Openvas Manager

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2014-9220 HIGH PATCH This Week

SQL injection vulnerability in OpenVAS Manager before 4.0.6 and 5.x before 5.0.7 allows remote attackers to execute arbitrary SQL commands via the timezone parameter in a modify_schedule OMP command. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity.

SQLi Fedora Openvas Manager Opensuse

NVD

CVSS 2.0

7.5

EPSS

0.4%

CVE-2013-6765 HIGH POC This Week

OpenVAS Manager 3.0 before 3.0.7 and 4.0 before 4.0.4 allows remote attackers to bypass the OMP authentication restrictions and execute OMP commands via a crafted OMP request for version information,. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Openvas Manager

NVD Exploit-DB

CVSS 2.0

7.5

EPSS

4.5%

CVE-2012-5520 HIGH POC This Week

The send_to_sourcefire function in manage_sql.c in OpenVAS Manager 3.x before 3.0.4 allows remote attackers to execute arbitrary commands via the (1) IP address or (2) port number field in an OMP. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Openvas Manager

NVD

CVSS 2.0

7.5

EPSS

2.1%

CVE-2014-9220

EPSS 0% CVSS 7.5

HIGH PATCH This Week

SQLi Fedora Openvas Manager +1

NVD

CVE-2013-6765

EPSS 5% CVSS 7.5

HIGH POC This Week

Authentication Bypass Openvas Manager

NVD Exploit-DB

CVE-2012-5520

EPSS 2% CVSS 7.5

HIGH POC This Week

Information Disclosure Openvas Manager

NVD