield Network Security) prior to versions 3.7.18, 3.11.6 and 4.1.6. The vulnerability is a memory-management defect in the SNMP plugin that can cause excessive memory and CPU consumption, potentially leading to a denial of service. Public documentatio...
CVE-2021-28665
Stormshield SNS with versions before 3.7.18, 3.11.6 and 4.1.6 has a memory-management defect in the SNMP plugin that can lead to excessive consumption of memory and CPU resources, and possibly a denial of service...