WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Vendor sonicwall✕
Overview 232 matches · 3 in Waratek scope · 3 protected · 49 exploited · 24 CISA KEV · 50 public PoC · 28 EPSS ≥ 0.5
232matches 3in Waratek scope1.3% 3protected1.3% 49exploited21.1% 24CISA KEV10.3% 50public PoC21.6% 28EPSS ≥ 0.512.1%
Protected by Waratek 3 1.3% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 20 8.6% Not applicable 209 90.1% Withdrawn CVE 0 0.0%
Critical 47 20.3% High 105 45.3% Medium 77 33.2% Low 3 1.3% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 3 1.3% partly blocked 0 0.0% not blocked 229 98.7% not established 0 0.0% unrecorded 0 0.0%
Exploited 49 21.1% Working exploit published 25 10.8% Proof of concept only 5 2.2% Forecast only 2 0.9% No public exploit 151 65.1%
split by peak 38 / year
Not applicable: 209Outside Waratek scope: 20Protected by Waratek: 3 Low: 3Medium: 77High: 105Critical: 47 not blocked: 229blocked by ARMR today: 3 No public exploit: 151Forecast only: 2Proof of concept only: 5Working exploit published: 25Exploited: 49
20014 Not applicable4 High2 Medium2 not blocked4 Working exploit published1 No public exploit3 20022 Not applicable2 Medium2 not blocked2 Working exploit published1 No public exploit1 20032 Not applicable2 High1 Medium1 not blocked2 No public exploit2 20040 20051 Not applicable1 Medium1 not blocked1 Working exploit published1 20060 20074 Not applicable4 High4 not blocked4 Working exploit published3 No public exploit1 20082 Outside Waratek scope1 Not applicable1 Medium2 not blocked2 Working exploit published2 20091 Not applicable1 Medium1 not blocked1 No public exploit1 20101 Not applicable1 High1 not blocked1 No public exploit1 20110 20125 Not applicable5 High2 Medium3 not blocked5 Exploited1 Working exploit published4 20132 Not applicable2 High1 Low1 not blocked2 Working exploit published2 20147 Not applicable7 High1 Medium6 not blocked7 Working exploit published3 No public exploit4 20154 Not applicable4 High1 Medium3 not blocked4 Working exploit published1 No public exploit3 20162 Not applicable2 Critical2 not blocked2 No public exploit2 20170 20185 Outside Waratek scope1 Not applicable4 Critical1 Medium4 not blocked5 Exploited2 No public exploit3 201925 Outside Waratek scope8 Not applicable17 Critical9 High12 Medium4 not blocked25 Exploited4 Forecast only2 No public exploit19 202019 Not applicable19 Critical3 High9 Medium7 not blocked19 Exploited1 Working exploit published2 No public exploit16 202138 Protected by Waratek3 Outside Waratek scope6 Not applicable29 Critical11 High20 Medium7 blocked by ARMR today3 not blocked35 Exploited11 Working exploit published3 Proof of concept only2 No public exploit22 202221 Not applicable21 Critical4 High13 Medium4 not blocked21 Exploited5 No public exploit16 202335 Outside Waratek scope1 Not applicable34 Critical6 High17 Medium12 not blocked35 Exploited11 Working exploit published2 No public exploit22 202416 Not applicable16 Critical4 High7 Medium5 not blocked16 Exploited3 Proof of concept only2 No public exploit11 202516 Not applicable16 Critical5 High7 Medium4 not blocked16 Exploited6 Proof of concept only1 No public exploit9 202620 Outside Waratek scope3 Not applicable17 Critical2 High7 Medium9 Low2 not blocked20 Exploited5 No public exploit15
200220052008201120142017202020232026
232 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 3 of 3 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2015-3447 Medium 2015-04-29 Not applicable No public exploit Multiple cross-site scripting (XSS) vulnerabilities in macIpSpoofView.html in Dell SonicWall SonicOS 7.5.0.12 and 6.x allow remote attackers to inject arbitrary web script or HTML via the (1) searchSpoof or (2) searchSpoofIpDet parameter.
CVE-2014-8420 High 2014-11-25 Not applicable Working exploit published The ViewPoint web application in Dell SonicWALL Global Management System (GMS) before 7.2 SP2, SonicWALL Analyzer before 7.2 SP2, and SonicWALL UMA before 7.2 SP2 allows remote authenticated users to execute arbitrary code via unspecified vectors.
CVE-2014-5024 Medium 2014-07-24 Not applicable No public exploit Cross-site scripting (XSS) vulnerability in sgms/panelManager in Dell SonicWALL GMS, Analyzer, and UMA before 7.2 SP1 allows remote attackers to inject arbitrary web script or HTML via the node_id parameter.
CVE-2014-4977 Medium 2014-07-16 Not applicable Working exploit published Multiple SQL injection vulnerabilities in Dell SonicWall Scrutinizer 11.0.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) selectedUserGroup parameter in a create new user request to cgi-bin/admin.cgi or the (2) user_id parameter in the changeUnit function, (3) methodDetail parameter in the methodDetail function, or (4) xcNetworkDetail parameter in the xcNetworkDetail function in d4d/exporters.php.
CVE-2014-4976 Medium 2014-07-16 Not applicable No public exploit Dell SonicWall Scrutinizer 11.0.1 allows remote authenticated users to change user passwords via the user ID in the savePrefs parameter in a change password request to cgi-bin/admin.cgi.
CVE-2014-2879 Medium 2014-04-17 Not applicable Working exploit published Multiple cross-site scripting (XSS) vulnerabilities in Dell SonicWALL Email Security 7.4.5 and earlier allow remote authenticated administrators to inject arbitrary web script or HTML via (1) the uploadPatch parameter to the System/Advanced page (settings_advanced.html) or (2) the uploadLicenses parameter in the License management (settings_upload_dlicense.html) page.
CVE-2014-2589 Medium 2014-03-24 Not applicable No public exploit Cross-site scripting (XSS) vulnerability in the Dashboard Backend service (stats/dashboard.jsp) in SonicWall Network Security Appliance (NSA) 2400 allows remote attackers to inject arbitrary web script or HTML via the sn parameter.
CVE-2014-0332 Medium 2014-02-14 Not applicable No public exploit Cross-site scripting (XSS) vulnerability in mainPage in Dell SonicWALL GMS before 7.1 SP2, SonicWALL Analyzer before 7.1 SP2, and SonicWALL UMA E5000 before 7.1 SP2 might allow remote attackers to inject arbitrary web script or HTML via the node_id parameter in a ScreenDisplayManager genNetwork action.
CVE-2013-7025 Low 2013-12-09 Not applicable Working exploit published Multiple cross-site scripting (XSS) vulnerabilities in ematStaticAlertTypes.jsp in the Alert Settings section in Dell SonicWALL Global Management System (GMS), Analyzer, and UMA EM5000 7.1 SP1 before Hotfix 134235 allow remote authenticated users to inject arbitrary web script or HTML via the (1) valfield_1 or (2) value_1 parameter to createNewThreshold.jsp.
CVE-2011-5262 High 2013-02-12 Not applicable Working exploit published SQL injection vulnerability in prodpage.cfm in SonicWALL Aventail allows remote attackers to execute arbitrary SQL commands via the CategoryID parameter.
CVE-2012-3951 High 2012-07-31 Not applicable Working exploit published The MySQL component in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) 9.0.1.19899 and earlier has a default password of admin for the (1) scrutinizer and (2) scrutremote accounts, which allows remote attackers to execute arbitrary SQL commands via a TCP session.
CVE-2012-3848 Medium 2012-07-31 Not applicable Working exploit published Multiple cross-site scripting (XSS) vulnerabilities in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to d4d/exporters.php, (2) the HTTP Referer header to d4d/exporters.php, or (3) unspecified input to d4d/contextMenu.php.
CVE-2012-2627 High 2012-07-31 Not applicable Working exploit published d4d/uploader.php in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 allows remote attackers to create or overwrite arbitrary files in %PROGRAMFILES%\Scrutinizer\snmp\mibs\ via a multipart/form-data POST request.
CVE-2012-2626 Medium 2012-07-31 Not applicable Exploited cgi-bin/admin.cgi in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 does not require token authentication, which allows remote attackers to add administrative accounts via a userprefs action.
CVE-2012-2962 Medium 2012-07-30 Not applicable Working exploit published SQL injection vulnerability in d4d/statusFilter.php in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.2 allows remote authenticated users to execute arbitrary SQL commands via the q parameter.
CVE-2010-2583 High 2010-11-03 Not applicable No public exploit Stack-based buffer overflow in SonicWALL SSL-VPN End-Point Interrogator/Installer ActiveX control (Aventail.EPInstaller) before 10.5.2 and 10.0.5 hotfix 3 allows remote attackers to execute arbitrary code via long (1) CabURL and (2) Location arguments to the Install3rdPartyComponent method.
CVE-2009-2631 Medium 2009-12-04 Not applicable No public exploit Multiple clientless SSL VPN products that run in web browsers, including Stonesoft StoneGate; Cisco ASA; SonicWALL E-Class SSL VPN and SonicWALL SSL VPN; SafeNet SecureWire Access Gateway; Juniper Networks Secure Access; Nortel CallPilot; Citrix Access Gateway; and other products, when running in configurations that do not restrict access to the same domain as the VPN, retrieve the content of remote URLs from one domain and rewrite them so they originate from the VPN's domain, which violates the same origin policy and allows remote attackers to conduct cross-site scripting attacks, read cookies that originated from other domains, access the Web VPN session to gain access to internal resources, perform key logging, and conduct other attacks. NOTE: it could be argued that this is a fundamental design problem in any clientless VPN solution, as opposed to a commonly-introduced error that can be fixed in separate implementations. Therefore a single CVE has been assigned for all products that have this design
CVE-2008-4918 Medium 2008-11-04 Not applicable Working exploit published Cross-site scripting (XSS) vulnerability in SonicWALL SonicOS Enhanced before 4.0.1.1, as used in SonicWALL Pro 2040 and TZ 180 and 190, allows remote attackers to inject arbitrary web script or HTML into arbitrary web sites via a URL to a site that is blocked based on content filtering, which is not properly handled in the CFS block page, aka "universal website hijacking."
CVE-2008-2162 Medium 2008-05-12 Outside Waratek scope Working exploit published Cross-site scripting (XSS) vulnerability in SonicWall Email Security 6.1.1 allows remote attackers to inject arbitrary web script or HTML via the Host header in a request to a non-existent web page, which is not properly sanitized in an error page.
CVE-2007-6273 High 2007-12-07 Not applicable Working exploit published Multiple format string vulnerabilities in the configuration file in SonicWALL GLobal VPN Client 3.1.556 and 4.0.0.810 allow user-assisted remote attackers to execute arbitrary code via format string specifiers in the (1) Hostname tag or the (2) name attribute in the Connection tag. NOTE: there might not be any realistic circumstances in which this issue crosses privilege boundaries.
CVE-2007-5815 High 2007-11-05 Not applicable Working exploit published Absolute path traversal vulnerability in the WebCacheCleaner ActiveX control 1.3.0.3 in SonicWall SSL-VPN 200 before 2.1, and SSL-VPN 2000/4000 before 2.5, allows remote attackers to delete arbitrary files via a full pathname in the argument to the FileDelete method.
CVE-2007-5814 High 2007-11-05 Not applicable No public exploit Multiple buffer overflows in the SonicWall SSL-VPN NetExtender NELaunchCtrl ActiveX control before 2.1.0.51, and 2.5.x before 2.5.0.56, allow remote attackers to execute arbitrary code via a long (1) serverAddress, (2) sessionId, (3) clientIPLower, (4) clientIPHigher, (5) userName, (6) domainName, or (7) dnsSuffix Unicode property value. NOTE: the AddRouteEntry vector is covered by CVE-2007-5603.
CVE-2007-5603 High 2007-11-05 Not applicable Working exploit published Stack-based buffer overflow in the SonicWall SSL-VPN NetExtender NELaunchCtrl ActiveX control before 2.1.0.51, and 2.5.x before 2.5.0.56, allows remote attackers to execute arbitrary code via a long string in the second argument to the AddRouteEntry method.
CVE-2005-1006 Medium 2005-05-02 Not applicable Working exploit published Multiple cross-site scripting (XSS) vulnerabilities in SonicWALL SOHO 5.1.7.0 allow remote attackers to inject arbitrary web script or HTML via (1) the URL or (2) the user login name, which is not filtered when the administrator views the log file.
CVE-2003-1490 High 2003-12-31 Not applicable No public exploit SonicWall Pro running firmware 6.4.0.1 allows remote attackers to cause a denial of service (device reset) via a long HTTP POST to the internal interface, possibly due to a buffer overflow.
CVE-2003-1320 Medium 2003-12-31 Not applicable No public exploit SonicWALL firmware before 6.4.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange (IKE) response packets, possibly including (1) a large Security Parameter Index (SPI) field, (2) a large number of payloads, or (3) a long payload.
CVE-2002-2341 Medium 2002-12-31 Not applicable Working exploit published Cross-site scripting (XSS) vulnerability in content blocking in SonicWALL SOHO3 6.3.0.0 allows remote attackers to inject arbitrary web script or HTML via a blocked URL.
CVE-2002-2181 Medium 2002-12-31 Not applicable No public exploit SonicWall Content Filtering allows local users to access prohibited web sites via requests to the web site's IP address instead of the domain name.
CVE-2001-1104 High 2001-07-25 Not applicable Working exploit published SonicWALL SOHO uses easily predictable TCP sequence numbers, which allows remote attackers to spoof or hijack sessions.
CVE-2001-0376 High 2001-06-18 Not applicable No public exploit SonicWALL Tele2 and SOHO firewalls with 6.0.0.0 firmware using IPSEC with IKE pre-shared keys do not allow for the use of full 128 byte IKE pre-shared keys, which is the intended design of the IKE pre-shared key, and only support 48 byte keys. This allows a remote attacker to brute force attack the pre-shared keys with significantly less resources than if the full 128 byte IKE pre-shared keys were used.
CVE-2000-1098 Medium 2001-01-09 Not applicable No public exploit The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via an empty GET or POST request.
CVE-2000-1097 Medium 2001-01-09 Not applicable No public exploit The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via a long username in the authentication page.
‹ prev page 3 of 3 next ›