CVSS: 9.8EPSS: 1%CPEs: 1EXPL: 0CVE-2019-15020
https://notcve.org/view.php?id=CVE-2019-15020
09 Oct 2019 — A security vulnerability exists in the Zingbox Inspector versions 1.293 and earlier, that could allow an attacker to supply an invalid software update image to the Zingbox Inspector that could result in command injection. Se presenta una vulnerabilidad de seguridad en Zingbox Inspector, versiones 1.293 y anteriores, que podría permitir a un atacante suministrar una imagen de actualización de software no válida al Zingbox Inspector que podría resultar en la inyección de comandos. • https://security.paloaltonetworks.com/CVE-2019-15020 • CWE-346: Origin Validation Error •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2019-15021
https://notcve.org/view.php?id=CVE-2019-15021
09 Oct 2019 — A security vulnerability exists in the Zingbox Inspector versions 1.294 and earlier, that can allow an attacker to easily identify instances of Zingbox Inspectors in a local area network. Se presenta una vulnerabilidad de seguridad en Zingbox Inspector, versiones 1.294 y anteriores, que puede permitir a un atacante identificar fácilmente instancias de Zingbox Inspectors en una red de área local. • https://security.paloaltonetworks.com/CVE-2019-15021 • CWE-918: Server-Side Request Forgery (SSRF) •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2019-15022
https://notcve.org/view.php?id=CVE-2019-15022
09 Oct 2019 — A security vulnerability exists in Zingbox Inspector versions 1.294 and earlier, that allows for the Inspector to be susceptible to ARP spoofing. Se presenta una vulnerabilidad de seguridad en Zingbox Inspector versiones 1.294 y anteriores, que permite que el Inspector sea susceptible a la falsificación de ARP. • https://security.paloaltonetworks.com/CVE-2019-15022 • CWE-290: Authentication Bypass by Spoofing •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2019-15023
https://notcve.org/view.php?id=CVE-2019-15023
09 Oct 2019 — A security vulnerability exists in Zingbox Inspector versions 1.294 and earlier, that results in passwords for 3rd party integrations being stored in cleartext in device configuration. Se presenta una vulnerabilidad de seguridad en Zingbox Inspector versiones 1.294 y anteriores, que resulta en que las contraseñas para integraciones de terceros son almacenadas en texto sin cifrar en la configuración del dispositivo. • https://security.paloaltonetworks.com/CVE-2019-15023 • CWE-312: Cleartext Storage of Sensitive Information •
CVSS: 9.3EPSS: 0%CPEs: 12EXPL: 0CVE-2017-5682
https://notcve.org/view.php?id=CVE-2017-5682
28 Feb 2017 — Intel PSET Application Install wrapper of Intel Parallel Studio XE, Intel System Studio, Intel VTune Amplifier, Intel Inspector, Intel Advisor, Intel MPI Library, Intel Trace Analyzer and Collector, Intel Integrated Performance Primitives, Cryptography for Intel Integrated Performance Primitives, Intel Math Kernel Library, Intel Data Analytics Acceleration Library, and Intel Threading Building Blocks before 2017 Update 2 allows an attacker to launch a process with escalated privileges. Intel PSET Applicatio... • http://www.securityfocus.com/bid/96482 •