Browse CVEs

MEDIUM 6.1 CVE-2022-41434 EyesOfNetwork Web Interface v5.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /lilac/main.php. Web Interface Mitigation only Fix from $1,6002022-11-08 MEDIUM 5.4 CVE-2022-24612 An authenticated user can upload an XML file containing an XSS via the ITSM module of EyesOfNetwork 5.3.11, resulting in a stored XSS. Eyesofnetwork No fix yet Fix from $1,6002022-02-25 CRITICAL 9.8 CVE-2020-8656EPSS 85% An issue was discovered in EyesOfNetwork 5.3. The EyesOfNetwork API 2.4.2 is prone to SQL injection, allowing an unauthenticated attacker to perform … Eyesofnetwork No fix yet Fix from $2,3002020-02-07 HIGH 8.8 CVE-2020-8654EPSS 86% An issue was discovered in EyesOfNetwork 5.3. An authenticated web user with sufficient privileges could abuse the AutoDiscovery module to run arbitr… Eyesofnetwork No fix yet Fix from $1,9502020-02-07 HIGH 7.8 CVE-2020-8655 KEVEPSS 60% An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability, allowing the apache user to… Eyesofnetwork Mitigation only Fix from $1,9502020-02-07 CRITICAL 9.8 CVE-2020-8657 KEVEPSS 92% An issue was discovered in EyesOfNetwork 5.3. The installation uses the same API key (hardcoded as EONAPI_KEY in include/api_functions.php for API ve… Eyesofnetwork Mitigation only Fix from $2,3002020-02-06 HIGH 8.8 CVE-2019-14923 EyesOfNetwork 5.1 allows Remote Command Execution via shell metacharacters in the module/tool_all/ host field. Eyesofnetwork No fix yet Fix from $1,9502019-08-16 HIGH 7.2 CVE-2017-16000 SQL injection vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated administrators to execute arbitrary SQL… Eyesofnetwork No fix yet Fix from $1,9502017-10-29 HIGH 7.2 CVE-2017-15933 SQL injection vulnerability vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated administrators to execute… Eyesofnetwork No fix yet Fix from $1,9502017-10-27 HIGH 7.2 CVE-2017-15880 SQL injection vulnerability vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated administrators to execute… Eyesofnetwork No fix yet Fix from $1,9502017-10-24 MEDIUM 5.4 CVE-2017-14984 Cross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated users to inject arbitrary … Eyesofnetwork No fix yet Fix from $1,6002017-10-03 MEDIUM 5.4 CVE-2017-14985 Cross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated users to inject arbitrary … Eyesofnetwork No fix yet Fix from $1,6002017-10-03 MEDIUM 5.4 CVE-2017-14753 Cross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated users to inject arbitrary … Eyesofnetwork No fix yet Fix from $1,6002017-09-27 CRITICAL 9.8 CVE-2017-14401 The EyesOfNetwork web interface (aka eonweb) 5.1-0 has SQL injection via the user_name parameter to module/admin_user/add_modify_user.php in the "ACC… Eyesofnetwork No fix yet Fix from $2,3002017-09-13 CRITICAL 9.8 CVE-2017-14402 The EyesOfNetwork web interface (aka eonweb) 5.1-0 has SQL injection via the user_name parameter to module/admin_user/add_modify_user.php in the "ACC… Eyesofnetwork No fix yet Fix from $2,3002017-09-13 CRITICAL 9.8 CVE-2017-14403 The EyesOfNetwork web interface (aka eonweb) 5.1-0 has SQL injection via the term parameter to module/admin_group/search.php. Eyesofnetwork No fix yet Fix from $2,3002017-09-13 HIGH 7.5 CVE-2017-14404 The EyesOfNetwork web interface (aka eonweb) 5.1-0 allows local file inclusion via the tool_list parameter (aka the url_tool variable) to module/tool… Eyesofnetwork No fix yet Fix from $1,9502017-09-13 HIGH 7.2 CVE-2017-14405 The EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote command execution via shell metacharacters in a hosts_cacti array parameter to modul… Eyesofnetwork No fix yet Fix from $1,9502017-09-13 CRITICAL 9.8 CVE-2017-14247 SQL Injection exists in the EyesOfNetwork web interface (aka eonweb) 5.1-0 via the user_id cookie to header.php, a related issue to CVE-2017-1000060. Eyesofnetwork No fix yet Fix from $2,3002017-09-11 CRITICAL 9.8 CVE-2017-14252 SQL Injection exists in the EyesOfNetwork web interface (aka eonweb) 5.1-0 via the group_id cookie to side.php. Eyesofnetwork No fix yet Fix from $2,3002017-09-11 HIGH 8.8 CVE-2017-14118 In the EyesOfNetwork web interface (aka eonweb) 5.1-0, module\tool_all\tools\interface.php does not properly restrict exec calls, which allows remote… Eyesofnetwork No fix yet Fix from $1,9502017-09-03 HIGH 8.8 CVE-2017-14119 In the EyesOfNetwork web interface (aka eonweb) 5.1-0, module\tool_all\tools\snmpwalk.php does not properly restrict popen calls, which allows remote… Eyesofnetwork No fix yet Fix from $1,9502017-09-03 HIGH 7.5 CVE-2017-13780 The EyesOfNetwork web interface (aka eonweb) 5.1-0 allows directory traversal attacks for reading arbitrary files via the module/admin_conf/download.… Eyesofnetwork Mitigation only Fix from $1,9502017-08-30 CRITICAL 9.8 CVE-2017-1000060 EyesOfNetwork (EON) 5.1 Unauthenticated SQL Injection in eonweb leading to remote root Eyesofnetwork No fix yet Fix from $2,3002017-07-17