perfsonar perfsonar vulnerabilities and exploits

(subscribe to this query)

perfSONAR prior to 4.4.6 inadvertently supports the parse option for a file:// URL.

Perfsonar Perfsonar

perfSONAR prior to 4.4.6, when performing participant discovery, incorrectly uses an HTTP request header value to determine a local address.

Perfsonar Perfsonar

An issue in the graphData.cgi component of perfSONAR v4.4.5 and prior allows malicious users to access sensitive data and execute Server-Side Request Forgery (SSRF) attacks.

Perfsonar Perfsonar

1 Github repository

perfSONAR v4.x <= v4.4.5 exists to contain a Cross-Site Request Forgery (CSRF) which is triggered when an attacker injects crafted input into the Search function.

Perfsonar Perfsonar

1 Github repository

An issue exists in perfSONAR Monitoring and Debugging Dashboard (MaDDash) 2.0.2. A direct request to /etc/ provides a directory listing.

Perfsonar Monitoring And Debugging Dashboard 2.0.2

1 EDB exploit

An issue exists in perfSONAR Monitoring and Debugging Dashboard (MaDDash) 2.0.2. A direct request to /lib/ provides a directory listing.

Perfsonar Monitoring And Debugging Dashboard 2.0.2

1 EDB exploit

An issue exists in perfSONAR Monitoring and Debugging Dashboard (MaDDash) 2.0.2. A direct request to /style/ provides a directory listing.

Perfsonar Monitoring And Debugging Dashboard 2.0.2

1 EDB exploit

An issue exists in perfSONAR Monitoring and Debugging Dashboard (MaDDash) 2.0.2. A direct request to /images/ provides a directory listing.

Perfsonar Monitoring And Debugging Dashboard 2.0.2

1 EDB exploit

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook