8717 matches found
CVE-2016-10367
Opsview Monitor Pro is affected by CVE-2016-10367 due to an unauthenticated local file inclusion via a crafted HTTP GET request that bypasses the simple URL encoding (%252f instead of /). The Nuclei template confirms vulnerable versions: prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4....
CVE-2016-10368
Opsview Monitor Pro is affected by an open redirect vulnerability (CVE-2016-10368) present in versions before 5.1.0.162300841, before 5.0.2.27475, before 4.6.4.162391051, and 4.5.x without a 2016 patch. The issue allows an attacker to redirect users to arbitrary websites by manipulating the back ...
CVE-2016-10368: URL Redirection to Untrusted Site
Open redirect vulnerability in Opsview Monitor Pro Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and 4.5.x without a certain 2016 security patch allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the back parameter to the...
CVE-2016-10367: Improper Limitation of a Pathname to a Restricted Directory
In Opsview Monitor Pro Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and 4.5.x without a certain 2016 security patch, an unauthenticated Directory Traversal vulnerability can be exploited by issuing a specially crafted HTTP GET request utilizing a simple URL encoding...
PT-2017-7884
Name of the Vulnerable Software and Affected Versions Opsview Monitor Pro versions prior to 5.1.0.162300841 Opsview Monitor Pro versions prior to 5.0.2.27475 Opsview Monitor Pro versions prior to 4.6.4.162391051 Opsview Monitor Pro version 4.5.x without a certain 2016 security patch Description T...
PT-2017-7883
Name of the Vulnerable Software and Affected Versions Opsview Monitor Pro versions prior to 5.1.0.162300841 Opsview Monitor Pro versions prior to 5.0.2.27475 Opsview Monitor Pro versions prior to 4.6.4.162391051 Opsview Monitor Pro version 4.5.x without a certain 2016 security patch Description A...
Privilege Escalation
github.com/bosun-monitor/bosun is vulnerable to privilege escalation. The library does not quote service paths, allowing a malicious user to load a runnable file at system level privilege...
Logrhythm Network Monitor Multiple Vulnerabilities
Logrhythm Network Monitor is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Logrhythm Network Monitor Detection
Detection of Logrhythm Network Monitor. The script sends a connection request to the server and attempts to detect Logrhythm Network Monitor and to extract its version. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright...
Oracle MySQL Enterprise Monitor Remote Vulnerability (CNVD-2017-06479)
Oracle MySQL is an open source relational database management system from Oracle Corporation. The database system is characterized by high performance, low cost and good reliability.MySQL Enterprise Monitor is an enterprise-level monitoring software designed for MySQL database. A security...
The vulnerability of the QEMU hardware emulation software, which allows a hacker to trigger a service failure
The vulnerability of the Human Monitor interface in the QEMU hardware emulation software allows data to be written beyond the specified buffer limits. Exploiting this vulnerability can enable a malicious actor to cause service failures data writing beyond memory boundaries, application terminatio...
Lens Peek-a-View Elevation of Privilege Vulnerability
Lens Peek-a-View is a video monitoring device for babies. An elevation of privilege vulnerability exists in Lens Peek-a-View. An attacker can exploit this vulnerability to gain root privileges...
April 25, 2017âKB4016240 (OS Build 15063.250)
None None...
DEBIAN-CVE-2017-8106
The handleinvept function in arch/x86/kvm/vmx.c in the Linux kernel 3.12 through 3.15 allows privileged KVM guest OS users to cause a denial of service NULL pointer dereference and host OS crash via a single-context INVEPT instruction with a NULL EPT pointer...
CVE-2017-3307
Vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL subcomponent: Monitoring: Server. Supported versions that are affected are 3.1.6.8003 and earlier, 3.2.1182 and earlier and 3.3.2.1162 and earlier. Difficult to exploit vulnerability allows high privileged attacker with netwo...
CVE-2017-3306
Vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL subcomponent: Monitoring: Server. Supported versions that are affected are 3.1.6.8003 and earlier, 3.2.1182 and earlier and 3.3.2.1162 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with netwo...
Design/Logic Flaw
Vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL subcomponent: Monitoring: Server. Supported versions that are affected are 3.1.6.8003 and earlier, 3.2.1182 and earlier and 3.3.2.1162 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with netwo...
Design/Logic Flaw
Vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL subcomponent: Monitoring: Server. Supported versions that are affected are 3.1.6.8003 and earlier, 3.2.1182 and earlier and 3.3.2.1162 and earlier. Difficult to exploit vulnerability allows high privileged attacker with netwo...
CVE-2017-3307
Vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL subcomponent: Monitoring: Server. Supported versions that are affected are 3.1.6.8003 and earlier, 3.2.1182 and earlier and 3.3.2.1162 and earlier. Difficult to exploit vulnerability allows high privileged attacker with netwo...
CVE-2017-3306
Vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL subcomponent: Monitoring: Server. Supported versions that are affected are 3.1.6.8003 and earlier, 3.2.1182 and earlier and 3.3.2.1162 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with netwo...