64 matches found
CVE-2017-6035
The CVE-2017-6035 issue affects Wecon Technologies LEVI Studio HMI Editor prior to 1.8.1, where a STACK-BASED BUFFER OVERFLOW in processing a project file can cause a denial of service when a malicious project is opened. Connected sources confirm the affected product and root cause, and ICS-CERT ...
CVE-2015-0916
SQL injection vulnerability in graph.php in Cacti before 0.8.6f allows remote authenticated users to execute arbitrary SQL commands via the localgraphid parameter, a different vulnerability than CVE-2007-6035...
CVE-2014-6035
CVE-2014-6035 affects ManageEngine OpManager (FileCollector servlet) on OpManager 11.4, 11.3 and earlier. A directory traversal flaw allows remote attackers to write and execute arbitrary files via a .. in the FILENAME parameter; Nessus also notes related issues in regionID handling and potential...
ManageEngine OpManager Social IT Plus IT360 - Multiple Vulnerabilities
ManageEngine OpManager Social IT Plus IT360 - Multiple Vulnerabilities Multiple vulnerabilities in ManageEngine OpManager, Social IT Plus and IT360 Discovered by Pedro Ribeiro [email protected], Agile Information Security ==========================================================================...
ManageEngine OpManager / Social IT Plus / IT360 - Multiple Vulnerabilities
Multiple vulnerabilities in ManageEngine OpManager, Social IT Plus and IT360 Discovered by Pedro Ribeiro [email protected], Agile Information Security ========================================================================== Disclosure: 27/09/2014 1 and 2, 09/11/2014 3 and 4 / Last updated:...
ManageEngine Multiple Products FileCollector Directory Traversal (CVE-2014-6035)
A directory traversal vulnerability exists in ManageEngine OpManager, Social IT Plus and IT360. The vulnerability is due to lack of authentication and insufficient input validation in HTTP requests. A remote unauthenticated attacker can upload arbitrary files to arbitrary locations...
ManageEngine Code Execution / File Deletion
Hi, This is the fifth part of the ManageOwnage series. For previous parts, see: http://seclists.org/fulldisclosure/2014/Aug/55 http://seclists.org/fulldisclosure/2014/Aug/75 http://seclists.org/fulldisclosure/2014/Aug/88 http://seclists.org/fulldisclosure/2014/Sep/1 This time we have a file uploa...
CVE-2013-6035
CVE-2013-6035 affects satellite terminals from Harris (BGAN RF-7800B-VU204, RF-7800B-DU204), Hughes (9201, 9450, 9502), Thuraya IP, Inmarsat, and Japan Radio JUE-250/JUE-500. The issue: firmware allows unauthenticated sessions on TCP port 1827 through an insecure proprietary protocol, enabling an...
CVE-2012-6035
The dotmemdestroypool function in the Transcendent Memory TMEM in Xen 4.0, 4.1, and 4.2 does not properly validate pool ids, which allows local guest OS users to cause a denial of service memory corruption and host crash or execute arbitrary code via unspecified vectors. NOTE: this issue was...
CVE-2012-6035
The CVE-2012-6035 entry concerns Xen’s Transcendent Memory (TMEM) in Xen 4.0–4.2, where do_tmem_destroy_pool does not properly validate pool IDs. This can lead to denial of service (memory corruption and host crash) and could allow arbitrary code execution via unspecified vectors. The description...
SuSE 10 Security Update : Apache 2 (ZYPP Patch Number 6035)
A DoS condition in apache2's modproxy has been fixed. CVE-2008-2364 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41473;...
Fedora Update for cacti FEDORA-2007-3683
Check for the Version of cacti OpenVAS Vulnerability Test Fedora Update for cacti FEDORA-2007-3683 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...
Fedora Update for cacti FEDORA-2007-3667
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for cacti FEDORA-2007-3683
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for cacti FEDORA-2008-1699
Check for the Version of cacti OpenVAS Vulnerability Test Fedora Update for cacti FEDORA-2008-1699 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...
Fedora Update for cacti FEDORA-2008-1699
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2008-6035
CVE-2008-6035 is an XSS vulnerability in Achievo 1.3.2-STABLE, exposed via the atknodetype parameter in dispatch.php. The issue allows remote attackers to inject arbitrary web script or HTML. The available sources document the affected product and the vulnerability class but do not provide detail...
Fedora 7 : cacti-0.8.7a-1.fc7 (2007-3683)
Tue Nov 20 2007 Mike McGrath - 0.8.7a-1 - Upstream released new version - Fixes for bug 391691 - CVE-2007-6035 - Sat Oct 13 2007 Mike McGrath - 0.8.7-2 - Upstream released new version - No longer need to patch for /etc/cacti/ - Fri Sep 14 2007 Mike McGrath - 0.8.6j-8 - Fix for CVE-2007-3112...
openSUSE 10 Security Update : cacti (cacti-4722)
This update fixes a SQL injection bug. CVE-2007-6035 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update cacti-4722. The text description of this plugin is C SUSE LLC...
