TI-2011-01415 CVE-2011-1597 · GHSA-68gj-fr3h-542g
OpenVAS Manager v2.0.3 allows plugin remote code execution.
Priority MEDIUM 42
OpenVAS Manager v2.0.3 allows plugin remote code execution.
Vulnerabilities
5 records
TI-2014-07484 CVE-2014-9220 · GHSA-7mpx-36hm-f96q
SQL injection vulnerability in OpenVAS Manager before 4.0.6 and 5.x before 5.0.7 allows…
Priority LOW 37
SQL injection vulnerability in OpenVAS Manager before 4.0.6 and 5.x before 5.0.7 allows remote attackers to execute arbitrary SQL commands via the timezone parameter in a modify_schedule OMP command.
TI-2013-05565 CVE-2013-6765 · GHSA-8wfw-j7w7-xqj3
OpenVAS Manager 3.0 before 3.0.7 and 4.0 before 4.0.4 allows remote attackers to bypass…
Priority MEDIUM 43
OpenVAS Manager 3.0 before 3.0.7 and 4.0 before 4.0.4 allows remote attackers to bypass the OMP authentication restrictions and execute OMP commands via a crafted OMP request for version information, which causes the sta…
TI-2012-04639 CVE-2012-5520 · GHSA-fqgh-fg9x-68q8
The send_to_sourcefire function in manage_sql.c in OpenVAS Manager 3.x before 3.0.4…
Priority LOW 38
The send_to_sourcefire function in manage_sql.c in OpenVAS Manager 3.x before 3.0.4 allows remote attackers to execute arbitrary commands via the (1) IP address or (2) port number field in an OMP request.
TI-2011-00018 CVE-2011-0018 · GHSA-6x34-cqqf-xp2p
The email function in manage_sql.c in OpenVAS Manager 1.0.x through 1.0.3 and 2.0.x…
Priority MEDIUM 51
The email function in manage_sql.c in OpenVAS Manager 1.0.x through 1.0.3 and 2.0.x through 2.0rc2 allows remote authenticated users to execute arbitrary commands via the (1) To or (2) From e-mail address in an OMP reque…