Filtered by vendor Prophecyinternational Subscriptions
Total 4 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2019-11364 1 Prophecyinternational 1 Snare Central 2024-11-21 N/A
An OS Command Injection vulnerability in Snare Central before 7.4.5 allows remote authenticated attackers to inject arbitrary OS commands via the ServerConf/DataManagement/DiskManager.php FORMNAS_share parameter.
CVE-2019-11363 1 Prophecyinternational 1 Snare Central 2024-11-21 N/A
A SQL injection vulnerability in Snare Central before 7.4.5 allows remote authenticated attackers to execute arbitrary SQL commands via the AgentConsole/UserGroupQuery.php ShowUser parameter.
CVE-2011-5250 1 Prophecyinternational 1 Snare 2024-11-21 6.5 Medium
Snare for Linux before 1.7.0 has CSRF in the web interface.
CVE-2011-5247 1 Prophecyinternational 1 Snare 2024-11-21 7.5 High
Snare for Linux before 1.7.0 has password disclosure because the rendered page contains the field RemotePassword.