HighCVSS 8.8
EPSS 0.51%
An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. There is pervasive CSRF.
Vendor
castlerock vulnerabilities
8 published CVES affecting castlerock, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 8
- Critical
- 0
- High
- 6
- Medium
- 2
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Products
Latest castlerock CVEs
Newest publication first
-
-
HighCVSS 7.5 EPSS 1.5%
An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. It allows remote attackers to obtain sensitive information via info.php4.
-
HighCVSS 7.5 EPSS 1.4%
An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. It allows remote attackers to obtain sensitive credential information from backup files.
-
MediumCVSS 5.4 EPSS 0.56%
An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. There are multiple persistent (stored) and reflected XSS vulnerabilities.
-
HighCVSS 7.5 EPSS 0.72%
An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. It includes the username and password values in cleartext within each request's cookie value.
-
HighCVSS 7.8 EPSS 3.9% Public exploit
nodeimp.exe in Castle Rock SNMPc before 9.0.12.1 and 10.x before 10.0.9 has a stack-based buffer overflow via a long variable string in a Map Objects text file.
-
CVE-2015-6028 Castle Rock Computing SNMPc before 2015-12-17 has SQL injection via the sc parameter.
PublishedHighCVSS 8.8 EPSS 1.1%Castle Rock Computing SNMPc before 2015-12-17 has SQL injection via the sc parameter.
-
MediumCVSS 6.1 EPSS 0.78%
Castle Rock Computing SNMPc before 2015-12-17 has XSS via SNMP.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.