Code injection

The SNMP implementation in Cisco IOS 15.12SG4 on Catalyst 4500 devices, when single-switch Virtual Switching System VSS is configured, allows remote authenticated users to cause a denial of service device crash by performing SNMP polling, aka Bug ID CSCuq04574...

CVE-2015-0687

The SNMP implementation in Cisco IOS 15.12SG4 on Catalyst 4500 devices, when single-switch Virtual Switching System VSS is configured, allows remote authenticated users to cause a denial of service device crash by performing SNMP polling, aka Bug ID CSCuq04574...

CVE-2015-0687

Cisco Catalyst 4500 devices running Cisco IOS 15.1(2)SG4 with a single-switch VSS configuration are vulnerable to a SNMP polling DoS (device crash) when an authenticated remote user polls SNMP. Root cause is described as an issue in the SNMP implementation; exact condition is not fully detailed i...

Cisco Catalyst 4500 SNMP Polling Denial of Service Vulnerability

A vulnerability in the Simple Network Management Protocol SNMP code of Cisco Catalyst 4500 devices running Cisco IOS Software could allow an authenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to an unspecified condition that exists during SNMP...

CVE-2014-2951

Datum Systems SnIP on PSM-500 and PSM-4500 devices has a hardcoded password of admin for the admin account, which makes it easier for remote attackers to obtain access via unspecified vectors...

CVE-2014-2950

Datum Systems SnIP on PSM-500 and PSM-4500 devices does not require authentication for FTP sessions, which allows remote attackers to obtain sensitive information via RETR commands...

Authentication flaw

Datum Systems SnIP on PSM-500 and PSM-4500 devices does not require authentication for FTP sessions, which allows remote attackers to obtain sensitive information via RETR commands...

CVE-2014-2950

CVE-2014-2950 affects Datum Systems SnIP on PSM-4500 and PSM-500 satellite modem devices. The connected documents confirm that FTP sessions are allowed without authentication, enabling remote attackers to retrieve files via RETR and obtain sensitive information. The NVD entry lists a CVSSv2 base ...

CVE-2014-2950

Datum Systems SnIP on PSM-500 and PSM-4500 devices does not require authentication for FTP sessions, which allows remote attackers to obtain sensitive information via RETR commands...

CVE-2014-2951

Datum Systems SnIP on PSM-500 and PSM-4500 devices has a hardcoded password of admin for the admin account, which makes it easier for remote attackers to obtain access via unspecified vectors...

CVE-2014-2951

Datum Systems SnIP on the PSM-500/PSM-4500 satellite modem devices contains a hardcoded admin password (admin) for the admin account, enabling remote attackers to gain access via unspecified vectors. CVE-2014-2951 is rated CVSS v2 base 10.0 (Network, no auth, complete confidentiality, integrity a...

Datum Systems satellite modem devices contain multiple vulnerabilities

Overview Datum Systems PSM-4500 and PSM-500 series satellite modem devices contain multiple vulnerabilities Description CWE-220:Sensitive Data Under FTP Root - CVE-2014-2950The Datum Systems SnIP operating system on PSM-4500 and PSM-500 satellite modem devices has FTP enabled by default with no...

CVE-2013-4500

CVE-2013-4500 concerns the Drupal Quiz module (6.x-4.x) prior to 6.x-4.5. The root cause is insufficient access control: remote authenticated users with either "view any quiz results" or "view results for own quiz" permissions can delete arbitrary results via the delete option. Impact is denial o...

SA-CONTRIB-2013-083 - Quiz - Access Bypass

Access bypass on deleting quiz results The Quiz module provides tools for authoring and administering quizzes through Drupal. A quiz is given as a series of questions, with only one question appearing per page. Scores are then stored in the database. The module doesn't sufficiently check the dele...

CVE-2013-1243

The IP stack in Cisco Intrusion Prevention System IPS Software in ASA 5500-X IPS-SSP software and hardware modules before 7.15E4, IPS 4500 sensors before 7.16E4, and IPS 4300 sensors before 7.15E4 allows remote attackers to cause a denial of service MainApp process hang via malformed IPv4 packets...

CVE-2013-1176

The DSP card on Cisco TelePresence MCU 4500 and 4501 devices before 4.32.30, TelePresence MCU MSE 8510 devices before 4.32.30, and TelePresence Server before 2.31.55 does not properly validate H.264 data, which allows remote attackers to cause a denial of service device reload via crafted RTP...

CVE-2012-4500

The CVE-2012-4500 entry concerns Drupal’s Announcements module (6.x-1.x) prior to version 6.x-1.5. The vulnerability allows remote authenticated users who have the 'access announcements' permission to bypass node access restrictions, potentially leading to additional unspecified impact. Patch/fix...

CVE-2011-4500

CVE-2011-4500 affects the Cisco Linksys WRT54GX with firmware 2.00.05. When UPnP IGD is enabled, the SOAP server is configured to listen on the WAN port, enabling remote administration of the firewall via SOAP requests. This is the concrete vulnerability as described in multiple sources (NVD, Red...

SonicWall NSA 4500 protection bypass

ARP spoofing protection doesn't work if used in conjunction...

CVE-2010-4500

CVE-2010-4500 affects the MCGIGUY FreeTicket 1.0.0 application. When magic_quotes_gpc is disabled, remote attackers can trigger SQL injection via the sendmess action by supplying arbitrary values for the fields: name, email, subject, and message. The vulnerability arises from unsanitized inputs b...