RSS   Vulnerabilities for 'Openvas manager'   RSS

2020-02-06
 
CVE-2011-1597

CWE-434
 
 
OpenVAS Manager v2.0.3 allows plugin remote code execution.

 
2014-12-02
 
CVE-2014-9220

CWE-89
 
 
SQL injection vulnerability in OpenVAS Manager before 4.0.6 and 5.x before 5.0.7 allows remote attackers to execute arbitrary SQL commands via the timezone parameter in a modify_schedule OMP command.

 
2014-05-19
 
CVE-2013-6765

CWE-287
 
 
OpenVAS Manager 3.0 before 3.0.7 and 4.0 before 4.0.4 allows remote attackers to bypass the OMP authentication restrictions and execute OMP commands via a crafted OMP request for version information, which causes the state to be set to CLIENT_AUTHENTIC, as demonstrated by the omp_xml_handle_end_element function in omp.c.

 
2012-11-26
 
CVE-2012-5520

CWE-20
 
 
The send_to_sourcefire function in manage_sql.c in OpenVAS Manager 3.x before 3.0.4 allows remote attackers to execute arbitrary commands via the (1) IP address or (2) port number field in an OMP request.

 
2011-01-28
 
CVE-2011-0018

CWE-20
 
 
The email function in manage_sql.c in OpenVAS Manager 1.0.x through 1.0.3 and 2.0.x through 2.0rc2 allows remote authenticated users to execute arbitrary commands via the (1) To or (2) From e-mail address in an OMP request to the Greenbone Security Assistant (GSA).

 

 >>> Vendor: Openvas 4 Products
Openvas manager
Openvas administrator
Greenbone security assistant
Openvas-scanner

Copyright 2024, cxsecurity.com

 

Back to Top