614 matches found
CVE-2017-5781
A CSRF vulnerability in HPE Matrix Operating Environment version v7.6 was found...
CVE-2017-8971
CVE-2017-8971 is a documented clickjacking vulnerability in HP Matrix Operating Environment (MOE) version 7.6 LR1. The connected sources identify HP MOE as the affected product and characterize the issue as a clickjacking vulnerability in its web-facing interface. The NVD entry provides CVSS scor...
CVE-2016-8517
A cross site scripting vulnerability in HPE Systems Insight Manager in all versions prior to 7.6 was found...
CVE-2017-5785
A remote information disclosure vulnerability is present in HPE Matrix Operating Environment Software version 7.6 (and SIM Software version 7.6 per CNVD). The issue could allow a remote attacker to obtain sensitive information. No root-cause or exploit details are provided in the connected docume...
CVE-2017-5782
A missing HSTS Header vulnerability in HPE Matrix Operating Environment version v7.6 was found...
CVE-2017-8971
A clickjacking vulnerability in HPE Matrix Operating Environment version 7.6 LR1 was found...
CVE-2017-5783
A remote clickjacking vulnerability in HPE Matrix Operating Environment version v7.6 was found...
CVE-2017-8970
A remote unauthenticated disclosure of information vulnerability in HPE Matrix Operating Environment version 7.6 LR1 was found...
CVE-2016-8515
A remote malicious file upload vulnerability in HPE Version Control Repository Manager VCRM was found. The problem impacts all versions prior to 7.6...
CVE-2017-1499
IBM Maximo Asset Management 7.5 and 7.6 are affected by CVE-2017-1499, where a remote attacker can include arbitrary files, potentially executing arbitrary code on the vulnerable Web server. The IBM Security Bulletin lists affected cores (Maximo Asset Management 7.6 and 7.5; Essentials 7.5) and r...
Debian DLA-1238-1 : awstats security update
Awstats version 7.6 and earlier is vulnerable to a path traversal flaw in the handling of the 'config' and 'migrate' parameters resulting in unauthenticated remote code execution. For Debian 7 'Wheezy', these problems have been fixed in version 7.0dfsg-7+deb7u1. We recommend that you upgrade your...
CVE-2017-1000501
Awstats version 7.6 and earlier is vulnerable to a path traversal flaw in the handling of the "config" and "migrate" parameters resulting in unauthenticated remote code execution...
CVE-2017-1000501
Awstats version 7.6 and earlier is vulnerable to a path traversal flaw in the handling of the "config" and "migrate" parameters resulting in unauthenticated remote code execution...
CVE-2017-1000501
Awstats version 7.6 and earlier is vulnerable to a path traversal flaw in the handling of the "config" and "migrate" parameters resulting in unauthenticated remote code execution...
CVE-2017-1000501
Awstats version 7.6 and earlier is vulnerable to a path traversal flaw in the handling of the "config" and "migrate" parameters resulting in unauthenticated remote code execution...
CVE-2017-1000501
Awstats version 7.6 and earlier is vulnerable to a path traversal flaw in the handling of the "config" and "migrate" parameters resulting in unauthenticated remote code execution...
awstats -- remote code execution
Mitre reports: Awstats version 7.6 and earlier is vulnerable to a path traversal flaw in the handling of the "config" and "migrate" parameters resulting in unauthenticated remote code execution...
CVE-2017-15906
The processopen function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files...
OpenSSH < 7.6
According to its banner, the version of OpenSSH running on the remote host is prior to 7.6. It is, therefore, affected by a file creation restriction bypass vulnerability related to the 'processopen' function in the file 'sftp-server.c' that allows authenticated users to create zero-length files...
IBM WebSphere DataPower Appliances Cross-Site Scripting Vulnerability
IBM WebSphere DataPower Appliances is a set of networking appliances from IBM in the United States. The appliances are primarily used to simplify, protect and accelerate XML and Web services deployments in SOA. A cross-site scripting vulnerability exists in IBM WebSphere DataPower Appliances...