CVSS: 6.5EPSS: 97%CPEs: 1EXPL: 4CVE-2012-2962 – Dell SonicWALL Scrutinizer 9.0.1 - 'statusFilter.php?q' SQL Injection
https://notcve.org/view.php?id=CVE-2012-2962
SQL injection vulnerability in d4d/statusFilter.php in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.2 allows remote authenticated users to execute arbitrary SQL commands via the q parameter. Vulnerabilidad de inyección de secuencias de comandos en d4d/statusFilter.php en Plixer Scrutinizer (también conocido como Dell SonicWALL Scrutinizer) anterior a v9.5.2 permite a usuarios remotos autenticados ejecutar comandos SQL a través del parámetro q. Dell SonicWALL Scrutinizer version 9.0.1 suffers from a remote SQL injection vulnerability. • https://www.exploit-db.com/exploits/20033 https://www.exploit-db.com/exploits/20204 http://secunia.com/advisories/50052 http://www.exploit-db.com/exploits/20033 http://www.kb.cert.org/vuls/id/404051 http://www.osvdb.org/84232 http://www.plixer.com/Press-Releases/plixer-releases-9-5-2.html http://www.securityfocus.com/bid/54625 http://www.sonicwall.com/shared/download/Dell_SonicWALL_Scrutinizer_Service_Bulletin_for_SQL_injection_vulnerability_CVE.pdf https://exchange.xforce • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 9.3EPSS: 21%CPEs: 2EXPL: 0CVE-2010-2583
https://notcve.org/view.php?id=CVE-2010-2583
Stack-based buffer overflow in SonicWALL SSL-VPN End-Point Interrogator/Installer ActiveX control (Aventail.EPInstaller) before 10.5.2 and 10.0.5 hotfix 3 allows remote attackers to execute arbitrary code via long (1) CabURL and (2) Location arguments to the Install3rdPartyComponent method. Desbordamiento de búfer basado en pila en el control ActiveX SonicWALL SSL-VPN End-Point Interrogator/Installer anterior a v10.5.2 y v10.0.5 hotfix 3, permite a atacantes remotos ejecutar código de su elección a través de los argumentos (1) CabURL y (2) Location de gran tamaño al método Install3rdPartyComponent. • http://secunia.com/advisories/41644 http://secunia.com/secunia_research/2010-117 http://software.sonicwall.com/Aventail/KB/hotfix/10.0.5/clt-hotfix-10_0_5-003.txt http://www.securityfocus.com/archive/1/514561/100/0/threaded http://www.securityfocus.com/bid/44535 http://www.securitytracker.com/id?1024666 https://exchange.xforce.ibmcloud.com/vulnerabilities/62865 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 6.8EPSS: 1%CPEs: 5EXPL: 0CVE-2009-2631
https://notcve.org/view.php?id=CVE-2009-2631
Multiple clientless SSL VPN products that run in web browsers, including Stonesoft StoneGate; Cisco ASA; SonicWALL E-Class SSL VPN and SonicWALL SSL VPN; SafeNet SecureWire Access Gateway; Juniper Networks Secure Access; Nortel CallPilot; Citrix Access Gateway; and other products, when running in configurations that do not restrict access to the same domain as the VPN, retrieve the content of remote URLs from one domain and rewrite them so they originate from the VPN's domain, which violates the same origin policy and allows remote attackers to conduct cross-site scripting attacks, read cookies that originated from other domains, access the Web VPN session to gain access to internal resources, perform key logging, and conduct other attacks. NOTE: it could be argued that this is a fundamental design problem in any clientless VPN solution, as opposed to a commonly-introduced error that can be fixed in separate implementations. Therefore a single CVE has been assigned for all products that have this design. Múltiples productos VPN de SSL sin cliente que se ejecutan en navegadores web, incluyendo StoneGate de Stonesoft; ASA de Cisco; E-Class SSL VPN de SonicWALL y SSL VPN de SonicWALL; SecureWire Access Gateway de SafeNet; Networks Secure Access de Juniper; CallPilot de Nortel; Access Gateway de Citrix; y otros productos, cuando se ejecutan en configuraciones que no restringen el acceso al mismo dominio que la VPN, recuperan el contenido de las direcciones URL remotas de un dominio y las reescriben para que se originen desde el dominio de la VPN, lo que viola la política del mismo origen y permite a atacantes remotos conducir ataques de tipo cross-site scripting, leer cookies que se originaron desde otros dominios, acceder a la sesión de VPN web para conseguir acceso a los recursos internos, realizar el registro de claves y conducir otros ataques. NOTA: se podría argumentar que se trata de un problema de diseño fundamental en cualquier solución VPN sin cliente, a diferencia de un error comúnmente introducido que puede ser corregido en implementaciones separadas. • http://kb.juniper.net/KB15799 http://seclists.org/fulldisclosure/2006/Jun/238 http://seclists.org/fulldisclosure/2006/Jun/269 http://seclists.org/fulldisclosure/2006/Jun/270 http://secunia.com/advisories/37696 http://secunia.com/advisories/37786 http://secunia.com/advisories/37788 http://secunia.com/advisories/37789 http://securitytracker.com/id?1023255 http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=984744 http://www.kb.cert.org/vuls/id/261869 http:/ • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 4.3EPSS: 0%CPEs: 4EXPL: 1CVE-2008-4918 – SonicWALL Content-Filtering Universal Script Injection Vulnerability
https://notcve.org/view.php?id=CVE-2008-4918
Cross-site scripting (XSS) vulnerability in SonicWALL SonicOS Enhanced before 4.0.1.1, as used in SonicWALL Pro 2040 and TZ 180 and 190, allows remote attackers to inject arbitrary web script or HTML into arbitrary web sites via a URL to a site that is blocked based on content filtering, which is not properly handled in the CFS block page, aka "universal website hijacking." Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en SonicWALL SonicOS Enhanced anterior a v4.0.1.1, como el utilizado en SonicWALL Pro 2040 y TZ 180 y 190; permite a atacantes remotos inyectar secuencias de comandos Web o HTML en sitios web de su elección a través de una URL a un sitio que se basa en el bloqueo de filtrado de contenidos; esto no se maneja adecuadamente en la página de bloqueo CFS. También se conoce como "secuestro universal del sitio web" (universal website hijacking). This vulnerability allows remote attackers to execute a script injection attack on arbitrary sites through vulnerable installations of SonicWALL. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page or open a malicious web link. The specific flaw exists in the default error page displayed when a user requests access to a web site that is blocked based on the devices content-filtering rules. • https://www.exploit-db.com/exploits/32552 http://secunia.com/advisories/32498 http://securityreason.com/securityalert/4556 http://www.gnucitizen.org/blog/new-technique-to-perform-universal-website-hijacking http://www.securityfocus.com/archive/1/497948/100/0/threaded http://www.securityfocus.com/archive/1/497958/100/0/threaded http://www.securityfocus.com/archive/1/497968/100/0/threaded http://www.securityfocus.com/archive/1/497989/100/0/threaded http://www.securityfocus.com/archi • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 3CVE-2008-2162 – SonicWALL Email Security 6.1.1 - Error Page Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2008-2162
Cross-site scripting (XSS) vulnerability in SonicWall Email Security 6.1.1 allows remote attackers to inject arbitrary web script or HTML via the Host header in a request to a non-existent web page, which is not properly sanitized in an error page. Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en SonicWall Email Security 6.1.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de la cabecera Host en una petición a una página web que no existe, lo que no se limpia correctamente en una página de error. • https://www.exploit-db.com/exploits/31756 http://archives.neohapsis.com/archives/fulldisclosure/2008-05/0226.html http://www.securityfocus.com/bid/29107 http://www.securitytracker.com/id?1019999 https://exchange.xforce.ibmcloud.com/vulnerabilities/42283 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •