Lofi42

#16253of 60,574

19.3Total CVSS

Vulnerabilities · 2

High

2

Sonicwall Ssl-Vpn Netextender

The issue allows remote attackers to execute arbitrary code via a long Unicode property value in several parameters, including `serverAddress`, `sessionId`, `clientIPLower`, `clientIPHigher`, `userName`, `domainName`, or `dnsSuffix`.

Sonicwall Ssl-Vpn 2000/4000

The issue allows remote attackers to delete arbitrary files via a full pathname in the argument to the `FileDelete` method. This is due to an absolute path traversal vulnerability in the WebCacheCleaner ActiveX control.