Show filters
70 Total Results
Displaying 41-50 of 70
Sort by:
Attacker Value
Unknown
CVE-2018-18762
Disclosure Date: March 21, 2019 (last updated November 27, 2024)
SaltOS 3.1 r8126 contains a database download vulnerability.
0
Attacker Value
Unknown
CVE-2018-18760
Disclosure Date: November 16, 2018 (last updated November 27, 2024)
RhinOS 3.0 build 1190 allows CSRF.
0
Attacker Value
Unknown
CVE-2018-18761
Disclosure Date: November 16, 2018 (last updated November 27, 2024)
SaltOS 3.1 r8126 allows action=login&querystring=&user=[SQL] SQL Injection.
0
Attacker Value
Unknown
CVE-2018-18763
Disclosure Date: November 16, 2018 (last updated November 27, 2024)
SaltOS 3.1 r8126 allows action=ajax&query=numbers&page=usuarios&action2=[SQL] SQL Injection.
0
Attacker Value
Unknown
CVE-2018-15751
Disclosure Date: October 24, 2018 (last updated November 27, 2024)
SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allow remote attackers to bypass authentication and execute arbitrary commands via salt-api(netapi).
0
Attacker Value
Unknown
CVE-2018-15750
Disclosure Date: October 24, 2018 (last updated November 27, 2024)
Directory Traversal vulnerability in salt-api in SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allows remote attackers to determine which files exist on the server.
0
Attacker Value
Unknown
CVE-2017-7893
Disclosure Date: April 23, 2018 (last updated November 26, 2024)
In SaltStack Salt before 2016.3.6, compromised salt-minions can impersonate the salt-master.
0
Attacker Value
Unknown
CVE-2017-14696
Disclosure Date: October 24, 2017 (last updated November 26, 2024)
SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote attackers to cause a denial of service via a crafted authentication request.
0
Attacker Value
Unknown
CVE-2017-14695
Disclosure Date: October 24, 2017 (last updated November 26, 2024)
Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote minions with incorrect credentials to authenticate to a master via a crafted minion ID. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-12791.
0
Attacker Value
Unknown
CVE-2015-6918
Disclosure Date: October 10, 2017 (last updated November 26, 2024)
salt before 2015.5.5 leaks git usernames and passwords to the log.
0
