Avigilon Control Center Directory Traversal Vulnerability

Avigilon Control Center ACC is a suite of video management control center software from Avigilon Canada. The software offers advanced video search, remote monitoring and a high degree of integration. A directory traversal vulnerability exists in Avigilon Control Center. This allows remote attacke...

CVE-2015-2860: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Avigilon Control Center ACC 4 before 4.12.0.54 and 5 before 5.4.2.22 allows remote attackers to read arbitrary files via a crafted help/ URL...

DEBIAN-CVE-2015-4469

The chmdreadheaders function in chmd.c in libmspack before 0.5 does not validate name lengths, which allows remote attackers to cause a denial of service buffer over-read and application crash via a crafted CHM file...

UBUNTU-CVE-2015-4469

The chmdreadheaders function in chmd.c in libmspack before 0.5 does not validate name lengths, which allows remote attackers to cause a denial of service buffer over-read and application crash via a crafted CHM file...

UBUNTU-CVE-2015-4468

Multiple integer overflows in the searchchunk function in chmd.c in libmspack before 0.5 allow remote attackers to cause a denial of service buffer over-read and application crash via a crafted CHM file...

UBUNTU-CVE-2015-4467

The chmdinitdecomp function in chmd.c in libmspack before 0.5 does not properly validate the reset interval, which allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted CHM file...

SysAid Path < 15.2 Directory Traversal Vulnerability

SysAid Help Desktop Software is prone to a path traversal vulnerability SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

SysAid < 15.2 Multiple Vulnerabilities

SysAid Help Desktop Software is prone to multiple vulnerabilities Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

SysAid Path Disclosure Vulnerability

SysAid Help Desktop Software is prone to a path disclosure vulnerability Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fre...

PT-2015-6603

Name of the Vulnerable Software and Affected Versions libmspack versions prior to 0.5 Description The issue is caused by an off-by-one error in the READ ENCINT macro in chmd.c, which allows remote attackers to cause a denial of service, resulting in an application crash, or possibly have other...

PT-2015-6599

Name of the Vulnerable Software and Affected Versions libmspack versions prior to 0.5 Description The issue is related to multiple integer overflows in the search chunk function in chmd.c. This allows remote attackers to cause a denial of service, resulting in a buffer over-read and application...

PT-2015-6600

Name of the Vulnerable Software and Affected Versions libmspack versions prior to 0.5 Description The issue is related to the chmd read headers function in chmd.c, which does not validate name lengths. This allows remote attackers to cause a denial of service, resulting in a buffer over-read and...

PT-2015-6598

Name of the Vulnerable Software and Affected Versions libmspack versions prior to 0.5 Description The issue concerns the chmd init decomp function in chmd.c, which does not properly validate the reset interval. This allows remote attackers to cause a denial of service, resulting in a divide-by-ze...

SysAid Help Desk Detection (HTTP)

HTTP based detection of the SysAid Help Desk Software. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

SysAid Help Desk 14.4 - Multiple Vulnerabilities

Multiple vulnerabilities in SysAid Help Desk 14.4 Discovered by Pedro Ribeiro [email protected], Agile Information Security ================================================================================= Disclosure: 03/06/2015 / Last updated: 10/06/2015 Background on the affected product: "SysAi...

SysAid Help Desk 14.4 - Multiple Vulnerabilities

SysAid Help Desk 14.4 - Multiple Vulnerabilities Multiple vulnerabilities in SysAid Help Desk 14.4 Discovered by Pedro Ribeiro [email protected], Agile Information Security ================================================================================= Disclosure: 03/06/2015 / Last updated:...

SysAid Help Desk Built-in Password Vulnerability

SysAid Help Desk is a suite of Web-based IT management software. SysAid Help Desk uses a hard-coded password, username: sa, password: Password1, through which remote attackers bypass access restrictions...

SysAid Help Desk SQL Injection Vulnerability

SysAid Help Desk is a suite of Web-based IT management software. SQL injection vulnerability in multiple scripts in SysAid Help Desk allows remote attackers to submit specially crafted SQL queries to manipulate or obtain database data...

SysAid Help Desk .jsp File Upload Vulnerability

SysAid Help Desk is a suite of Web-based IT management software. An arbitrary file upload vulnerability in the SysAid Help Desk ChangePhoto.jsp script allows remote attackers to submit a special .jsp file and execute it...

SysAid Help Desk Arbitrary File Upload Vulnerability

SysAid Help Desk is a suite of Web-based IT management software. SysAid Help Desk fails to check file extensions, allowing remote attackers to upload and execute arbitrary files by submitting extensions containing null bytes...