Filtered by vendor Castlerock
Subscribe
Total
8 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2020-11557 | 1 Castlerock | 1 Snmpc Online | 2024-02-04 | 5.0 MEDIUM | 7.5 HIGH |
An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. It includes the username and password values in cleartext within each request's cookie value. | |||||
CVE-2020-11553 | 1 Castlerock | 1 Snmpc Online | 2024-02-04 | 6.8 MEDIUM | 8.8 HIGH |
An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. There is pervasive CSRF. | |||||
CVE-2020-11555 | 1 Castlerock | 1 Snmpc Online | 2024-02-04 | 5.0 MEDIUM | 7.5 HIGH |
An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. It allows remote attackers to obtain sensitive credential information from backup files. | |||||
CVE-2020-11554 | 1 Castlerock | 1 Snmpc Online | 2024-02-04 | 5.0 MEDIUM | 7.5 HIGH |
An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. It allows remote attackers to obtain sensitive information via info.php4. | |||||
CVE-2020-11556 | 1 Castlerock | 1 Snmpc Online | 2024-02-04 | 3.5 LOW | 5.4 MEDIUM |
An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. There are multiple persistent (stored) and reflected XSS vulnerabilities. | |||||
CVE-2019-13494 | 1 Castlerock | 1 Simple Network Management Protocol Console | 2024-02-04 | 6.8 MEDIUM | 7.8 HIGH |
nodeimp.exe in Castle Rock SNMPc before 9.0.12.1 and 10.x before 10.0.9 has a stack-based buffer overflow via a long variable string in a Map Objects text file. | |||||
CVE-2015-6027 | 1 Castlerock | 1 Snmpc | 2024-02-04 | 4.3 MEDIUM | 6.1 MEDIUM |
Castle Rock Computing SNMPc before 2015-12-17 has XSS via SNMP. | |||||
CVE-2015-6028 | 1 Castlerock | 1 Snmpc | 2024-02-04 | 6.5 MEDIUM | 8.8 HIGH |
Castle Rock Computing SNMPc before 2015-12-17 has SQL injection via the sc parameter. |