131 matches found
Siemens SIPLUS CM 1242-5 Communications Adapter Detection
Binary data 750140.prm...
Siemens CP 1242-7 GPRS Communications Adapter Detection
Binary data 750154.prm...
CVE-2017-1242
IBM Security Bulletin confirms CVE-2017-1242 affects IBM Rational Quality Manager (RQM) in Rational CLM 5.0–5.0.2 and 6.0–6.0.5. The issue is an HTML injection that lets a remote attacker have HTML execute in a user’s browser in the hosting site’s context. Remediation: upgrade to RQM 6.0.4+ (or 6...
CVE-2018-1242
Dell EMC RecoverPoint suffers a command injection vulnerability in the Boxmgmt CLI affecting RecoverPoint versions before 5.1.2 and RecoverPoint for VM versions before 5.1.1.3. An authenticated user with boxmgmt privileges can potentially exploit this to read RPA files, with root-required files r...
Six Vulnerabilities Found in Dell EMC’s Disaster Recovery System, One Critical
A pen-tester has found six vulnerabilities in Dell EMC RecoverPoint devices, including a critical remote code execution flaw that could allow total system compromise. EMC RecoverPoint is a disaster recovery tool that can be used to back up local and remote information storage, across data centers...
Arbitrary File Read
Trytond is vulnerable to arbitrary file reads. Remote authenticated users are able to read files through a root name with a different suffix. This vulnerability exists because of an incomplete fix for CVE-2016-1242...
Debian DSA-3826-1 : tryton-server - security update
It was discovered that the original patch to address CVE-2016-1242 did not cover all cases, which may result in information disclosure of file contents. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...
PYSEC-2017-97
fileopen in Tryton 3.x and 4.x through 4.2.2 allows remote authenticated users with certain permissions to read arbitrary files via a "same root name but with a suffix" attack. NOTE: This vulnerability exists because of an incomplete fix for CVE-2016-1242...
Debian: Security Advisory (DSA-3826-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Update : GNU Health and it's dependencies (openSUSE-2017-6)
This update provides version 3.0.5 of GNU Health including several fixes and improvements. - Update to ICD10 version 2016. - Fix error when printing prescription using review dates. - Fix error on summary report when no date of birth is assigned to the person. Additionally the following...
Fedora Update for trytond-account-invoice FEDORA-2016-d961441913
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for tryton FEDORA-2016-d961441913
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for trytond-stock FEDORA-2016-d961441913
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for trytond-sale FEDORA-2016-d961441913
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for trytond-account-statement FEDORA-2016-d961441913
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for trytond-company FEDORA-2016-d961441913
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for trytond-account-product FEDORA-2016-d961441913
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for trytond-party FEDORA-2016-d961441913
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 25 : python-proteus / tryton / trytond / trytond-account / etc (2016-d961441913)
security fix for CVE-2016-1241, CVE-2016-1242 - other bug fixes Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...
CVE-2016-1242
fileopen in Tryton before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allows remote authenticated users with certain permissions to read arbitrary files via the name parameter or unspecified other vectors...