44 matches found
CVE-2013-4859
INSTEON Hub 2242-222 lacks Web and API authentication...
CVE-2018-4859
CVE-2018-4859 affects SIEMENS SCALANCE M875 devices. A vulnerability allows an authenticated remote attacker with access to the web interface (443/tcp) to execute arbitrary operating system commands. Successful exploitation requires network access to the web interface and administrative credentia...
CVE-2017-4859
CVE-2017-4859 is rejected/not used and does not represent an active vulnerability entry.
CVE-2016-4859
CVE-2016-4859 is an open redirect vulnerability affecting Splunk Enterprise (versions 6.0.x–6.4.x with pre-6.0.12, pre-6.1.11, pre-6.2.10, pre-6.3.6, pre-6.4.3) and Splunk Light (pre-6.4.3). An attacker could craft a URL that redirects a user to an arbitrary site, facilitating phishing. Supported...
CVE-2016-4859
Open redirect vulnerability in Splunk Enterprise 6.4.x prior to 6.4.3, Splunk Enterprise 6.3.x prior to 6.3.6, Splunk Enterprise 6.2.x prior to 6.2.10, Splunk Enterprise 6.1.x prior to 6.1.11, Splunk Enterprise 6.0.x prior to 6.0.12, Splunk Enterprise 5.0.x prior to 5.0.16 and Splunk Light prior ...
UEFI EDK2 Capsule Update Vulnerabilities
Lenovo Security Advisory: LEN-2014-001 Potential Impact: Execution of arbitrary code Severity: Medium Summary: The EDK2 UEFI reference implementation contains multiple vulnerabilities in the Capsule Update mechanism. Description: The open source EDK2 project provides a reference implementation of...
Oracle Enterprise Manager Agent Unspecified Vulnerabilities (October 2015 CPU)
The version of Oracle Enterprise Manager Agent installed on the remote host is affected by multiple vulnerabilities : - An unspecified vulnerability exists in the Agent Next Gen subcomponent that a remote attacker can exploit to impact confidentiality and integrity. No other details are available...
CVE-2015-4859
CVE-2015-4859 affects Oracle Enterprise Manager Grid Control 12.1.0.4/12.1.0.5, specifically the Agent Next Gen subcomponent. The vulnerability is described as unspecified, with a remote attacker able to affect confidentiality and integrity via unknown vectors. Several connected sources reference...
SOL15679 - UEFI EDK2 Capsule Update vulnerabilities CVE-2014-4859 / CVE-2014-4860
Recommended action None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5 critical issue...
INSTEON Hub 2242-222 - Lack of Web and API Authentication
INSTEON Hub 2242-222 - Lack of Web and API Authentication Trustwave SpiderLabs Security Advisory TWSL2013-023: Lack of Web and API Authentication Vulnerability in INSTEON Hub Published: 8/01/13 Version: 1.0 Vendor: INSTEON http://www.INSTEON.com/ Product: Hub Version affected: 2242-222 model...
CVE-2013-4859
creationtimestamp| type| source ---|---|--- 2013-08-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/27284 2019-12-27 20:40:33+00:00| seen| https://t.me/cibsecurity/8896 2024-03-18 07:06:50+00:00| seen| https://t.me/ctinow/210217...
INSTEON Hub 2242-222 - Lack of Web and API Authentication
Trustwave SpiderLabs Security Advisory TWSL2013-023: Lack of Web and API Authentication Vulnerability in INSTEON Hub Published: 8/01/13 Version: 1.0 Vendor: INSTEON http://www.INSTEON.com/ Product: Hub Version affected: 2242-222 model discontinued Product description: Home automation controller f...
CVE-2012-4859
CVE-2012-4859 affects IBM Tivoli Storage Manager for Space Management (TSM HSM) up to 6.2.5.0 and 6.3.x up to 6.3.1.0, allowing a local attacker to read/modify file system objects via unspecified vectors. IBM security pages describe two related vulnerabilities (CVE-2012-4859: local access; CVE-20...
CVE-2012-4859
Unspecified vulnerability in IBM Tivoli Storage Manager for Space Management aka TSM HSM before 6.2.5.0 and 6.3.x before 6.3.1.0 allows local users to read or modify file system objects via unknown vectors...
CVE-2011-4859
CVE-2011-4859 concerns the Schneider Electric Quantum Ethernet Module family, where hard-coded credentials exist for 16 accounts (AUTCSE, AUT_CSE, fdrusers, ftpuser, loader, nic2212, nimrohs2212, nip2212, noe77111_v500, ntpupdate, pcfactory, sysdiag, target, test, USER, webserver). This enables r...
CVE-2010-4859
The CVE-2010-4859 entry describes a SQL injection in WebAsyst Shop-Script’s index.php, exploitable via the blog_id parameter in a news action. Remote attackers could execute arbitrary SQL commands. Documents identify the affected software and the underlying vulnerability type, but no specific rem...
CVE-2009-4859
Multiple cross-site scripting XSS vulnerabilities in Online Work Order Suite OWOS Lite Edition 3.10 allow remote attackers to inject arbitrary web script or HTML via the show parameter to 1 default.asp and 2 report.asp, and the 3 go parameter to login.asp...
CVE-2009-4859
CVE-2009-4859 affects Online Work Order Suite (OWOS) Lite Edition 3.10. The connected documents confirm multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via the show parameter to default.asp and report.asp, and via the go param...