Lenovo ThinkPad series computers was traced to multiple security vulnerabilities-vulnerability warning-the black bar safety net

Recently, security firm IOActive at the Lenovo Series of computers found a security vulnerability, the attacker may be on the computers of legitimate applications replaced with malicious app and you can remotely execute malicious instructions. IOActive security researcher in the Bulletin elaborat...

EMC AutoStart ftAgent Opcode 20 Subcode 2219 Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of EMC AutoStart. Authentication is required to exploit this vulnerability, but can be easily bypassed. The specific flaw exists within ftAgent.exe which listens on TCP port 8045, when handling opcode...

CVE-2015-2219

creationtimestamp| type| source ---|---|--- 2015-04-12 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41708 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/lenovosystemupdate.rb 2025-02-06 03:13:42+00:00|...

Lenovo System Update - Local Privilege Escalation (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Lenovo System Update Privilege Escalation', 'Description' = %q The named pipe, \SUPipeServer, can be accessed by normal users to interact with the...

RHEL 5 : redhat-ds-base (RHSA-2013:1116)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2013:1116 advisory. Red Hat Directory Server is an LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP server and...

Ubuntu: Security Advisory (USN-2219-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RedHat Update for 389-ds-base RHSA-2013:1119-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cross-Site Scripting (XSS) in CMSimple

Advisory ID: HTB23205 Product: CMSimple Vendor: Preben Bjorn Biermann Madsen Vulnerable Versions: 3.54 and probably prior Tested Version: 3.54 Advisory Publication: February 26, 2014 without technical details Vendor Notification: February 26, 2014 Vendor Patch: February 26, 2014 Public Disclosure...

CVE-2014-2219

CMSimple Classic 3.54 and earlier contains a reflected XSS in /whizzywig/wb.php where the d parameter is not properly sanitized. A remote attacker can induce a logged-in user to visit a crafted URL to execute arbitrary HTML/JavaScript in the browser. Vendor patch: fixed by the vendor on 2014-02-2...

CVE-2014-2219

Cross-site scripting XSS vulnerability in whizzywig/wb.php in CMSimple Classic 3.54 and earlier, possibly as downloaded before February 26, 2014, allows remote attackers to inject arbitrary web script or HTML via the d parameter...

Fedora Update for 389-ds-base FEDORA-2014-3936

Check for the Version of 389-ds-base OpenVAS Vulnerability Test Fedora Update for 389-ds-base FEDORA-2014-3936 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Fedora Update for 389-ds-base FEDORA-2013-21875

Check for the Version of 389-ds-base OpenVAS Vulnerability Test Fedora Update for 389-ds-base FEDORA-2013-21875 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

Important: 389-ds-base

Issue Overview: ns-slapd in 389 Directory Server before 1.3.0.8 allows remote attackers to cause a denial of service server crash via a crafted Distinguished Name DN in a MOD operation request. 389 Directory Server does not properly restrict access to entity attributes, which allows remote...

Fedora Update for 389-ds-base FEDORA-2013-15518

Check for the Version of 389-ds-base OpenVAS Vulnerability Test Fedora Update for 389-ds-base FEDORA-2013-15518 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

Fedora 19 : 389-ds-base-1.3.1.7-1.fc19 (2013-15540)

In this version, a security bug -- modifying an entry specified by an invalid DN crashed the server and a Windows Sync bug were fixed; logconv and setup-ds.pl scripts were enhanced. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...

CentOS Update for 389-ds-base CESA-2013:1119 centos6

Check for the Version of 389-ds-base OpenVAS Vulnerability Test CentOS Update for 389-ds-base CESA-2013:1119 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

CVE-2013-2219

The Red Hat Directory Server before 8.2.11-13 and 389 Directory Server do not properly restrict access to entity attributes, which allows remote authenticated users to obtain sensitive information via a search query for the attribute...

CVE-2013-2219

The CVE affects Red Hat Directory Server and its open source equivalent, 389 Directory Server. The root cause is improper enforcement of access controls for attributes during search filter evaluation, enabling remote authenticated users to retrieve values of restricted attributes via a query. The...

CentOS 6 : 389-ds-base (CESA-2013:1119)

Updated 389-ds-base packages that fix one security issue and three bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

CVE-2011-2219

Technical details for CVE-2011-2219 are not provided in the connected documents; the available sources describe a DoS vulnerability in GWIA with unknown vectors. Monitor for updates.