Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

sophos web appliance 3.4.3.1 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2013-4984
The close_connections function in /opt/cma/bin/clear_keys.pl in Sophos Web Appliance prior to 3.7.9.1 and 3.8 prior to 3.8.1.1 allows local users to gain privileges via shell metacharacters in the second argument.
Sophos Web Appliance 3.7.8.2Sophos Web Appliance 3.7.8Sophos Web Appliance 3.7.3Sophos Web Appliance 3.7.1Sophos Web Appliance 3.6.4.2Sophos Web Appliance 3.6.2.4.0Sophos Web Appliance 3.6.2.1Sophos Web Appliance 3.5.3Sophos Web Appliance 3.5.1.2Sophos Web Appliance 3.4.5Sophos Web Appliance 3.4.3.1Sophos Web Appliance 3.3.6.1Sophos Web Appliance 3.3.5.1Sophos Web Appliance 3.3.0Sophos Web Appliance 3.2.6Sophos Web Appliance 3.1.4Sophos Web Appliance 3.1.2Sophos Web Appliance 3.0.5Sophos Web Appliance 3.0.3Sophos Web Appliance 3.7.7Sophos Web Appliance 3.7.6Sophos Web Appliance 3.7.5
NA
CVE-2013-4983
The get_referers function in /opt/ws/bin/sblistpack in Sophos Web Appliance prior to 3.7.9.1 and 3.8 prior to 3.8.1.1 allows remote malicious users to execute arbitrary commands via shell metacharacters in the domain parameter to end-user/index.php.
Sophos Web Appliance Firmware 3.0.1Sophos Web Appliance Firmware 3.0.1.1Sophos Web Appliance Firmware 3.0.2Sophos Web Appliance Firmware 3.0.3Sophos Web Appliance Firmware 3.2.3Sophos Web Appliance Firmware 3.2.4Sophos Web Appliance Firmware 3.2.5Sophos Web Appliance Firmware 3.2.6Sophos Web Appliance Firmware 3.2.7Sophos Web Appliance Firmware 3.4.2Sophos Web Appliance Firmware 3.4.3Sophos Web Appliance Firmware 3.4.3.1Sophos Web Appliance Firmware 3.4.4Sophos Web Appliance Firmware 3.6.1Sophos Web Appliance Firmware 3.6.1.1Sophos Web Appliance Firmware 3.6.2Sophos Web Appliance Firmware 3.6.2.1Sophos Web Appliance Firmware 3.7.5Sophos Web Appliance Firmware 3.7.6Sophos Web Appliance Firmware 3.7.7Sophos Web Appliance Firmware 3.7.8Sophos Web Appliance Firmware 3.7.8.1
NA
CVE-2014-2849
The Change Password dialog box (change_password) in Sophos Web Appliance prior to 3.8.2 allows remote authenticated users to change the admin user password via a crafted request.
Sophos Web Appliance Firmware 3.7.5Sophos Web Appliance Firmware 3.7.4Sophos Web Appliance Firmware 3.7.3Sophos Web Appliance Firmware 3.7.2Sophos Web Appliance Firmware 3.5.6Sophos Web Appliance Firmware 3.5.5Sophos Web Appliance Firmware 3.5.4Sophos Web Appliance Firmware 3.5.3Sophos Web Appliance Firmware 3.4.1Sophos Web Appliance Firmware 3.4.0Sophos Web Appliance Firmware 3.3.6.1Sophos Web Appliance Firmware 3.3.6Sophos Web Appliance Firmware 3.2.3Sophos Web Appliance Firmware 3.2.2.1Sophos Web Appliance Firmware 3.2.2Sophos Web Appliance Firmware 3.2.1Sophos Web Appliance Firmware 3.1.4Sophos Web Appliance Firmware 3.0.0Sophos Web Appliance Firmware 3.8.0Sophos Web Appliance Firmware 3.7.9.1Sophos Web Appliance Firmware 3.7.9Sophos Web Appliance Firmware 3.7.8.2
NA
CVE-2014-2850
The network interface configuration page (netinterface) in Sophos Web Appliance prior to 3.8.2 allows remote administrators to execute arbitrary commands via shell metacharacters in the address parameter.
Sophos Web Appliance Firmware 3.7.3Sophos Web Appliance Firmware 3.7.2Sophos Web Appliance Firmware 3.7.1Sophos Web Appliance Firmware 3.7.0Sophos Web Appliance Firmware 3.5.4Sophos Web Appliance Firmware 3.5.3Sophos Web Appliance Firmware 3.5.2Sophos Web Appliance Firmware 3.5.1.2Sophos Web Appliance Firmware 3.4.0Sophos Web Appliance Firmware 3.3.6.1Sophos Web Appliance Firmware 3.3.6Sophos Web Appliance Firmware 3.3.5.1Sophos Web Appliance Firmware 3.2.2Sophos Web Appliance Firmware 3.2.1Sophos Web Appliance Firmware 3.1.4Sophos Web Appliance Firmware 3.1.3Sophos Web Appliance Firmware 3.7.9Sophos Web Appliance Firmware 3.7.8.2Sophos Web Appliance Firmware 3.7.8.1Sophos Web Appliance Firmware 3.7.8Sophos Web Appliance Firmware 3.6.2.4.1Sophos Web Appliance Firmware 3.6.2.4.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook