Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

jbaines-r7 vulnerabilities and exploits

(subscribe to this query)
8.8
CVSSv3
CVE-2021-20039
Improper neutralization of special elements in the SMA100 management interface '/cgi-bin/viewcert' POST http method allows a remote authenticated malicious user to inject arbitrary commands as a 'nobody' user. This vulnerability affected SMA 200, 210, 400, 410...
Sonicwall Sma 200 Firmware 9.0.0.11-31svSonicwall Sma 200 Firmware 10.2.0.8-37svSonicwall Sma 200 Firmware 10.2.1.1-19svSonicwall Sma 210 Firmware 9.0.0.11-31svSonicwall Sma 210 Firmware 10.2.0.8-37svSonicwall Sma 210 Firmware 10.2.1.1-19svSonicwall Sma 410 Firmware 9.0.0.11-31svSonicwall Sma 410 Firmware 10.2.0.8-37svSonicwall Sma 410 Firmware 10.2.1.1-19svSonicwall Sma 400 Firmware 9.0.0.11-31svSonicwall Sma 400 Firmware 10.2.0.8-37svSonicwall Sma 400 Firmware 10.2.1.1-19svSonicwall Sma 500v Firmware 9.0.0.11-31svSonicwall Sma 500v Firmware 10.2.0.8-37svSonicwall Sma 500v Firmware 10.2.1.1-19sv
9.8
CVSSv3
CVE-2021-20038
A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows a remote unauthenticated malicious user to potentially execute code as a 'nobody' user in the appliance. This vulnerability affected SMA 200, 210...
Sonicwall Sma 200 Firmware 10.2.0.8-37svSonicwall Sma 200 Firmware 10.2.1.1-19svSonicwall Sma 200 Firmware 10.2.1.2-24svSonicwall Sma 210 Firmware 10.2.0.8-37svSonicwall Sma 210 Firmware 10.2.1.1-19svSonicwall Sma 210 Firmware 10.2.1.2-24svSonicwall Sma 410 Firmware 10.2.0.8-37svSonicwall Sma 410 Firmware 10.2.1.1-19svSonicwall Sma 410 Firmware 10.2.1.2-24svSonicwall Sma 400 Firmware 10.2.0.8-37svSonicwall Sma 400 Firmware 10.2.1.1-19svSonicwall Sma 400 Firmware 10.2.1.2-24svSonicwall Sma 500v Firmware 10.2.0.8-37svSonicwall Sma 500v Firmware 10.2.1.1-19svSonicwall Sma 500v Firmware 10.2.1.2-24sv
7.8
CVSSv3
CVE-2022-30526
A privilege escalation vulnerability was identified in the CLI command of Zyxel USG FLEX 100(W) firmware versions 4.50 up to and including 5.30, USG FLEX 200 firmware versions 4.50 up to and including 5.30, USG FLEX 500 firmware versions 4.50 up to and including 5.30, USG FLEX 70...
Zyxel Usg Flex 100w FirmwareZyxel Usg Flex 200 FirmwareZyxel Usg Flex 500 FirmwareZyxel Usg Flex 700 FirmwareZyxel Usg Flex 50w FirmwareZyxel Usg20w-vpn FirmwareZyxel Atp800 FirmwareZyxel Atp700 FirmwareZyxel Atp500 FirmwareZyxel Atp200 FirmwareZyxel Atp100w FirmwareZyxel Atp100 FirmwareZyxel Vpn1000 FirmwareZyxel Vpn300 FirmwareZyxel Vpn100 FirmwareZyxel Vpn50 FirmwareZyxel Usg20-vpn FirmwareZyxel Usg 2200-vpn FirmwareZyxel Zywall 110 FirmwareZyxel Zywall 310 FirmwareZyxel Zywall 1100 FirmwareZyxel Usg40 Firmware
10
CVSSv3
CVE-2021-22205
An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution.
Gitlab Gitlab
9.8
CVSSv3
CVE-2022-26134
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated malicious user to execute arbitrary code on a Confluence Server or Data Center instance. The affected versions are from 1.3.0 prior to 7.4.17, fro...
Atlassian Confluence Data Center 7.18.0Atlassian Confluence Data CenterAtlassian Confluence Server 7.18.0Atlassian Confluence Server
7.8
CVSSv3
CVE-2021-22204
Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image
Exiftool Project ExiftoolDebian Debian Linux 9.0Debian Debian Linux 10.0Fedoraproject Fedora 32Fedoraproject Fedora 33Fedoraproject Fedora 34
9.8
CVSSv3
CVE-2022-30525
A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 up to and including 5.21 Patch 1, USG FLEX 200 firmware versions 5.00 up to and including 5.21 Patch 1, USG FLEX 500 firmware versions 5.00 up to and including 5.21 Patch 1, US...
Zyxel Usg Flex 100w FirmwareZyxel Usg Flex 200 FirmwareZyxel Usg Flex 500 FirmwareZyxel Usg Flex 700 FirmwareZyxel Vpn100 FirmwareZyxel Vpn1000 FirmwareZyxel Vpn300 FirmwareZyxel Vpn50 FirmwareZyxel Atp100 FirmwareZyxel Atp100w FirmwareZyxel Atp200 FirmwareZyxel Atp500 FirmwareZyxel Atp700 FirmwareZyxel Atp800 FirmwareZyxel Usg Flex 50w FirmwareZyxel Usg20w-vpn Firmware
7.2
CVSSv3
CVE-2022-20828
A vulnerability in the CLI parser of Cisco FirePOWER Software for Adaptive Security Appliance (ASA) FirePOWER module could allow an authenticated, remote malicious user to execute arbitrary commands on the underlying operating system of an affected ASA FirePOWER module as the roo...
Cisco Asa Firepower
8.8
CVSSv3
CVE-2019-10662
Grandstream UCM6204 prior to 1.0.19.20 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in the backupUCMConfig file-backup parameter to the /cgi? URI.
Grandstream Ucm6204 Firmware
9.8
CVSSv3
CVE-2021-36260
A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands.
Hikvision Ds-2cd2026g2-iu\\/sl Firmware -Hikvision Ds-2cd2046g2-iu\\/sl Firmware -Hikvision Ds-2cd2066g2-i\\(u\\) Firmware -Hikvision Ds-2cd2066g2-iu\\/sl Firmware -Hikvision Ds-2cd2086g2-i\\(u\\) Firmware -Hikvision Ds-2cd2086g2-iu\\/sl Firmware -Hikvision Ds-2cd2166g2-i\\(su\\) Firmware -Hikvision Ds-2cd2186g2-i\\(su\\) Firmware -Hikvision Ds-2cd2186g2-isu Firmware -Hikvision Ds-2cd2326g2-isu\\/sl Firmware -Hikvision Ds-2cd2346g2-isu\\/sl Firmware -Hikvision Ds-2cd2366g2-i\\(u\\) Firmware -Hikvision Ds-2cd2366g2-isu\\/sl Firmware -Hikvision Ds-2cd2386g2-i\\(u\\) Firmware -Hikvision Ds-2cd2386g2-isu\\/sl Firmware -Hikvision Ds-2cd2426g2-i Firmware -Hikvision Ds-2cd2446g2-i Firmware -Hikvision Ds-2cd2526g2-i\\(s\\) Firmware -Hikvision Ds-2cd2526g2-is Firmware -Hikvision Ds-2cd2546g2-i\\(s\\) Firmware -Hikvision Ds-2cd2566g2-i\\(s\\) Firmware -Hikvision Ds-2cd2586g2-i\\(s\\) Firmware -
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook