CVE-2022-0652
Published Mar 22, 2022Confd log files contain local users', including root’s, SHA512crypt password hashes with insecure access permissions. This allows a local attacker to attempt off-line brute-force…
Vendor/product archive
sophos / unified_threat_management CVEs
Beta · best-effort7 CVEs tagged to sophos / unified_threat_management — 1 Critical, 2 High, 3 Medium, 1 Low, 0 Unrated.
CVE-2022-0386
Published Mar 22, 2022A post-auth SQL injection vulnerability in the Mail Manager potentially allows an authenticated attacker to execute code in Sophos UTM before version 9.710.
CVE-2021-25273
Published Jul 29, 2021Stored XSS can execute as administrator in quarantined email detail view in Sophos UTM before version 9.706.
CVE-2020-25223
Published Sep 25, 2020A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM before v9.705 MR5, v9.607 MR7, and v9.511 MR11
- evidence mentions
- 6
- Buzz score
- 56.0
CVE-2016-0777
Published Jan 14, 2016The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by…
- evidence mentions
- 3
- Buzz score
- 20.4
CVE-2014-2537
Published Mar 18, 2014Memory leak in the TCP stack in the kernel in Sophos UTM before 9.109 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.
CVE-2012-3238
Published Jul 9, 2012Cross-site scripting (XSS) vulnerability in the Backup/Restore component in WebAdmin in Astaro Security Gateway before 8.305 allows remote attackers to inject arbitrary web script…
Showing 1-7 of 7 CVEsPage 1 of 1