Vulnerabilities

TI-2011-03554 CVE-2011-4024 · GHSA-r8g7-7qwc-35qc

Cross-site scripting (XSS) vulnerability in ocsinventory in OCS Inventory NG 2.0.1 and…

LOW 28

Cross-site scripting (XSS) vulnerability in ocsinventory in OCS Inventory NG 2.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.05139 Published 2011-10-21 No fix listed CWE-79

TI-2010-01662 CVE-2010-1733 · GHSA-gqwx-r9ff-8pph

Multiple SQL injection vulnerabilities in OCS Inventory NG before 1.02.3 allow remote…

LOW 32

Multiple SQL injection vulnerabilities in OCS Inventory NG before 1.02.3 allow remote attackers to execute arbitrary SQL commands via (1) multiple inventory fields to the search form, reachable through index.php; or (2)…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01021 Published 2010-05-05 No fix listed CWE-89

TI-2010-01539 CVE-2010-1595 · GHSA-hrc6-53gx-mqr9

Multiple SQL injection vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1…

LOW 35

Multiple SQL injection vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to execute arbitrary SQL commands via the (1) c, (2) val_1, or (3) onglet_bis parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01199 Published 2010-04-28 No fix listed CWE-89

TI-2010-01538 CVE-2010-1594 · GHSA-88m7-jg48-r9mg

Multiple cross-site scripting (XSS) vulnerabilities in ocsreports/index.php in OCS…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to inject arbitrary web script or HTML via (1) the query string, (2) the BASE parameter, or (3…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01131 Published 2010-04-28 No fix listed CWE-79

TI-2009-02897 CVE-2009-3042 · GHSA-9qj6-5wm9-wp55

SQL injection vulnerability in machine.php in Open Computer and Software (OCS) Inventory…

LOW 38

SQL injection vulnerability in machine.php in Open Computer and Software (OCS) Inventory NG 1.02.1 allows remote attackers to execute arbitrary SQL commands via the systemid parameter, a different vector than CVE-2009-30…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02958 Published 2009-09-01 No fix listed CWE-89

TI-2009-02895 CVE-2009-3040 · GHSA-4fhc-2vjg-rx26

Multiple SQL injection vulnerabilities in Open Computer and Software (OCS) Inventory NG…

LOW 36

Multiple SQL injection vulnerabilities in Open Computer and Software (OCS) Inventory NG 1.02 for Unix allow remote attackers to execute arbitrary SQL commands via the (1) N, (2) DL, (3) O and (4) V parameters to download…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01422 Published 2009-09-01 No fix listed CWE-89

TI-2009-00641 CVE-2009-0667 · GHSA-w3ph-grj2-mw52

Untrusted search path vulnerability in Agent/Backend.pm in Ocsinventory-Agent before…

LOW 32

Untrusted search path vulnerability in Agent/Backend.pm in Ocsinventory-Agent before 0.0.9.3, and 1.x before 1.0.1, in OCS Inventory allows local users to gain privileges via a Trojan horse Perl module in an arbitrary di…

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.00374 Published 2009-07-09 No fix listed

TI-2009-02073 CVE-2009-2166 · GHSA-6wjf-4944-xw92

Absolute path traversal vulnerability in cvs.php in OCS Inventory NG before 1.02.1 on…

LOW 29

Absolute path traversal vulnerability in cvs.php in OCS Inventory NG before 1.02.1 on Unix allows remote attackers to read arbitrary files via a full pathname in the log parameter.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03195 Published 2009-06-22 No fix listed CWE-22

TI-2009-01684 CVE-2009-1769 · GHSA-22rf-ghp5-fc8x

The web interface in Open Computer and Software Inventory Next Generation (OCS Inventory…

LOW 26

The web interface in Open Computer and Software Inventory Next Generation (OCS Inventory NG) 1.01 generates different error messages depending on whether a username is valid, which allows remote attackers to enumerate va…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01558 Published 2009-05-22 No fix listed CWE-200

TI-2009-01367 CVE-2009-1443 · GHSA-8qr4-jrr4-47ch

Multiple unspecified vulnerabilities in the Server component in OCS Inventory NG before…

MEDIUM 50

Multiple unspecified vulnerabilities in the Server component in OCS Inventory NG before 1.02 have unknown impact and attack vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04007 Published 2009-04-27 No fix listed

Vulnerabilities

Filters