Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
message gateway vulnerabilities and exploits
(subscribe to this query)
6.5
CVSSv3
CVE-2021-20375
IBM Sterling File Gateway 2.2.0.0 up to and including 6.1.1.0 could allow an authenticated user to intercept and replace a message sent by another user due to improper access controls. IBM X-Force ID: 195567.
Ibm Sterling B2b Integrator
5.5
CVSSv3
CVE-2019-6454
An issue exists in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafte...
Systemd Project Systemd 239
Opensuse Leap 15.0
Netapp Active Iq Performance Analytics Services -
Debian Debian Linux 8.0
Debian Debian Linux 9.0
Fedoraproject Fedora 29
Canonical Ubuntu Linux 16.04
Canonical Ubuntu Linux 18.04
Canonical Ubuntu Linux 18.10
Redhat Enterprise Linux Desktop 7.0
Redhat Enterprise Linux Workstation 7.0
Redhat Enterprise Linux Server 7.0
Redhat Enterprise Linux Server Tus 7.3
Redhat Enterprise Linux Server Aus 7.3
Redhat Enterprise Linux Server Aus 7.4
Redhat Enterprise Linux Server Tus 7.4
Redhat Enterprise Linux Eus 7.4
Redhat Enterprise Linux Eus 7.5
Redhat Enterprise Linux Server Tus 7.6
Redhat Enterprise Linux Server Eus 7.6
Redhat Enterprise Linux Server Aus 7.6
Redhat Enterprise Linux 8.0
NA
CVE-2008-0960
SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x prior to 5.2.4.1, 5.3.x prior to 5.3.2.1, and 5.4.x prior to 5.4.1.1; (2) UCD-SNMP; (3) eCos; (4) Juniper Session and Resource Control (SRC) C-series 1.0.0 up to and including 2.0.0; (5) NetApp (aka Network Appliance) Data ONTAP 7.3R...
Juniper Session And Resource Control 2.0
Juniper Src Pe 1.0
Juniper Session And Resource Control 1.0
Juniper Src Pe 2.0
1 EDB exploit
NA
CVE-2015-2702
Cross-site scripting (XSS) vulnerability in the Message Log in the Email Security Gateway in Websense TRITON AP-EMAIL prior to 8.0.0 and V-Series 7.7 appliances allows remote malicious users to inject arbitrary web script or HTML via the sender address in an email.
Websense Triton Ap Web
Websense Triton Ap Data
Websense V-series Appliances 7.7
Websense Triton Ap Email
4.3
CVSSv3
CVE-2021-20552
IBM Sterling File Gateway 6.0.0.0 up to and including 6.1.1.0 could allow a remote malicious user to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ...
Ibm Sterling File Gateway
7.5
CVSSv3
CVE-2022-26370
On F5 BIG-IP 16.1.x versions before 16.1.2.2, 15.1.x versions before 15.1.5, and 14.1.x versions before 14.1.4.6, when a Session Initiation Protocol (SIP) message routing framework (MRF) application layer gateway (ALG) profile is configured on a Message Routing virtual server, un...
F5 Big-ip Access Policy Manager 14.1.0
F5 Big-ip Advanced Firewall Manager 14.1.0
F5 Big-ip Application Acceleration Manager 14.1.0
F5 Big-ip Link Controller 14.1.0
F5 Big-ip Policy Enforcement Manager 14.1.0
F5 Big-ip Local Traffic Manager 14.1.0
F5 Big-ip Analytics 14.1.0
F5 Big-ip Application Security Manager 14.1.0
F5 Big-ip Domain Name System 14.1.0
F5 Big-ip Global Traffic Manager 14.1.0
F5 Big-ip Access Policy Manager 14.1.4
F5 Big-ip Access Policy Manager 15.1.0
F5 Big-ip Advanced Firewall Manager 14.1.4
F5 Big-ip Advanced Firewall Manager 15.1.0
F5 Big-ip Analytics 14.1.4
F5 Big-ip Analytics 15.1.0
F5 Big-ip Application Acceleration Manager 14.1.4
F5 Big-ip Application Acceleration Manager 15.1.0
F5 Big-ip Application Security Manager 14.1.4
F5 Big-ip Application Security Manager 15.1.0
F5 Big-ip Domain Name System 14.1.4
F5 Big-ip Domain Name System 15.1.0
NA
CVE-2002-0075
Cross-site scripting vulnerability for Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote malicious users to execute arbitrary script as other web users via the error message used in a URL redirect (""302 Object Moved") message.
Microsoft Internet Information Server 4.0
Microsoft Internet Information Services 5.0
5.3
CVSSv3
CVE-2021-39086
IBM Sterling File Gateway 6.0.0.0 up to and including 6.0.3.5, 6.1.0.0 up to and including 6.1.0.4, and 6.1.1.0 up to and including 6.1.1.1 could allow a remote malicious user to obtain sensitive information when a detailed technical error message is returned in the browser. This...
Ibm Sterling File Gateway
NA
CVE-2005-4436
Extended Interior Gateway Routing Protocol (EIGRP) 1.2, as implemented in Cisco IOS after 12.3(2), 12.3(3)B, and 12.3(2)T and other products, allows remote malicious users to cause a denial of service by sending a "spoofed neighbor announcement" with (1) mismatched k va...
NA
CVE-2013-0499
Cross-site scripting (XSS) vulnerability in the echo functionality on IBM WebSphere DataPower SOA appliances with firmware 3.8.2, 4.0, 4.0.1, 4.0.2, and 5.0.0 allows remote malicious users to inject arbitrary web script or HTML via a SOAP message, as demonstrated by the XML Firew...
Ibm Websphere Datapower Xc10 Appliance Firmware 3.8.2
Ibm Websphere Datapower Xc10 Appliance Firmware 4.0
Ibm Websphere Datapower Xc10 Appliance Firmware 4.0.1
Ibm Websphere Datapower Xc10 Appliance Firmware 4.0.2
Ibm Websphere Datapower Xc10 Appliance Firmware 5.0.0
Ibm Websphere Datapower Xc10 Appliance -
Ibm Websphere Datapower Service Gateway Xg45 Virtual Edition Firmware 5.0.0
Ibm Websphere Datapower Service Gateway Xg45 Virtual Edition Firmware 4.0.1
Ibm Websphere Datapower Service Gateway Xg45 Virtual Edition Firmware 4.0.2
Ibm Websphere Datapower Service Gateway Xg45 Virtual Edition Firmware 3.8.2
Ibm Websphere Datapower Service Gateway Xg45 Virtual Edition Firmware 4.0
Ibm Websphere Datapower Service Gateway Xg45 Virtual Edition -
Ibm Websphere Datapower Service Gateway Xg45 Firmware 5.0.0
Ibm Websphere Datapower Service Gateway Xg45 Firmware 3.8.2
Ibm Websphere Datapower Service Gateway Xg45 Firmware 4.0.1
Ibm Websphere Datapower Service Gateway Xg45 Firmware 4.0.2
Ibm Websphere Datapower Service Gateway Xg45 Firmware 4.0
Ibm Websphere Datapower Service Gateway Xg45 -
Ibm Websphere Datapower Integration Appliance Xi52 Virtual Edition Firmware 5.0.0
Ibm Websphere Datapower Integration Appliance Xi52 Virtual Edition Firmware 3.8.2
Ibm Websphere Datapower Integration Appliance Xi52 Virtual Edition Firmware 4.0.1
Ibm Websphere Datapower Integration Appliance Xi52 Virtual Edition Firmware 4.0.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-33572
CVE-2024-24919
CVE-2024-0230
CVE-2024-32714
HTML injection
local file inclusion
CVE-2024-31098
CVE-2024-31244
privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
2
3
4
5
6
7
8
9
10
NEXT »