IBM Spectrum Protect Operations Center 7.1.x < 7.1.11.000 / 8.1.x < 8.1.10.000 Code Injection Vulnerability

The IBM Spectrum Protect Operations Center running on the remote host is version 7.1.x 7.1.11.000 or 8.1.x 8.1.10.000. It is, therefore, vulnerable to a code injection vulnerability which could allow an unauthenticated, remote attacker to execute arbitrary code on the system. Note that Nessus has...

CVE-2020-4693

CVE-2020-4693 affects IBM Spectrum Protect Operations Center and related Spectrum Protect products. The vulnerability arises from improper validation of data prior to export, enabling an attacker to execute arbitrary code remotely over the network. Affected items include: IBM Spectrum Protect Ope...

Security Bulletin: Code injection vulnerability in IBM Spectrum Protect Operations Center (CVE-2020-4693)

Summary Due to improper validation of data prior to export, IBM Spectrum Protect Operations Center may allow an attacker to execute arbitrary code on the system. Vulnerability Details CVEID: CVE-2020-4693 DESCRIPTION: IBM Spectrum Protect may allow an attacker to execute arbitrary code on the...

CVE-2019-4693

IBM Guardium Data Encryption (GDE) 3.0.0.2 stores user credentials in plaintext, allowing a locally authenticated privileged user to read them. This is documented across multiple sources (NVD entry CVE-2019-4693 and CNVD-2020-49941), confirming plaintext storage vulnerability in GDE 3.0.0.2. IBM’...

Debian DSA-4693-1 : drupal7 - security update

Several vulnerabilities were discovered in Drupal, a fully-featured content management framework, which could result in an open redirect or cross-site scripting. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...

CVE-2013-4693

creationtimestamp| type| source ---|---|--- 2019-12-27 18:40:12+00:00| seen| https://t.me/cibsecurity/8883 2024-03-17 15:51:30+00:00| seen| https://t.me/ctinow/209967...

CVE-2013-4693

WordPress Xorbin Digital Flash Clock 1.0 has XSS...

CVE-2013-4693

CVE-2013-4693 affects the WordPress plugin Xorbin Digital Flash Clock 1.0. The vulnerability is a Flash-based XSS in the plugin’s frontend due to the xorDigitalClock.swf component, where the external input taken from the widgetUrl parameter is passed into getURL. This causes injected script execu...

Oracle Linux 6 : libssh2 (ELSA-2019-4693)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-4693 advisory. 1.4.2-2.0.1.el67.1 - Orabug: 29909723 Added patch CVE-2019-3862. Added Additional length checks to prevent out-of-bounds CVE-2019-3862 Tenable has extracted the...

CVE-2017-4693

CVE-2017-4693 is rejected/not used as explicitly stated in the Initial Description.

CVE-2016-4693

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Security" component, which makes it easier for attackers to bypass cryptographic protection mechanisms by leveraging use of t...

CVE-2016-4693

CVE-2016-4693 affects Apple platforms (iOS 10.2 and earlier, macOS 10.12.1/10.12.2 and earlier, watchOS 3.1.3 and earlier) where the Security component could allow bypassing cryptographic protections by leveraging the 3DES cipher. The vulnerability is tied to the removal of 3DES as a default ciph...

CVE-2014-4693

Multiple cross-site scripting XSS vulnerabilities in the Snort package before 3.0.13 for pfSense through 2.1.4 allow remote attackers to inject arbitrary web script or HTML via 1 the eng parameter to snortimportaliases.php or 2 unspecified variables to snortselectalias.php...

CVE-2014-4693

CVE-2014-4693 involves multiple XSS vulnerabilities in the pfSense Snort package prior to 3.0.13 (affecting pfSense versions up to 2.1.4). The vulnerabilities allow remote attackers to inject arbitrary web script or HTML via (1) the eng parameter to snort_import_aliases.php or (2) unspecified var...

Xorbin Digital Flash Clock 1.0 For WordPress XSS

==================================================================== Xorbin Digital Flash Clock 1.0 Plugin for Wordpress Flash-based XSS ==================================================================== Description: This plugin displays digital flash clock on your website. It's easy to use and...

CVE-2012-4693

Invensys Wonderware InTouch 2012 R2 and earlier and Siemens ProcessSuite use a weak encryption algorithm for data in Pssecurity.ini, which makes it easier for local users to discover passwords by reading this file...

CVE-2012-4693

CVE-2012-4693 affects Invensys Wonderware InTouch 2012 R2 and earlier and Siemens ProcessSuite, which store passwords in Ps_security.ini using a weak, reversible encryption. The vulnerability allows a local attacker with read access to Ps_security.ini to decrypt usernames and passwords and potent...

Siemens ProcessSuite and Invensys Intouch Poorly Encrypted Password File

Overview This advisory provides mitigation details for a vulnerability that impacts Siemens ProcessSuite and Invensys Wonderware InTouch products. Researcher Seth Bromberger of NCI Security, LLC and independent researcher Slade Griffin have identified an insecure password storage vulnerability in...

CVE-2011-4693

CVE-2011-4693 refers to an unspecified vulnerability in Adobe Flash Player 11.1.102.55 on Windows and Mac OS X that enables remote code execution via a crafted SWF file, demonstrated by the Intevydis vd_adobe_fp module in VulnDisco Step Ahead. The disclosure noted it had no actionable information...

CVE-2010-4693

Coppermine Photo Gallery 1.5.10 and earlier are affected by multiple cross-site scripting (XSS) vulnerabilities due to insufficient sanitization of user-supplied input. Exploitable via the h and t parameters to help.php, or via picfile_XXX parameters to searchnew.php, allowing attackers to inject...