Lucene search
+L

86 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/12/31 12:00 a.m.•11 views

CVE-2014-4876: Exposure of Sensitive Information to an Unauthorized Actor

Toshiba 4690 Operating System 6 Release 3, when the ADXSITCF logical name is not properly restricted, allows remote attackers to read potentially sensitive system environment variables via a crafted request to TCP port 54138...

4.3CVSS5.5AI score0.01658EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2015/12/31 12:00 a.m.•10 views

PT-2015-3784

Name of the Vulnerable Software and Affected Versions Toshiba 4690 Operating System version 6 Release 3 Description The issue allows remote attackers to read potentially sensitive system environment variables by sending a crafted request to the TCP port 54138, due to the improper restriction of t...

4.3CVSS0.01658EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2015/10/08 12:00 a.m.•35 views

Oracle: Security Advisory (ELSA-2008-0965)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.4AI score0.0506EPSS
SaveExploits2References2
OpenVAS
OpenVAS
•added 2015/07/07 12:00 a.m.•11 views

Fedora Update for glpi FEDORA-2015-4690

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
CNVD
CNVD
•added 2015/06/17 12:00 a.m.•20 views

Toshiba 4690 Operating System Information Disclosure Vulnerability

Toshiba 4690 Operating System is an operating system from Toshiba. An information disclosure vulnerability exists in the Toshiba 4690 Operating System, which could be exploited by remote attackers to obtain sensitive information...

4.3CVSS6.3AI score0.01658EPSS
SaveExploits0References1
CVE
CVE
•added 2014/07/02 10:00 a.m.•68 views

CVE-2014-4690

PfSense is vulnerable to CVE-2014-4690 (and related listed CVEs) due to multiple directory traversal flaws present in pfSense prior to version 2.1.4. Specifically, an attacker can read arbitrary .info files via a crafted path to pkg_mgr_install.php (pkg parameter) and read arbitrary files via the...

5CVSS6.6AI score0.03501EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2014/04/21 10:55 p.m.•30 views

CVE-2014-0361

The default configuration of IBM 4690 OS, as used in Toshiba Global Commerce Solutions 4690 POS and other products, hashes passwords with the ADXCRYPT algorithm, which makes it easier for context-dependent attackers to obtain sensitive information via unspecified cryptanalysis of an ADXCSOUF.DAT...

3CVSS5.9AI score0.00283EPSS
SaveExploits0References2
Prion
Prion
•added 2014/04/21 10:55 p.m.•30 views

Default configuration

The default configuration of IBM 4690 OS, as used in Toshiba Global Commerce Solutions 4690 POS and other products, hashes passwords with the ADXCRYPT algorithm, which makes it easier for context-dependent attackers to obtain sensitive information via unspecified cryptanalysis of an ADXCSOUF.DAT...

3CVSS6.3AI score0.00283EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2014/04/21 10:00 p.m.•62 views

CVE-2014-0361

CVE-2014-0361 applies to IBM 4690 OS (used by Toshiba Global Commerce Solutions 4690 POS and related products). The issue stems from the ADXCRYPT password-hashing algorithm, which is vulnerable to known-plaintext attacks and hash collisions, enabling context-dependent attackers to obtain or deduc...

3CVSS6AI score0.00283EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2014/04/21 10:00 p.m.•40 views

CVE-2014-0361

The default configuration of IBM 4690 OS, as used in Toshiba Global Commerce Solutions 4690 POS and other products, hashes passwords with the ADXCRYPT algorithm, which makes it easier for context-dependent attackers to obtain sensitive information via unspecified cryptanalysis of an ADXCSOUF.DAT...

5.9AI score0.00283EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2014/04/21 12:00 a.m.•2 views

PT-2014-3590

Name of the Vulnerable Software and Affected Versions IBM 4690 OS affected versions not specified Description The default configuration of IBM 4690 OS uses the ADXCRYPT algorithm to hash passwords, making it easier for attackers to obtain sensitive information via cryptanalysis of an ADXCSOUF.DAT...

3CVSS0.00283EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/04/21 12:00 a.m.•6 views

CVE-2014-0361: Undefined Security Weakness

The default configuration of IBM 4690 OS, as used in Toshiba Global Commerce Solutions 4690 POS and other products, hashes passwords with the ADXCRYPT algorithm, which makes it easier for context-dependent attackers to obtain sensitive information via unspecified cryptanalysis of an ADXCSOUF.DAT...

3CVSS5.8AI score0.00283EPSS
SaveExploits0References2
CERT
CERT
•added 2014/04/21 12:00 a.m.•92 views

Toshiba Global Commerce Solutions' 4690 Point of Sale operating system contains a password hashing algorithm that can be reversed

Overview Toshiba Global Commerce Solutions' 4690 Point of Sale operating system contains a password hashing algorithm that can be reversed. CWE-328 Description Toshiba Global Commerce Solutions' 4690 Point of Sale operating system contains a password hashing algorithm that can be reversed. CWE-32...

3CVSS6.1AI score0.00283EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2013/07/12 12:00 a.m.•35 views

Oracle Linux 5 : lynx (ELSA-2008-0965)

The remote Oracle Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2008-0965 advisory. - add patch for CVE-2008-4690 rhbz468184 - prompt user before executing commands from the lynxcgi: handler, even in the advanced user mode - mark all...

10CVSS7.4AI score0.0506EPSS
SaveExploits2References3
CVE
CVE
•added 2013/07/11 2:00 p.m.•92 views

CVE-2013-4690

CVE-2013-4690 describes a memory-padding initialization flaw in Juniper Junos OS on SRX1400/3400/3600 platforms (versions listed) that can leak sensitive data by reading Ethernet-packet padding. The root cause is improper initialization of memory locations used during padding, enabling remote att...

5CVSS4.6AI score0.02072EPSS
SaveExploits0References4Affected Software4
CVE
CVE
•added 2012/12/08 3:00 p.m.•109 views

CVE-2012-4690

The CVE-2012-4690 vulnerability affects Rockwell Automation Allen-Bradley MicroLogix devices (1100/1200/1400/1500) and the SLC 500 and PLC‑5 controller platforms. When Static status is not enabled, attackers can remotely send crafted messages that modify status bits, causing the controller to fau...

7.1CVSS6.8AI score0.0405EPSS
SaveExploits0References3Affected Software3
OpenVAS
OpenVAS
•added 2012/08/30 12:00 a.m.•34 views

Fedora Update for openstack-keystone FEDORA-2012-4690

Check for the Version of openstack-keystone OpenVAS Vulnerability Test Fedora Update for openstack-keystone FEDORA-2012-4690 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

7.5AI score0.01199EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2012/08/01 12:00 a.m.•23 views

Scientific Linux Security Update : lynx on SL3.x, SL4.x, SL5.x i386/x86_64

An arbitrary command execution flaw was found in the Lynx 'lynxcgi:' URI handler. An attacker could create a web page redirecting to a malicious URL that could execute arbitrary code as the user running Lynx in the non-default 'Advanced' user mode. CVE-2008-4690 Note: In these updated lynx...

10CVSS7.9AI score0.0506EPSS
SaveExploits2References3
OpenVAS
OpenVAS
•added 2012/04/09 12:00 a.m.•37 views

Opera Cache History Information Disclosure Vulnerability (Linux)

The host is installed with Opera and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gboperacachehistoryinfodiscvulnlin.nasl 5999 2017-04-21 09:02:32Z teissa $ Opera Cache History Information Disclosure Vulnerability Linux Authors: Rachana Shetty Copyright:...

5CVSS6.5AI score0.01147EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2011/12/07 7:00 p.m.•43 views

CVE-2011-4690

Opera 11.60 and earlier does not prevent capture of data about the times of Same Origin Policy violations during IFRAME loading attempts, which makes it easier for remote attackers to determine whether a document exists in the browser cache via crafted JavaScript code...

6.3AI score0.01147EPSS
SaveExploits1References2
Rows per page
Query Builder