CVE-2021-33735

A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application...

CVE-2021-33734

A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application...

CVE-2021-33733

A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application...

CVE-2021-33733

CVE-2021-33733 affects Siemens SINEC NMS (versions prior to 1.0 SP2 Update 1). The vulnerability is an SQL injection in the web server that, when combined with authenticated access, could allow an attacker to execute arbitrary commands in the local database by sending crafted requests. Impact is ...

CVE-2021-33732

A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application...

CVE-2021-33731

A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application...

CVE-2021-33730

A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application...

CVE-2021-33730

CVE-2021-33730 affects Siemens SINEC NMS prior to v1.0 SP2 Update 1. The issue allows a privileged authenticated attacker to execute arbitrary commands in the local database by sending crafted requests to the web server of the affected application. The Red Hat, NVD, and Siemens/ISAS Nessus/CSAs e...

Exploit for Unrestricted Upload of File with Dangerous Type in Embedthis Goahead

Goahead webserver pre v5.1.5 RCE PoC CVE-2021-42342 A rec...

PT-2021-20308

Name of the Vulnerable Software and Affected Versions: SINEC NMS versions prior to V1.0 SP2 Update 1 Description: A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application. Recommendations: F...

PT-2021-20309

Name of the Vulnerable Software and Affected Versions: SINEC NMS versions prior to V1.0 SP2 Update 1 Description: A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the "webserver" of the affected application. Recommendations:...

PT-2021-20311

Name of the Vulnerable Software and Affected Versions: SINEC NMS versions prior to V1.0 SP2 Update 1 Description: A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the "webserver" of the affected application. Recommendations:...

PT-2021-20307

Name of the Vulnerable Software and Affected Versions: SINEC NMS versions prior to V1.0 SP2 Update 1 Description: A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the "webserver" of the affected application. Recommendations:...

PT-2021-20306

Name of the Vulnerable Software and Affected Versions: SINEC NMS versions prior to V1.0 SP2 Update 1 Description: A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the "webserver" of the affected application. Recommendations:...

PT-2021-20305

Name of the Vulnerable Software and Affected Versions: SINEC NMS versions prior to V1.0 SP2 Update 1 Description: A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the "webserver" of the affected application. Recommendations:...

PT-2021-20310

Name of the Vulnerable Software and Affected Versions: SINEC NMS versions prior to V1.0 SP2 Update 1 Description: A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the "webserver" of the affected application. Recommendations:...

CVE-2021-33736: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application...

CVE-2021-33734: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application...

CVE-2021-33732: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application...

CVE-2021-33730: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application...