2271
|
- |
|
-
|
-
|
Audit records for OpenAPI requests may include sensitive information.
This could lead to unauthorized accesses and privilege escalation.
|
-
|
CVE-2023-6916
|
2024-09-20 21:15 |
2024-04-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
2272
|
7.5 |
HIGH
Network
nozominetworks
|
cmc guardian
|
A missing authentication check in the WebSocket channel used for the Check Point IoT integration in Nozomi Networks Guardian and CMC, may allow an unauthenticated attacker to obtain assets data witho…
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2023-5253
|
2024-09-20 21:15 |
2024-01-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
2273
|
4.3 |
MEDIUM
Network
|
nozominetworks
|
cmc guardian
|
A partial DoS vulnerability has been detected in the Reports section, exploitable by a malicious authenticated user forcing a report to be saved with its name set as null.
The reports section will b…
|
NVD-CWE-noinfo
|
CVE-2023-24015
|
2024-09-20 21:15 |
2023-08-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
2274
|
4.9 |
MEDIUM
Network
|
nozominetworks
|
cmc guardian
|
An authenticated administrator can upload a SAML configuration file with the wrong format, with the application not checking the correct file format. Every subsequent application request will return …
|
NVD-CWE-noinfo
|
CVE-2023-23903
|
2024-09-20 21:15 |
2023-08-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
2275
|
4.8 |
MEDIUM
Network
|
nozominetworks
|
cmc guardian
|
An authenticated attacker with administrative access to the web management interface can inject malicious JavaScript code inside the definition of a Threat Intelligence rule, that will be stored and …
|
CWE-79
Cross-site Scripting
|
CVE-2023-22843
|
2024-09-20 21:15 |
2023-08-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
2276
|
6.5 |
MEDIUM
Network
|
nozominetworks
|
cmc guardian
|
A blind SQL Injection vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in the sorting parameter, allows an authenticated attacker to execute arbitrary SQL statement…
|
CWE-89
SQL Injection
|
CVE-2023-22378
|
2024-09-20 21:15 |
2023-08-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
2277
|
7.5 |
HIGH
Network
nozominetworks
|
cmc guardian
|
A Denial of Service (Dos) vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in certain fields used in the Asset Intelligence functionality of our IDS, allows an unau…
|
CWE-20
Improper Input Validation
|
CVE-2023-32649
|
2024-09-20 20:15 |
2023-09-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
2278
|
7.4 |
HIGH
Network
|
nozominetworks
|
cmc guardian
|
A SQL Injection vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in certain fields used in the Asset Intelligence functionality of our IDS, may allow an unauthentic…
|
CWE-89
SQL Injection
|
CVE-2023-29245
|
2024-09-20 20:15 |
2023-09-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
2279
|
7.2 |
HIGH
Network
|
nozominetworks
|
cmc guardian
|
Improper Input Validation vulnerability in project file upload in Nozomi Networks Guardian and CMC allows an authenticated attacker with admin or import manager roles to execute unattended commands o…
|
CWE-20
Improper Input Validation
|
CVE-2022-0551
|
2024-09-20 20:15 |
2022-03-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
2280
|
7.2 |
HIGH
Network
|
nozominetworks
|
cmc guardian
|
Improper Input Validation vulnerability in custom report logo upload in Nozomi Networks Guardian, and CMC allows an authenticated attacker with admin or report manager roles to execute unattended com…
|
CWE-20
Improper Input Validation
|
CVE-2022-0550
|
2024-09-20 20:15 |
2022-03-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|