TI-2011-04523 CVE-2011-5250 · GHSA-jx9h-vx8f-wmc4
Snare for Linux before 1.7.0 has CSRF in the web interface.
Priority LOW 30
Snare for Linux before 1.7.0 has CSRF in the web interface.
Vulnerabilities
4 records
TI-2011-04521 CVE-2011-5247 · GHSA-5g4w-hvjm-3g63
Snare for Linux before 1.7.0 has password disclosure because the rendered page contains the field RemotePassword.
Priority LOW 35
Snare for Linux before 1.7.0 has password disclosure because the rendered page contains the field RemotePassword.
TI-2019-08486 CVE-2019-11364 · GHSA-pm9h-gwq2-f4p2
An OS Command Injection vulnerability in Snare Central before 7.4.5 allows remote…
Priority LOW 36
An OS Command Injection vulnerability in Snare Central before 7.4.5 allows remote authenticated attackers to inject arbitrary OS commands via the ServerConf/DataManagement/DiskManager.php FORMNAS_share parameter.
TI-2019-08485 CVE-2019-11363 · GHSA-xf4w-mx95-2v47
A SQL injection vulnerability in Snare Central before 7.4.5 allows remote authenticated…
Priority LOW 34
A SQL injection vulnerability in Snare Central before 7.4.5 allows remote authenticated attackers to execute arbitrary SQL commands via the AgentConsole/UserGroupQuery.php ShowUser parameter.