CVE-2016-2976

CVE-2016-2976 corresponds to an information-disclosure vulnerability in IBM Sametime Meeting Server versions 8.5.2 and 9.0. The CVE entry describes that a meeting invitee could obtain previously cleared sensitive information by viewing the meeting report history. Connected sources (CNVD-2017-2754...

CVE-2017-2976

Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability. Successful exploitation could lead to information disclosure...

Ubuntu 14.04 LTS : Linux kernel (Utopic HWE) vulnerability (USN-2976-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-2976-1 advisory. Philip Pettersson discovered that the Linux kernel's ASN.1 DER decoder did not properly process certificate files with tags of indefinite length. A local...

CVE-2015-2976

CVE-2015-2976 affects Research Artisan Lite prior to 1.18. The provided documents confirm multiple cross-site scripting (XSS) vulnerabilities (CWE-79) that can allow remote attackers to inject arbitrary scripts via either a crafted HTML document or a crafted URL processed during access-log analys...

Sixnet Sixview Web Console Directory Traversal (CVE-2014-2976)

Sixnet Sixview contains a flaw that allows traversing outside of a restricted path. The issue is due to the program not properly sanitizing user input. With a specially crafted request, a remote attacker can gain access to arbitrary files...

Debian: Security Advisory (DSA-2976-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Sixnet Sixview 2.4.1 - Web Console Directory Traversal

No description provided by source. Exploit Title: Sixnet sixview web console directory traversal Date: 2014-04-21 Exploit Author: daniel svartman Vendor Homepage: www.sixnet.com Software Link: Not available, hardware piece - appliance Version: 2.4.1 Tested on: Sixnet Sixview web console Linux bas...

CVE-2014-2976

CVE-2014-2976 affects Sixnet SixView Manager 2.4.1 (Sixview web console). A directory traversal flaw allows remote attackers to read arbitrary files via a crafted HTTP GET (port 18081) that uses a .. sequence. The root cause is insufficient input sanitization in the web console, enabling access t...

CVE-2014-2976

Directory traversal vulnerability in Sixnet SixView Manager 2.4.1 allows remote attackers to read arbitrary files via a .. dot dot in an HTTP GET request to TCP port 18081...

Sixnet Sixview 2.4.1 - Web Console Directory Traversal

Exploit for hardware platform in category web applications Exploit Title: Sixnet sixview web console directory traversal Date: 2014-04-21 Exploit Author: daniel svartman Vendor Homepage: www.sixnet.com Software Link: Not available, hardware piece - appliance Version: 2.4.1 Tested on: Sixnet Sixvi...

Sixnet Sixview 2.4.1 - Web Console Directory Traversal

Sixnet Sixview 2.4.1 - Web Console Directory Traversal Exploit Title: Sixnet sixview web console directory traversal Date: 2014-04-21 Exploit Author: daniel svartman Vendor Homepage: www.sixnet.com Software Link: Not available, hardware piece - appliance Version: 2.4.1 Tested on: Sixnet Sixview w...

Sixnet Sixview 2.4.1 - Web Console Directory Traversal

Exploit Title: Sixnet sixview web console directory traversal Date: 2014-04-21 Exploit Author: daniel svartman Vendor Homepage: www.sixnet.com Software Link: Not available, hardware piece - appliance Version: 2.4.1 Tested on: Sixnet Sixview web console Linux based appliance CVE : 2014-2976 PoV,...

CVE-2013-2976

CVE-2013-2976 : IBM WebSphere Application Server’s Administrative Console caches data in a way that lets local users obtain sensitive information. Affected versions include WAS 6.1, 7.0, and 8.x (including 8.0/8.5). The issue is a local information-disclosure via caching; no exploit vectors are s...

CVE-2012-2976

Symantec Web Gateway is affected by CVE-2012-2976: the management console in 5.0.x up to 5.0.3.18 allows remote attackers to execute arbitrary shell commands via crafted input to application scripts (injection). Connected sources corroborate a remote command execution/Vulnerabilities in the SYM12...

Gentoo Security Advisory GLSA 201110-03 (bugzilla)

The remote host is missing updates announced in advisory GLSA 201110-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

FreeBSD Ports: bugzilla

The remote host is missing an update to the system as announced in the referenced advisory. VID dc8741b9-c5d5-11e0-8a8e-00151735203a OpenVAS Vulnerability Test $ Description: Auto generated from VID dc8741b9-c5d5-11e0-8a8e-00151735203a Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

FreeBSD Ports: bugzilla

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2011-2976

Bugzilla (Bugzilla) XSS vulnerability CVE-2011-2976 affects Bugzilla 2.16rc1–2.22.7, 3.0.x–3.3.x, and 3.4.x before 3.4.12. The issue allows remote attackers to inject arbitrary web script or HTML via vectors involving the BUGLIST cookie. No remediation details are provided in the connected docume...

CVE-2010-2976

The controller in Cisco Unified Wireless Network UWN Solution 7.x through 7.0.98.0 has 1 a default SNMP read-only community of public, 2 a default SNMP read-write community of private, and a value of "default" for the 3 SNMP v3 username, 4 SNMP v3 authentication password, and 5 SNMP v3 privacy...

CVE-2010-2976

CVE-2010-2976 affects Cisco Unified Wireless Network (UWN) Solution controllers on 7.x up to 7.0.98.0. The issue arises from default SNMP configurations: read-only community set to public, read-write community set to private, and default SNMPv3 username/passwords. This insecure default enables re...