Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Vendor: OpenVAS Clear all filters
TI-2011-02961 CVE-2011-3351 · GHSA-8jm3-2795-wc98

Link following in openvas-scanner

Priority LOW 31

openvas-scanner before 2011-09-11 creates a temporary file insecurely when generating OVAL system characteristics document with the ovaldi integrated tool enabled.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00398 Published 2019-11-25 No fix listed CWE-59
TI-2013-05565 CVE-2013-6765 · GHSA-8wfw-j7w7-xqj3

OpenVAS Manager 3.0 before 3.0.7 and 4.0 before 4.0.4 allows remote attackers to bypass…

Priority MEDIUM 43

OpenVAS Manager 3.0 before 3.0.7 and 4.0 before 4.0.4 allows remote attackers to bypass the OMP authentication restrictions and execute OMP commands via a crafted OMP request for version information, which causes the sta…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.07271 Published 2014-05-19 No fix listed CWE-287
TI-2011-00018 CVE-2011-0018 · GHSA-6x34-cqqf-xp2p

The email function in manage_sql.c in OpenVAS Manager 1.0.x through 1.0.3 and 2.0.x…

Priority MEDIUM 51

The email function in manage_sql.c in OpenVAS Manager 1.0.x through 1.0.3 and 2.0.x through 2.0rc2 allows remote authenticated users to execute arbitrary commands via the (1) To or (2) From e-mail address in an OMP reque…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.09266 Published 2011-01-28 No fix listed CWE-20