CVE-2013-2808: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Xper in Philips Xper Information Management Physiomonitoring 5 components, Xper Information Management Vascular Monitoring 5 components, and Xper Information Management servers and workstations for Flex Cardio products before XperConnect 1.5.4.053 SP2 allows remote...

CVE-2013-5493

The diagnostic module in the firmware on Cisco Virtualization Experience Client 6000 devices allows local users to bypass intended access restrictions and execute arbitrary commands via unspecified vectors, aka Bug ID CSCug68407...

Design/Logic Flaw

The diagnostic module in the firmware on Cisco Virtualization Experience Client 6000 devices allows local users to bypass intended access restrictions and execute arbitrary commands via unspecified vectors, aka Bug ID CSCug68407...

CVE-2013-5493: Improper Input Validation

The diagnostic module in the firmware on Cisco Virtualization Experience Client 6000 devices allows local users to bypass intended access restrictions and execute arbitrary commands via unspecified vectors, aka Bug ID CSCug68407...

PT-2013-5577

Name of the Vulnerable Software and Affected Versions Cisco Virtualization Experience Client 6000 devices affected versions not specified Description The issue concerns the diagnostic module in the firmware of the affected devices, allowing local users to bypass access restrictions and execute...

Cisco Virtualization Experience Client Series 6000 Local Arbitrary Command Execution Vulnerability

A vulnerability in the diagnostic module of the Cisco Virtualization Experience Client 6000 Series could allow an authenticated, non-privileged, local attacker to execute arbitrary commands on the underlying operating system. The vulnerability is due to lack of input validation in the diagnostic...

Command injection

The firmware on Cisco Virtualization Experience Client 6000 devices sets incorrect operating-system permissions, which allows local users to gain privileges via an unspecified sequence of commands, aka Bug ID CSCuc31764...

PT-2013-4365

Name of the Vulnerable Software and Affected Versions Cisco Virtualization Experience Client 6000 affected versions not specified Description The issue concerns incorrect operating-system permissions set by the firmware, allowing local users to gain privileges through a specific sequence of...

CVE-2013-3408: Undefined Security Weakness

The firmware on Cisco Virtualization Experience Client 6000 devices sets incorrect operating-system permissions, which allows local users to gain privileges via an unspecified sequence of commands, aka Bug ID CSCuc31764...

Code injection

Cisco Unified Communications Manager CUCM with software 6.x and 7.x before 7.15bsu5, 8.0 before 8.03asu3, and 8.5 and 8.6 before 8.62asu1 and Cisco Business Edition 3000 with software before 8.6.3 and 5000 and 6000 with software before 8.62asu1 allow remote attackers to cause a denial of service...

PT-2012-1890

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager CUCM versions 6.x through 7.x before 7.15bsu5 Cisco Unified Communications Manager CUCM versions 8.0 through 8.0 before 8.03asu3 Cisco Unified Communications Manager CUCM versions 8.5 through 8.6 before...

Cisco Catalyst 6000, 6500 and Cisco 7600 Series MPLS Packet Vulnerability

Cisco Catalyst 6500 series systems that are running certain versions of Cisco Internetwork Operating System IOS are vulnerable to an attack from a Multi Protocol Label Switching MPLS packet. Only the systems that are running in Hybrid Mode Catalyst OS CatOS software on the Supervisor Engine and I...

Cisco 6000/6500/7600 Crafted Layer 2 Frame Vulnerability - Cisco Systems

A layer 2 frame as defined in the Open System Interconnection Reference Model that is encapsulating a layer 3 packet IP, IPX, etc. may cause Cisco 6000/6500/7600 series systems with Multilayer Switch Feature Card 2 MSFC2 that have a FlexWAN or Optical Services Module OSM or that run 12.18bE14 to...

CoreFTP v2.1 b1637 (password field) Universal BOF Exploit

Exploit for unknown platform in category local exploits ========================================================= CoreFTP v2.1 b1637 password field Universal BOF Exploit ========================================================= !/usr/bin/python Vulnerability : CoreFTP v2.1 b1637 password field...

CVE-2008-6000

The CVE-2008-6000 entry concerns the GDTdiIcpt.sys driver used by G DATA AntiVirus 2008, InternetSecurity 2008, and TotalCare 2008. A crafted IOCTL input to IOCTL 0x8317001c causes the driver to populate kernel registers in a way that can trigger a denial of service (system crash) or allow privil...

Default credentials

The Advantech ADAM-6000 module has 00000000 as its default password, which makes it easier for remote attackers to obtain access through an HTTP session, and 1 monitor or 2 control the module's Modbus/TCP I/O activity...

CVE-2008-5848

The Advantech ADAM-6000 module has 00000000 as its default password, which makes it easier for remote attackers to obtain access through an HTTP session, and 1 monitor or 2 control the module's Modbus/TCP I/O activity...

CVE-2008-5848

The Advantech ADAM-6000 module has 00000000 as its default password, which makes it easier for remote attackers to obtain access through an HTTP session, and 1 monitor or 2 control the module's Modbus/TCP I/O activity...

CVE-2008-5848

The CVE-2008-5848 entry concerns the Advantech ADAM-6000 module which ships with a default password of 00000000. This default credential enables remote attackers to gain access via an HTTP session and, from there, monitor or control the module’s Modbus/TCP I/O activity. The connected sources conf...

CVE-2008-5848: Undefined Security Weakness

The Advantech ADAM-6000 module has 00000000 as its default password, which makes it easier for remote attackers to obtain access through an HTTP session, and 1 monitor or 2 control the module's Modbus/TCP I/O activity...