Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Alienvault Subscribe
Filtered by product Open Source Security Information Management
Total 22 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2009-4374 1 Alienvault 1 Open Source Security Information Management 2010-06-23 7.5 HIGH N/A
Directory traversal vulnerability in repository/repository_attachment.php in AlienVault Open Source Security Information Management (OSSIM) 2.1.5, and possibly other versions before 2.1.5-4, allows remote attackers to upload files into arbitrary directories via a .. (dot dot) in the id_document parameter.
CVE-2009-4375 1 Alienvault 1 Open Source Security Information Management 2010-05-10 7.5 HIGH N/A
SQL injection vulnerability in repository/repository_attachment.php in AlienVault Open Source Security Information Management (OSSIM) 2.1.5, and possibly other versions before 2.1.5-4, allows remote attackers to execute arbitrary SQL commands via the id_document parameter.