VDB

GCVE-110-MAGEIA-2015-1

GCVE-110-MAGEIA-2015-1
Advisory Published
Vulnetix · Advisory published January 5, 2015
Updated openvas-manager packages fixes security vulnerability: It has been identified that OpenVAS Manager before 4.0.6 is vulnerable to sql injections due to a improper handling of the timezone parameter in modify_schedule OMP command. It has been identified that this vulnerability may allow read-access via sql for authorized user account which have permission to modify schedule objects (CVE-2014-9220).

Affected Products

VendorProductVersionsPlatforms
Mageiatomahawk-player0 (affected), 0.5.5-7.1.mga4 (unaffected)
Mageiaopenvas-libraries0 (affected), 0 (affected), 6.0.3-1.mga4 (unaffected), 6.0.3-1.mga4 (unaffected)
Mageiaopenvas-manager0 (affected), 4.0.6-1.mga4 (unaffected), 0 (affected), 4.0.6-1.mga4 (unaffected)

Browse GCVE Records

72,921 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›