Vulnerabilities
Vulnerable Software
Nfsen:  >> Nfsen  Security Vulnerabilities
NfSen before 1.3.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the customfmt parameter (aka the "Custom output format" field).
CVSS Score
9.9
EPSS Score
0.214
Published
2017-07-10
AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and unnecessarily execute the NfSen Perl code as root, aka AlienVault ID ENG-104945, a different vulnerability than CVE-2017-6970 and CVE-2017-6971.
CVSS Score
9.8
EPSS Score
0.451
Published
2017-03-22
AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow local users to execute arbitrary commands in a privileged context via an NfSen socket, aka AlienVault ID ENG-104863.
CVSS Score
8.4
EPSS Score
0.004
Published
2017-03-22
AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow remote authenticated users to execute arbitrary commands in a privileged context, or launch a reverse shell, via vectors involving the PHP session ID and the NfSen PHP code, aka AlienVault ID ENG-104862.
CVSS Score
8.8
EPSS Score
0.363
Published
2017-03-22


Contact Us

Shodan ® - All rights reserved