HP OpenView Network Node Manager getnnmdata.exe (Hostname) CGI Buffer Overflow

This module exploits a buffer overflow in HP OpenView Network Node Manager 7.50/7.53. By sending specially crafted Hostname parameter to the getnnmdata.exe CGI, an attacker may be able to execute arbitrary code. Module Options msf use exploit/windows/http/hp/nnmgetnnmdatahostname msf...

HP-UX PHSS_40705 : s700_800 11.11 OV NNM7.01 Intermediate Patch 13

s700800 11.11 OV NNM7.01 Intermediate Patch 13 : The remote HP-UX host is affected by multiple vulnerabilities : - A potential vulnerability has been identified with HP OpenView Network Node Manager OV NNM. The vulnerability could be exploited remotely to execute arbitrary code. HPSBMA02424...

CVE-2009-1555

The Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 sends configuration data in response to a Setup Wizard remote-management command, which allows remote attackers to obtain sensitive information such as passwords by reading the SetupWizard.exe process memory, a...

CVE-2009-1555

The CVE-2009-1555 entry concerns the Cisco Linksys WVC54GCA wireless video camera. Affected firmware is 1.00R22 and 1.00R24. The issue arises when the device responds to a Setup Wizard remote-management command by exposing configuration data, enabling remote attackers to obtain sensitive informat...

Debian: Security Advisory (DSA-1555-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1555-1 : iceweasel - programming error

It was discovered that crashes in the JavaScript engine of Iceweasel, an unbranded version of the Firefox browser, could potentially lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

CVE-2008-1555

Directory traversal vulnerability in system/b/contentFiles/gbincluder.php in BolinOS 4.6.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the bFileToInclude parameter...

CVE-2008-1555

CVE-2008-1555 affects BolinOS 4.6.1, vulnerability in system/_b/contentFiles/gbincluder.php where ".." in _bFileToInclude enables directory traversal to include/execute local files. Impact: partial confidentiality, integrity, and availability. CVSS v2 base score 6.8. no remediation details provid...

CVE-2003-1555

ScozNet ScozBook 1.1 BETA is affected by a vulnerability in view.php where an invalid PG parameter triggers an error message that reveals the installation path, causing information disclosure. Affected component: ScozBook web frontend (view.php). Root cause: improper handling of the PG parameter ...

CVE-2008-1555

creationtimestamp| type| source ---|---|--- 2008-03-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5309...

CVE-2006-1555

CVE-2006-1555 affects VSNS Lemon 3.2.0. The vulnerability is a cookie-based authentication bypass: remote attackers can access password-protected articles by setting the vsns[topic_id] cookie to the targeted topic. Impact is authenticated-access to protected content without credentials, with netw...

CVE-2001-1555

CVE-2001-1555 affects Solaris 8 via the pt_chmod path where logout does not call fdetach to reset terminal privileges, enabling local users to modify a TTY ACL and write to other users’ terminals. The available sources describe the vulnerable component and root cause but do not provide explicit p...

CVE-2003-1555

ScozNet ScozBook 1.1 BETA allows remote attackers to obtain sensitive information via an invalid PG parameter in view.php, which reveals the installation path in an error message...

CVE-2002-1555

Cisco ONS15454 and ONS15327 running ONS before 3.4 uses a "public" SNMP community string that cannot be changed, which allows remote attackers to obtain sensitive information...

ScozBook scozbook/add.php Multiple Parameter XSS

The remote host is running ScozBook This set of CGI has two vulnerabilities : - It is vulnerable to cross-site scripting attacks in add.php - If the user requests view.php with a crafted PG Variable, he will obtain the physical path of the remote CGI An attacker may use these flaws to steal the...

CVE-2001-1555

ptchmod in Solaris 8 does not call fdetach to reset terminal privileges when users log out of terminals, which allows local users to write to other users' terminals by modifying the ACL of a TTY...

CVE-1999-1555

The CVE-1999-1555 affects Cheyenne InocuLAN Anti-Virus Server in Inoculan 4.0 before SP2. The issue arises from a directory created for updates that grants EVERYONE FULL CONTROL, enabling local users to cause the antivirus update feature to install a Trojan horse DLL. Documented impact includes c...