İçeriğe atla
Noroxi

alienvault kayıtları

alienvault üreticisine ait 36 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
5 · %13,9
Pre-auth RCE
15
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 16
  2. 17
  3. 18
  4. 20

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

36 kayıt
  • CVE-2014-3804
    62Bu hafta

    The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) update_

    KritikCVSS 10,0SilahlaştırılmışEPSS %72

    alienvault · open source security information management13 Haz 2014

  • CVE-2016-8582
    56Planlayın

    A vulnerability exists in gauge.php of AlienVault OSSIM and USM before 5.3.2 that allows an attacker to execute an arbitrary SQL query and r

    KritikCVSS 9,8SilahlaştırılmışEPSS %57

    alienvault · open source security information and event management28 Eki 2016

  • CVE-2014-5210
    44Planlayın

    The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) remote_

    KritikCVSS 10,0Kavram kanıtıEPSS %15

    alienvault · open source security information management21 Ağu 2014

  • CVE-2014-3805
    44Planlayın

    The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) get_lic

    KritikCVSS 10,0Kavram kanıtıEPSS %13

    alienvault · open source security information management13 Haz 2014

  • CVE-2017-6972
    43Planlayın

    AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and unnecessarily execute the NfSen Perl co

    KritikCVSS 9,8Kavram kanıtıEPSS %15

    alienvault · ossim22 Mar 2017

  • CVE-2014-4151
    42Planlayın

    The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to create arbitrary files and execute arbitrary code vi

    KritikCVSS 10,0İstismar yokEPSS %7

    alienvault · open source security information management18 Haz 2014

  • CVE-2014-4152
    42Planlayın

    The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to execute arbitrary code via a crafted remote_task req

    KritikCVSS 10,0İstismar yokEPSS %6

    alienvault · open source security information management18 Haz 2014

  • CVE-2016-8580
    41Planlayın

    PHP object injection vulnerabilities exist in multiple widget files in AlienVault OSSIM and USM before 5.3.2.

    KritikCVSS 9,8Kavram kanıtıEPSS %7

    alienvault · open source security information and event management28 Eki 2016

  • CVE-2016-7955
    41Planlayın

    The logcheck function in session.inc in AlienVault OSSIM before 5.3.1, when an action has been created, and USM before 5.3.1 allows remote a

    KritikCVSS 9,8İstismar yokEPSS %6

    alienvault · ossim15 Mar 2017

  • CVE-2014-5158
    41Planlayın

    The (1) av-centerd SOAP service and (2) backup command in the ossim-framework service in AlienVault OSSIM before 4.6.0 allows remote attacke

    KritikCVSS 10,0İstismar yokEPSS %4

    alienvault · open source security information management21 Ağu 2014

  • CVE-2017-6971
    40Planlayın

    AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow remote authenticated users to execute arbitrary commands in a privileged

    YüksekCVSS 8,8Kavram kanıtıEPSS %16

    alienvault · ossim22 Mar 2017

  • CVE-2018-7279
    40Planlayın

    A remote code execution issue was discovered in AlienVault USM and OSSIM before 5.5.1.

    KritikCVSS 9,8İstismar yokEPSS %2

    alienvault · open source security information management14 Mar 2018

  • CVE-2015-3446
    38İzleyin

    The Framework Daemon in AlienVault Unified Security Management before 4.15 allows remote attackers to execute arbitrary Python code via a cr

    KritikCVSS 9,3İstismar yokEPSS %2

    alienvault · unified security management1 May 2015

  • CVE-2013-5967
    36İzleyin

    Multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 4.3 and earlier allow remote attack

    YüksekCVSS 7,5SilahlaştırılmışEPSS %19

    alienvault · open source security information management9 Eki 2013

  • CVE-2017-6970
    34İzleyin

    AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow local users to execute arbitrary commands in a privileged context via an

    YüksekCVSS 8,4Kavram kanıtıEPSS %2

    alienvault · ossim22 Mar 2017

  • CVE-2014-4153
    33İzleyin

    The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to read arbitrary files via a crafted get_file request.

    YüksekCVSS 7,8Kavram kanıtıEPSS %7

    alienvault · open source security information management18 Haz 2014

  • CVE-2014-5383
    32İzleyin

    SQL injection vulnerability in AlienVault OSSIM before 4.7.0 allows remote authenticated users to execute arbitrary SQL commands via unspeci

    OrtaCVSS 6,5SilahlaştırılmışEPSS %21

    alienvault · open source security information management21 Ağu 2014

  • CVE-2009-4372
    31İzleyin

    AlienVault Open Source Security Information Management (OSSIM) 2.1.5, and possibly other versions before 2.1.5-4, allows remote attackers to

    YüksekCVSS 7,5Kavram kanıtıEPSS %5

    alienvault · open source security information management21 Ara 2009

  • CVE-2009-4373
    31İzleyin

    Unrestricted file upload vulnerability in repository/repository_attachment.php in AlienVault Open Source Security Information Management (OS

    YüksekCVSS 7,5İstismar yokEPSS %3

    alienvault · open source security information management21 Ara 2009

  • CVE-2013-6056
    31İzleyin

    OSSIM before 4.3.3.1 has tele_compress.php path traversal vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %2

    alienvault · open source security information management27 Oca 2020

  • CVE-2009-4374
    30İzleyin

    Directory traversal vulnerability in repository/repository_attachment.php in AlienVault Open Source Security Information Management (OSSIM)

    YüksekCVSS 7,5İstismar yokEPSS %2

    alienvault · open source security information management21 Ara 2009

  • CVE-2013-5321
    30İzleyin

    Multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 4.1 allow remote attackers to execu

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    alienvault · open source security information management20 Ağu 2013

  • CVE-2014-5159
    30İzleyin

    SQL injection vulnerability in the ossim-framework service in AlienVault OSSIM before 4.6.0 allows remote attackers to execute arbitrary SQL

    YüksekCVSS 7,5İstismar yokEPSS %1

    alienvault · open source security information management21 Ağu 2014

  • CVE-2009-4375
    30İzleyin

    SQL injection vulnerability in repository/repository_attachment.php in AlienVault Open Source Security Information Management (OSSIM) 2.1.5,

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    alienvault · open source security information management21 Ara 2009

  • CVE-2016-8581
    29İzleyin

    A persistent XSS vulnerability exists in the User-Agent header of the login process of AlienVault OSSIM and USM before 5.3.2 that allows an

    OrtaCVSS 6,1SilahlaştırılmışEPSS %17

    alienvault · open source security information and event management28 Eki 2016