Openvas Manager

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2014-9220 Dec 03, 01:59 HIGH PATCH This Week

SQL injection vulnerability in OpenVAS Manager before 4.0.6 and 5.x before 5.0.7 allows remote attackers to execute arbitrary SQL commands via the timezone parameter in a modify_schedule OMP command. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity.

SQLi Fedora Opensuse Openvas Manager Fedoraproject +1

NVD

CVSS 2.0

7.5

EPSS

0.4%

CVE-2013-6765 May 19, 14:55 HIGH POC This Week

OpenVAS Manager 3.0 before 3.0.7 and 4.0 before 4.0.4 allows remote attackers to bypass the OMP authentication restrictions and execute OMP commands via a crafted OMP request for version information,. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Openvas Manager Openvas

NVD Exploit-DB

CVSS 2.0

7.5

EPSS

4.5%

CVE-2012-5520 Nov 26, 12:45 HIGH POC This Week

The send_to_sourcefire function in manage_sql.c in OpenVAS Manager 3.x before 3.0.4 allows remote attackers to execute arbitrary commands via the (1) IP address or (2) port number field in an OMP. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Openvas Manager Openvas

NVD

CVSS 2.0

7.5

EPSS

2.1%

CVE-2014-9220

EPSS 0% CVSS 7.5

HIGH PATCH This Week

SQLi Fedora Opensuse +3

NVD

CVE-2013-6765

EPSS 5% CVSS 7.5

HIGH POC This Week

Authentication Bypass Openvas Manager Openvas

NVD Exploit-DB

CVE-2012-5520

EPSS 2% CVSS 7.5

HIGH POC This Week

Information Disclosure Openvas Manager Openvas

NVD