53 matches found
ManageEngine OpManager and Social IT Arbitrary File Upload
This module exploits a file upload vulnerability in ManageEngine OpManager and Social IT. The vulnerability exists in the FileCollector servlet which accepts unauthenticated file uploads. This module has been tested successfully on OpManager v8.8 - v11.3 and on version 11.0 of SocialIT for Window...
CVE-2013-6034
CVE-2013-6034 involves firmware in multiple satellite terminals (Harris BGAN RF-7800B-VU204/DU204; Hughes NOC 9201/9450/9502; Thuraya IP; Inmarsat; Japan Radio JUE-250/JUE-500) with hardcoded login credentials (CWE-798) and an insecure proprietary protocol exposed on TCP port 1827. The CERT/CC no...
CVE-2012-6034
The 1 tmemcsavegetnextpage and 2 tmemcsavegetnextinv functions and the 3 TMEMCSAVEGETPOOLUUID sub-operation in the Transcendent Memory TMEM in Xen 4.0, 4.1, and 4.2 "do not check incoming guest output buffer pointers," which allows local guest OS users to cause a denial of service memory corrupti...
CVE-2012-6034
The 1 tmemcsavegetnextpage and 2 tmemcsavegetnextinv functions and the 3 TMEMCSAVEGETPOOLUUID sub-operation in the Transcendent Memory TMEM in Xen 4.0, 4.1, and 4.2 "do not check incoming guest output buffer pointers," which allows local guest OS users to cause a denial of service memory corrupti...
CVE-2012-6034
The 1 tmemcsavegetnextpage and 2 tmemcsavegetnextinv functions and the 3 TMEMCSAVEGETPOOLUUID sub-operation in the Transcendent Memory TMEM in Xen 4.0, 4.1, and 4.2 "do not check incoming guest output buffer pointers," which allows local guest OS users to cause a denial of service memory corrupti...
CVE-2012-6034
CVE-2012-6034 affects Xen TMEM (Transcendent Memory) in Xen 4.0–4.2. The vulnerable code paths are tmemc_save_get_next_page, tmemc_save_get_next_inv, and the TMEMC_SAVE_GET_POOL_UUID sub-operation, which fail to validate incoming guest output buffer pointers. This can allow a local guest OS user ...
CVE-2012-6034
The 1 tmemcsavegetnextpage and 2 tmemcsavegetnextinv functions and the 3 TMEMCSAVEGETPOOLUUID sub-operation in the Transcendent Memory TMEM in Xen 4.0, 4.1, and 4.2 "do not check incoming guest output buffer pointers," which allows local guest OS users to cause a denial of service memory corrupti...
Liferay Portal p_p_id parameter vulnerable to persistent cross-site scripting
Overview Liferay Portal is vulnerable to persistent cross-site scripting via the ppid parameter, which can allow a remote, unauthenticated attacker to execute arbitrary script in the context of the portal administrator. Description Liferay Portal is a web portal that can provide Java applets that...
CVE-2008-6034
CVE-2008-6034 describes a cross-site scripting (XSS) vulnerability in the Achievo 1.3.2 web application, specifically in the file dispatch.php . The flaw is exploitable via the atkaction parameter, enabling remote attackers to inject arbitrary web script or HTML. The connected documents do not pr...
