CVE-2014-2850
Published Apr 11, 2014The network interface configuration page (netinterface) in Sophos Web Appliance before 3.8.2 allows remote administrators to execute arbitrary commands via shell metacharacters in…
Vendor/product archive
sophos / web_appliance_firmware CVEs
Beta · best-effort6 CVEs tagged to sophos / web_appliance_firmware — 2 Critical, 2 High, 2 Medium, 0 Low, 0 Unrated.
CVE-2014-2849
Published Apr 11, 2014The Change Password dialog box (change_password) in Sophos Web Appliance before 3.8.2 allows remote authenticated users to change the admin user password via a crafted request.
CVE-2013-2643
Published Mar 18, 2014Multiple cross-site scripting (XSS) vulnerabilities in Sophos Web Appliance before 3.7.8.2 allow remote attackers to inject arbitrary web script or HTML via the (1) xss parameter…
- evidence mentions
- 3
- Buzz score
- 20.4
CVE-2013-2642
Published Mar 18, 2014Sophos Web Appliance before 3.7.8.2 allows (1) remote attackers to execute arbitrary commands via shell metacharacters in the client-ip parameter to the Block page, when using the…
CVE-2013-2641
Published Mar 18, 2014Directory traversal vulnerability in patience.cgi in Sophos Web Appliance before 3.7.8.2 allows remote attackers to read arbitrary files via the id parameter.
CVE-2013-4983
Published Sep 10, 2013The get_referers function in /opt/ws/bin/sblistpack in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows remote attackers to execute arbitrary commands via shell m…
Showing 1-6 of 6 CVEsPage 1 of 1