| CVE-2023-34137 |
SonicWall GMS and Analytics CAS Web Services application use static values for authentication without proper checks…
|
Non notée
|
13 juil. 2023 |
| CVE-2023-34136 |
Vulnerability in SonicWall GMS and Analytics allows unauthenticated attacker to upload files to a restricted location…
|
Non notée
|
13 juil. 2023 |
| CVE-2023-34135 |
Path Traversal vulnerability in SonicWall GMS and Analytics allows a remote authenticated attacker to read arbitrary…
|
Non notée
|
13 juil. 2023 |
| CVE-2023-34134 |
Exposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and Analytics allows…
|
Non notée
|
13 juil. 2023 |
| CVE-2023-34133 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SonicWall GMS…
|
7.5
Élevée
|
13 juil. 2023 |
| CVE-2023-34132 |
Use of password hash instead of password for authentication vulnerability in SonicWall GMS and Analytics allows…
|
Non notée
|
13 juil. 2023 |
| CVE-2023-34131 |
Exposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and Analytics enables an…
|
Non notée
|
13 juil. 2023 |
| CVE-2023-34130 |
SonicWall GMS and Analytics use outdated Tiny Encryption Algorithm (TEA) with a hardcoded key to encrypt sensitive data
|
Non notée
|
13 juil. 2023 |
| CVE-2023-34129 |
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in SonicWall GMS and…
|
Non notée
|
13 juil. 2023 |
| CVE-2023-34128 |
Tomcat application credentials are hardcoded in SonicWall GMS and Analytics configuration file
|
Non notée
|
13 juil. 2023 |
| CVE-2023-34127 |
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in SonicWall…
|
8.8
Élevée
|
13 juil. 2023 |
| CVE-2023-34126 |
Vulnerability in SonicWall GMS and Analytics allows an authenticated attacker to upload files on the underlying…
|
Non notée
|
13 juil. 2023 |
| CVE-2023-34125 |
Path Traversal vulnerability in GMS and Analytics allows an authenticated attacker to read arbitrary files from the…
|
Non notée
|
13 juil. 2023 |
| CVE-2023-34124 |
The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing…
|
9.8
Critique
|
13 juil. 2023 |
| CVE-2023-34123 |
Use of Hard-coded Cryptographic Key vulnerability in SonicWall GMS, SonicWall Analytics
|
Non notée
|
12 juil. 2023 |