CVE & Exploit Intelligence Database

Updated 55m ago

Search and track vulnerabilities with real-time exploit intelligence. Cross-reference CVEs against public exploits from ExploitDB, Metasploit, GitHub, and Nuclei — with CVSS and EPSS scoring, CISA KEV monitoring, and AI-powered exploit analysis.

337,123 CVEs tracked 53,219 with exploits 4,686 exploited in wild 1,539 CISA KEV 3,912 Nuclei templates 37,757 vendors 42,422 researchers

7 results Clear all

CVE-2014-4977 2 PoCs Analysis EPSS 0.84

Dell SonicWall Scrutinizer 11.0.1 - SQL Injection

Multiple SQL injection vulnerabilities in Dell SonicWall Scrutinizer 11.0.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) selectedUserGroup parameter in a create new user request to cgi-bin/admin.cgi or the (2) user_id parameter in the changeUnit function, (3) methodDetail parameter in the methodDetail function, or (4) xcNetworkDetail parameter in the xcNetworkDetail function in d4d/exporters.php.

CWE-89 Jul 16, 2014

CVE-2014-4976 EPSS 0.03

Dell SonicWall Scrutinizer 11.0.1 - Privilege Escalation

Dell SonicWall Scrutinizer 11.0.1 allows remote authenticated users to change user passwords via the user ID in the savePrefs parameter in a change password request to cgi-bin/admin.cgi.

CWE-264 Jul 16, 2014

CVE-2012-3951 2 PoCs Analysis EPSS 0.80

Sonicwall Scrutinizer < 9.0.1.19899 - SQL Injection

The MySQL component in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) 9.0.1.19899 and earlier has a default password of admin for the (1) scrutinizer and (2) scrutremote accounts, which allows remote attackers to execute arbitrary SQL commands via a TCP session.

CWE-89 Jul 31, 2012

CVE-2012-3848 1 PoC Analysis EPSS 0.01

Sonicwall Scrutinizer < 9.5.0 - XSS

Multiple cross-site scripting (XSS) vulnerabilities in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to d4d/exporters.php, (2) the HTTP Referer header to d4d/exporters.php, or (3) unspecified input to d4d/contextMenu.php.

CWE-79 Jul 31, 2012

CVE-2012-2627 1 PoC Analysis EPSS 0.10

Plixer Scrutinizer <9.5.0 - Code Injection

d4d/uploader.php in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 allows remote attackers to create or overwrite arbitrary files in %PROGRAMFILES%\Scrutinizer\snmp\mibs\ via a multipart/form-data POST request.

CVE-2012-2626 EXPLOITED 2 PoCs Analysis EPSS 0.76

Plixer Scrutinizer <9.5.0 - RCE

cgi-bin/admin.cgi in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 does not require token authentication, which allows remote attackers to add administrative accounts via a userprefs action.

CWE-287 Jul 31, 2012

CVE-2012-2962 3 PoCs Analysis EPSS 0.90

Plixer Scrutinizer <9.5.2 - SQL Injection

SQL injection vulnerability in d4d/statusFilter.php in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.2 allows remote authenticated users to execute arbitrary SQL commands via the q parameter.

CWE-89 Jul 30, 2012