Openvas
6 CVEs across 4 Openvas products. Browse Openvas vulnerabilities, severities, and proof-of-concept exploits.
Openvas products with known CVEs
Openvas CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2011-1597 | High | 8.8 | 2020-02-06 | OpenVAS Manager v2.0.3 allows plugin remote code execution. |
CVE-2011-3351 | High | 7.1 | 2019-11-25 | openvas-scanner before 2011-09-11 creates a temporary file insecurely when generating OVAL system characteristics document with the ovaldi integrated tool enab… |
CVE-2014-9220 | | | 2014-12-03 | SQL injection vulnerability in OpenVAS Manager before 4.0.6 and 5.x before 5.0.7 allows remote attackers to execute arbitrary SQL commands via the timezone par… |
CVE-2013-6766 | | | 2014-05-19 | OpenVAS Administrator 1.2 before 1.2.2 and 1.3 before 1.3.2 allows remote attackers to bypass the OAP authentication restrictions and execute OAP commands via… |
CVE-2013-6765 | | | 2014-05-19 | OpenVAS Manager 3.0 before 3.0.7 and 4.0 before 4.0.4 allows remote attackers to bypass the OMP authentication restrictions and execute OMP commands via a craf… |
CVE-2012-5520 | | | 2012-11-26 | The send_to_sourcefire function in manage_sql.c in OpenVAS Manager 3.x before 3.0.4 allows remote attackers to execute arbitrary commands via the (1) IP addres… |
CVE-2011-0018 | | | 2011-01-28 | The email function in manage_sql.c in OpenVAS Manager 1.0.x through 1.0.3 and 2.0.x through 2.0rc2 allows remote authenticated users to execute arbitrary comma… |