Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

endian firewall endian firewall vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2
CVE-2015-5082
Endian Firewall prior to 3.0 allows remote malicious users to execute arbitrary commands via shell metacharacters in the (1) NEW_PASSWORD_1 or (2) NEW_PASSWORD_2 parameter to cgi-bin/chpasswd.cgi.
Endian Firewall Endian Firewall
4.3
CVSSv2
CVE-2012-4923
Multiple cross-site scripting (XSS) vulnerabilities in Endian Firewall 2.4 allow remote malicious users to inject arbitrary web script or HTML via the (1) createrule parameter to dnat.cgi, (2) addrule parameter to dansguardian.cgi, or (3) PATH_INFO to openvpn_users.cgi.
Endian Firewall 2.4
4.3
CVSSv2
CVE-2008-0494
Cross-site scripting (XSS) vulnerability in vpnum/userslist.php in Endian Firewall 2.1.2 allows remote malicious users to inject arbitrary web script or HTML via the psearch parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third...
Endian Firewall 2.1.2
6.5
CVSSv2
CVE-2021-27201
Endian Firewall Community (aka EFW) 3.3.2 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in a backup comment.
Endian Firewall Community 3.3.2
NA
CVE-2023-46846
SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote malicious user to perform Request/Response smuggling past firewall and frontend security systems.
Squid-cache SquidRedhat Enterprise Linux 8.0Redhat Enterprise Linux Server Tus 8.2Redhat Enterprise Linux Server Aus 8.2Redhat Enterprise Linux Server Tus 8.4Redhat Enterprise Linux Server Aus 8.4Redhat Enterprise Linux Server Aus 8.6Redhat Enterprise Linux Server Tus 8.6Redhat Enterprise Linux Eus 8.6Redhat Enterprise Linux 9.0Redhat Enterprise Linux Eus 9.0Redhat Enterprise Linux Server Tus 8.8Redhat Enterprise Linux Eus 8.8Redhat Enterprise Linux Server Aus 9.2Redhat Enterprise Linux Eus 9.2Redhat Enterprise Linux For Power Little Endian 8.0 Ppc64leRedhat Enterprise Linux For Ibm Z Systems 8.0 S390xRedhat Enterprise Linux For Arm 64 8.0 Aarch64Redhat Enterprise Linux Server Tus 9.2
2.1
CVSSv2
CVE-2004-0565
Floating point information leak in the context switch code for Linux 2.4.x only checks the MFH bit but does not verify the FPH owner, which allows local users to read register values of other processes by setting the MFH bit.
Mandrakesoft Mandrake Multi Network Firewall 8.2Mandrakesoft Mandrake Linux 10.0Trustix Secure Linux 2Trustix Secure Linux 2.0Mandrakesoft Mandrake Linux 9.2Mandrakesoft Mandrake Linux Corporate Server 2.1Mandrakesoft Mandrake Linux 9.1Gentoo LinuxLinux Linux Kernel 2.4.0Trustix Secure Linux 2.1
2.1
CVSSv2
CVE-2004-0554
Linux kernel 2.4.x and 2.6.x for x86 allows local users to cause a denial of service (system crash), possibly via an infinite loop that triggers a signal handler with a certain sequence of fsave and frstor instructions, as originally demonstrated using a "crash.c" progr...
Linux Linux Kernel 2.4.18Linux Linux Kernel 2.4.19Linux Linux Kernel 2.6.1Linux Linux Kernel 2.6.6Linux Linux Kernel 2.6.7Redhat Enterprise Linux 3.0Suse Suse Linux 7Suse Suse Linux 9.1Avaya Converged Communications Server 2.0Linux Linux Kernel 2.4.23Linux Linux Kernel 2.4.24Linux Linux Kernel 2.6.3Linux Linux Kernel 2.6.4Redhat Enterprise Linux 2.1Suse Suse Linux 8.1Suse Suse Linux 8.2Suse Suse Linux 8Linux Linux Kernel 2.4.21Linux Linux Kernel 2.4.22Linux Linux Kernel 2.6.2Suse Suse Linux 8.0Avaya Modular Messaging Message Storage Server S3400
4.6
CVSSv2
CVE-2006-5649
Unspecified vulnerability in the "alignment check exception handling" in Ubuntu 5.10, 6.06 LTS, and 6.10 for the PowerPC (PPC) allows local users to cause a denial of service (kernel panic) via unspecified vectors.
Ubuntu Ubuntu Linux 6.06 LtsUbuntu Ubuntu Linux 5.10Ubuntu Ubuntu Linux 6.10
7.1
CVSSv2
CVE-2006-4997
The clip_mkip function in net/atm/clip.c of the ATM subsystem in Linux kernel allows remote malicious users to cause a denial of service (panic) via unknown vectors that cause the ATM subsystem to access the memory of socket buffers after they are freed (freed pointer dereference...
Linux Linux KernelCanonical Ubuntu Linux 6.10Canonical Ubuntu Linux 5.10Canonical Ubuntu Linux 6.06Redhat Enterprise Linux 2.1Redhat Enterprise Linux 4Redhat Enterprise Linux 3
2.1
CVSSv2
CVE-2005-0003
The 64 bit ELF support in Linux kernel 2.6 prior to 2.6.10, on 64-bit architectures, does not properly check for overlapping VMA (virtual memory address) allocations, which allows local users to cause a denial of service (system crash) or execute arbitrary code via a crafted ELF ...
Linux Linux Kernel 2.4.18Linux Linux Kernel 2.4.15Linux Linux Kernel 2.4.0Linux Linux Kernel 2.4.11Mandrakesoft Mandrake Linux Corporate Server 2.1Redhat Enterprise Linux Desktop 3.0Linux Linux Kernel 2.4.27Linux Linux Kernel 2.4.26Redhat Enterprise Linux 3.0Linux Linux Kernel 2.4.19Linux Linux Kernel 2.4.21Linux Linux Kernel 2.4.12Linux Linux Kernel 2.4.13Mandrakesoft Mandrake Linux 9.2Linux Linux Kernel 2.4.17Avaya Modular Messaging Message Storage Server 2.0Linux Linux Kernel 2.4.23 Ow2Linux Linux Kernel 2.4.23Linux Linux Kernel 2.4.29Mandrakesoft Mandrake Linux 10.1Linux Linux Kernel 2.4.7Avaya S8710 R2.0.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook