Openvas

    Dashboard / Vendors

    Products: 3
    Vulnerabilities: 7
    Known Exploited: 0
    1
    Critical Level Threats
    6
    High Level Threats
    0
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2011-1597

    OpenVAS Manager v2.0.3 allows plugin remote code execution.

    Last Modified: Nov 21, 2024
    Published: Feb 05, 2020

    CVE-2011-3351

    openvas-scanner before 2011-09-11 creates a temporary file insecurely when generating OVAL system characteristics document with the ovaldi integrated tool enabled. A local attacker could use this flaw to conduct symlink attacks to overwrite arbitrary files on the system.

    Last Modified: Nov 21, 2024
    Published: Nov 25, 2019

    CVE-2014-9220

    SQL injection vulnerability in OpenVAS Manager before 4.0.6 and 5.x before 5.0.7 allows remote attackers to execute arbitrary SQL commands via the timezone parameter in a modify_schedule OMP command.

    Last Modified: Apr 12, 2025
    Published: Dec 03, 2014

    CVE-2013-6766

    OpenVAS Administrator 1.2 before 1.2.2 and 1.3 before 1.3.2 allows remote attackers to bypass the OAP authentication restrictions and execute OAP commands via a crafted OAP request for version information, which causes the state to be set to CLIENT_AUTHENTIC.

    Last Modified: Apr 12, 2025
    Published: May 19, 2014

    CVE-2013-6765

    OpenVAS Manager 3.0 before 3.0.7 and 4.0 before 4.0.4 allows remote attackers to bypass the OMP authentication restrictions and execute OMP commands via a crafted OMP request for version information, which causes the state to be set to CLIENT_AUTHENTIC, as demonstrated by the omp_xml_handle_end_element function in omp.c.

    Last Modified: Apr 12, 2025
    Published: May 19, 2014
    Items Per Page