CVE-2015-2888: Missing Authentication for Critical Function

Summer Baby Zoom Wifi Monitor & Internet Viewing System allows remote attackers to bypass authentication, related to the MySnapCam web service...

CVE-2017-7617: Improper Restriction of Operations within the Bounds of a Memory Buffer

Remote code execution can occur in Asterisk Open Source 13.x before 13.14.1 and 14.x before 14.3.1 and Certified Asterisk 13.13 before 13.13-cert3 because of a buffer overflow in a CDR user field, related to X-ClientCode in chansip, the CDR dialplan function, and the AMI Monitor action...

Orphaned Snapshot Alarm - Change Suppression Settings

Challenge Correct over frequent triggering of Snapshot alarm Cause Depending on environment and when data is pulled alarm can trigger at non specified interval. Solution Within Monitor, go to the Alarm Management tab, and locate the 'Orphaned VM Backup Snapshot' alarm I just search 'orphaned in t...

PT-2017-17846

Name of the Vulnerable Software and Affected Versions Asterisk Open Source versions 13.x through 13.14.0 Asterisk Open Source versions 14.x through 14.3.0 Certified Asterisk versions 13.13 through 13.13-cert2 Description Remote code execution can occur due to a buffer overflow in a CDR user field...

PT-2017-6622

Name of the Vulnerable Software and Affected Versions Summer Baby Zoom Wifi Monitor & Internet Viewing System affected versions not specified Description The issue allows remote attackers to bypass authentication, related to the MySnapCam web service. Recommendations At the moment, there is no...

PT-2017-6623

Name of the Vulnerable Software and Affected Versions Summer Baby Zoom Wifi Monitor & Internet Viewing System affected versions not specified Description The issue allows remote attackers to gain privileges via manual entry of a Settings URL. Recommendations At the moment, there is no information...

CVE-2015-2889: Undefined Security Weakness

Summer Baby Zoom Wifi Monitor & Internet Viewing System allows remote attackers to gain privileges via manual entry of a Settings URL...

HP Business Process Monitor Remote Command Execution Vulnerability

HP Business Process Monitor is a suite of application monitoring software for monitoring business processes from Hewlett Packard Enterprise HPE. A remote code execution vulnerability exists in HPE Business Process Monitor. A remote attacker could exploit this vulnerability to execute arbitrary co...

HPESBGN03727 rev.1 - HPE Business Process Monitor, Remote Unauthorized Access to Data

Potential Security Impact: Remote: Unauthorized Access to Data SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP Business Process Monitor Ultimate Edition Software - v09.2x, v09.30 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-5801 |...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the kernel control driver in the Windows transaction monitor is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to enhance their privileges through a specially created application...

SUSE-SU-2017:0367-1 Security update for ceph

This update for ceph fixes the following issues: CVE-2016-5009: moncommand with empty prefix could crash monitor bsc987144 Invalid commandd in SOC7 with ceph bsc1008894 Performance fix was missing in SES4 bsc1005179 ceph build problems on ppc64le bsc982141 ceph make build unit test failure...

Novell eDirectory Clickjacking Vulnerability

Novell eDirectory is an identity management infrastructure platform that combines identity management architecture and directory services technology from Novell, USA. The platform provides authentication policies, data backup and recovery services, data disaster recovery and other functions. A...

Moxa Management Protocol Detection

Moxa SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.106693";...

CVE-2016-9168

A missing X-Frame-Options header in the NDS Utility Monitor in NDSD in Novell eDirectory before 9.0.2 could be used by remote attackers for clickjacking...

Design/Logic Flaw

A missing X-Frame-Options header in the NDS Utility Monitor in NDSD in Novell eDirectory before 9.0.2 could be used by remote attackers for clickjacking...

CVE-2016-9168

A missing X-Frame-Options header in the NDS Utility Monitor in NDSD in Novell eDirectory before 9.0.2 could be used by remote attackers for clickjacking...

CVE-2016-9168

CVE-2016-9168 affects Novell eDirectory’s NDSD (NDS Utility Monitor) prior to version 9.0.2, where a missing X-Frame-Options header could enable clickjacking by remote attackers. The vulnerability is documented across multiple feeds (NVD entry and cross-references in CNVD/OpenVAS records) and is ...

CVE-2016-9168

A missing X-Frame-Options header in the NDS Utility Monitor in NDSD in Novell eDirectory before 9.0.2 could be used by remote attackers for clickjacking...

CVE-2016-9168: Improper Input Validation

A missing X-Frame-Options header in the NDS Utility Monitor in NDSD in Novell eDirectory before 9.0.2 could be used by remote attackers for clickjacking...

PT-2017-9982

Name of the Vulnerable Software and Affected Versions Novell eDirectory versions prior to 9.0.2 Description A missing X-Frame-Options header in the NDS Utility Monitor in NDSD could be used by remote attackers for clickjacking. Recommendations For versions prior to 9.0.2, update to version 9.0.2 ...