CVE-2021-44139

all versions

Sentinel 1.8.2 is vulnerable to Server-side request forgery (SSRF).

7.5HIGH

CVE-2019-19879

<= 0.10.1

HashiCorp Sentinel up to 0.10.1 incorrectly parsed negation in certain policy expressions. Fixed in 0.10.2.

7.5HIGH

CVE-2018-7675

<= 8.1

In NetIQ Sentinel before 8.1.x, a Sentinel user is logged into the Sentinel Web Interface. After performing some tasks within Sent

2.8LOW

CVE-2017-12822

<= 7.50

Remote enabling and disabling admin interface in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK

9.9CRITICAL

CVE-2017-12821

<= 7.50

Memory corruption in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 might caus

9.8CRITICAL

CVE-2017-12820

<= 7.50

Arbitrary memory read from controlled memory pointer in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Senti

7.5HIGH

CVE-2017-12819

<= 7.50

Remote manipulations with language pack updater lead to NTLM-relay attack for system user in Gemalto's HASP SRM, Sentinel HASP and

9.8CRITICAL

CVE-2017-12818

<= 7.50

Stack overflow in custom XML-parser in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE versi

7.5HIGH

CVE-2017-5185

>= 8.0 and < 8.0.1

A vulnerability was discovered in NetIQ Sentinel Server 8.0 before 8.0.1 that may allow remote denial of service.

7.5HIGH

CVE-2017-5184

>= 8.0 and < 8.0.1

A vulnerability was discovered in NetIQ Sentinel Server 8.0 before 8.0.1 that may allow leakage of information (account enumeratio

5.3MEDIUM

CVE-2016-1605

all versions

Directory traversal vulnerability in the ReportViewServlet servlet in the server in NetIQ Sentinel 7.4.x before 7.4.2 allows remot

6.5MEDIUM

CVE-2014-3460

all versions

Directory traversal vulnerability in the DumpToFile method in the NQMcsVarSet ActiveX control in Agent Manager in NetIQ Sentinel a

CVE-2011-5226

all versions

Cross-site request forgery (CSRF) vulnerability in wordpress_sentinel.php in the Sentinel plugin 1.0.0 for WordPress allows remote

CVE-2011-5225

all versions

Cross-site scripting (XSS) vulnerability in wordpress_sentinel.php in the Sentinel plugin 1.0.0 for WordPress allows remote attack

CVE-2011-5224

all versions

SQL injection vulnerability in the Sentinel plugin 1.0.0 for WordPress allows remote attackers to execute arbitrary SQL commands v

CVE-2011-1913

all versions

SQL injection vulnerability in the login form in the web interface in Mercator SENTINEL 2.0 allows remote attackers to execute arb