Information disclosure

IBM Security Guardium Database Activity Monitor 10 allows local users to obtain sensitive information by reading cached browser data. IBM X-Force ID: 110328...

Design/Logic Flaw

Unquoted Windows search path vulnerability in the srvInventoryWebServer service in 10-Strike Network Monitor 5.4 allows local users to gain privileges via a malicious artefact...

CVE-2016-0235

IBM Security Guardium Database Activity Monitor 10 allows local users to have unspecified impact by leveraging administrator access to a hardcoded password, related to use on GRUB systems. IBM X-Force ID: 110326...

Hardcoded credentials

IBM Security Guardium Database Activity Monitor 10 allows local users to have unspecified impact by leveraging administrator access to a hardcoded password, related to use on GRUB systems. IBM X-Force ID: 110326...

CVE-2016-0237

IBM Security Guardium Database Activity Monitor 10 allows local users to obtain sensitive information by reading cached browser data. IBM X-Force ID: 110328...

CVE-2018-6016

Unquoted Windows search path vulnerability in the srvInventoryWebServer service in 10-Strike Network Monitor 5.4 allows local users to gain privileges via a malicious artefact...

CVE-2016-0237

IBM Security Guardium Database Activity Monitor 10 allows local users to obtain sensitive information by reading cached browser data. IBM X-Force ID: 110328...

CVE-2016-0237

The CVE-2016-0237 entry affects IBM Security Guardium Database Activity Monitor V10. The vulnerability allows a local attacker to obtain sensitive information by reading locally cached browser data, as described in the IBM bulletin and vendor/NVD records. Root cause: information disclosure via ca...

CVE-2016-0235

IBM Security Guardium Database Activity Monitor 10 allows local users to have unspecified impact by leveraging administrator access to a hardcoded password, related to use on GRUB systems. IBM X-Force ID: 110326...

CVE-2018-6016

CVE-2018-6016 describes an Unquoted Windows search path vulnerability in the srvInventoryWebServer service of 10-Strike Network Monitor 5.4. This local-privilege-escalation flaw can be exploited by placing a malicious artefact to gain elevated privileges. The NVD CVSSv3 vector is CVSS:3.0/AV:L/AC...

CVE-2016-0235

CVE-2016-0235 affects IBM Security Guardium Database Activity Monitor V10, where a hard-coded password available to an administrator or root user enables potential access across GRUB-based systems. The root cause is use of a hard-coded credential within the Guardium component, allowing local acce...

CVE-2016-0235: Use of Hard-coded Credentials

IBM Security Guardium Database Activity Monitor 10 allows local users to have unspecified impact by leveraging administrator access to a hardcoded password, related to use on GRUB systems. IBM X-Force ID: 110326...

CVE-2018-6016: Unquoted Search Path or Element

Unquoted Windows search path vulnerability in the srvInventoryWebServer service in 10-Strike Network Monitor 5.4 allows local users to gain privileges via a malicious artefact...

PT-2018-4591

Name of the Vulnerable Software and Affected Versions IBM Security Guardium Database Activity Monitor version 10 Description The issue allows local users to obtain sensitive information by reading cached browser data. Recommendations For IBM Security Guardium Database Activity Monitor version 10,...

CVE-2016-0237: Exposure of Sensitive Information to an Unauthorized Actor

IBM Security Guardium Database Activity Monitor 10 allows local users to obtain sensitive information by reading cached browser data. IBM X-Force ID: 110328...

PT-2018-17299

Name of the Vulnerable Software and Affected Versions 10-Strike Network Monitor version 5.4 Description The issue is related to an unquoted Windows search path vulnerability in the srvInventoryWebServer service, which allows local users to gain privileges via a malicious artefact. Recommendations...

PT-2018-4590

Name of the Vulnerable Software and Affected Versions IBM Security Guardium Database Activity Monitor version 10 Description The issue allows local users to have an unspecified impact by leveraging administrator access to a hardcoded password, related to use on GRUB systems. Recommendations For I...

10-Strike Network Monitor 5.4 Unquoted Service Path

===== Tempest Security Intelligence - ADV-20/2018 === 10-Strike Network Monitor 5.4 - Unquoted Service Path ------------------------------------------------------- Author: - Filipe Xavier Oliveira: sc qc srvInventoryWebServer SC QueryServiceConfig SUCCESS SERVICENAME: srvInventoryWebServer TYP...

Unspecified Vulnerability in Papenmeier WiFi Baby Monitor Free&Lite

Papenmeier WiFi Baby Monitor Free&Lite is a mobile application for wireless baby monitor from Papenmeier, Germany. A security vulnerability exists in Papenmeier WiFi Baby Monitor Free&Lite. A remote attacker can exploit the vulnerability by sending requests to TCP ports 8258 and 8257 to obtain...

Papenmeier WiFi Baby Monitor Free & Lite < 2.02.2 - Remote Audio Record Exploit

Exploit for Android platform in category remote exploits Whilst analysing a number of free communication based applications on the Google Play Store, I took a look at WiFi Baby Monitor: Free & Lite the free version of WiFi Baby Monitor. Although the premium version offered users the ability to...