184 matches found
Authentication flaw
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-2610 Firmware v2.01RC067 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of passwords. The issue results from t...
CVE-2020-8862
CVE-2020-8862 affects D-Link DAP-2610 firmware v2.01RC067, allowing network-adjacent attackers to bypass authentication due to improper password handling, enabling arbitrary code execution in root. Multiple sources (ZDI-20-266) describe an authentication bypass without requiring credentials; Red ...
D-Link DAP-2610 Router login Incorrect Comparison Authentication Bypass Vulnerability
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-2610 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of passwords. The issue results from the lack of proper...
Oracle Enterprise Manager Cloud Control (Jan 2020 CPU)
The version of Oracle Enterprise Manager Cloud Control installed on the remote host is affected by multiple vulnerabilities in Enterprise Manager Base Platform component: - Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager, Supported versions that are...
CVE-2020-2610
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Enterprise Config Management. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HT...
CVE-2020-2610
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Enterprise Config Management. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HT...
CVE-2020-2610
CVE-2020-2610 affects Oracle Enterprise Manager Base Platform, specifically the Enterprise Config Management component, with affected versions 12.1.0.5, 13.2.0.0 and 13.3.0.0. The Nessus entry confirms this vulnerability is exploitable remotely via HTTP by a highly privileged attacker, potentiall...
Virtuozzo Linux Errata and Bugfix Advisory 2019:2610
Upstream security update. Follow RHBA-2019:2610 for details...
CVE-2019-2610
CVE-2019-2610 describes a vulnerability in Oracle Outside In Technology (Outside In Filters). The Red Hat and IBM bulletin data indicate that Oracle Outside In Technology is used as a component in Rational DOORS Next Generation, with affected Rational DOORS NG versions 6.0.6 and 6.0.6.1. The vuln...
CVE-2017-2610
jenkins before versions 2.44, 2.32.2 is vulnerable to a persisted cross-site scripting in search suggestions due to improperly escaping users with less-than and greater-than characters in their names SECURITY-388...
CVE-2017-2610
CVE-2017-2610 describes a persisted cross-site scripting vulnerability in Jenkins search suggestions caused by improper escaping of in user names. Affected are Jenkins versions before 2.44 and 2.32.2 . The reports indicate a stored XSS via names entered by users; no exploitation details beyond t...
Oracle iPlanet Web Server 7.0.x < 7.0.27 NSS Unspecified Vulnerability (January 2018 CPU)
According to its self-reported version, the Oracle iPlanet Web Server formerly known as Sun Java System Web Server running on the remote host is 7.0.x prior to 7.0.27 Patch 26834070. It is, therefore, affected by an unspecified vulnerability in the Network Security Services NSS library with unkno...
CVE-2018-2610
CVE-2018-2610 affects Oracle Hyperion Data Relationship Management, subcomponent Access and security , specifically the affected product/version: Hyperion Data Relationship Management 11.1.2.4.330. The vulnerability description states an unauthenticated attacker with network access over HTTP can ...
Jenkins Multiple Vulnerabilities (Feb 2017) - Windows
Jenkins is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:jenkins:jenkins"; ifdescription...
Jenkins Multiple Vulnerabilities (Feb 2017) - Linux
Jenkins is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:jenkins:jenkins"; ifdescription...
Oracle Linux 7 : systemd (ELSA-2016-2610)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-2610 advisory. 219-30.0.1.3 - set 'RemoveIPC=no' in logind.conf as default for OL7.2 22224874 - allow dm remove ioctl to co-operate with UEK3 Vaughan Cao Orabug: 18467469 - ad...
CVE-2015-2610
CVE-2015-2610 concerns an unspecified vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (versions 12.0.6, 12.1.3, 12.2.3, 12.2.4) that allows remote attackers to compromise integrity via unknown vectors related to popup windows. The affected product is Oracle...
CVE-2014-2610
CVE-2014-2610 affects HP Executive Scorecard (CAP) in versions 9.40 and 9.41. The underlying issue is a directory-traversal flaw in the Content Acceleration Pack web application that allows an authenticated user to upload an executable file, enabling remote code execution. The ZDI advisory confir...
[security bulletin] HPSBMU03048 rev.1 - HP Software Executive Scorecard, Remote Execution of Code, Directory Traversal
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04341295 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04341295 Version: 1 HPSBMU03048 rev....