38 matches found
CGA-WMJW-7H95-8954
Bulletin has no description...
CVE-2020-8954
OpenSearch Web browser 1.0.4.9 allows Intent Scheme Hijacking.a link that opens another app in the browser can be manipulated...
CVE-2020-8954
OpenSearch Web browser 1.0.4.9 is affected by an Intent Scheme Hijacking vulnerability. The description indicates that a link in the browser that opens another app can be manipulated, enabling potential redirection to unintended applications. The provided documents do not include further technica...
CVE-2019-8954
In Indexhibit 2.1.5, remote attackers can execute arbitrary code via the v parameter in conjunction with the id parameter in a updjxcode=true action to the ndxzstudio/?a=system URI...
CVE-2019-8954
Indexhibit 2.1.5 is affected by CVE-2019-8954. The vulnerability allows remote attackers to execute arbitrary code via the v parameter (used with the id parameter) in an upd_jxcode=true action to the ndxzstudio/?a=system URI. Several connected documents corroborate code execution impact on affect...
Security Bulletin: Hard-coded credentials used in IBM dashDB Local (CVE-2016-8954)
Summary Hard-code credentials in IBM dashDB Local might be exploited by an attacker. Vulnerability Details CVEID: CVE-2016-8954 DESCRIPTION: IBM dashDB Local uses hard-coded credentials that could allow a remote attacker to gain access to the Docker container or database. CVSS Base Score: 9.8 CVS...
CVE-2018-8954
CA Workload Control Center before r11.4 SP6 allows remote attackers to execute arbitrary code via a crafted HTTP request...
CVE-2018-8954
CA Workload Control Center (GUI for CA Workload Automation AE) is affected prior to r11.4 SP6. A remote attacker can execute arbitrary code via a specially crafted HTTP request, as described across multiple sources (CNVD/CVELIST/NVD entries). Root cause is an arbitrary code execution flaw in the ...
CVE-2017-8954
A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version 7.2 was found...
CVE-2017-8954
CVE-2017-8954 : A remote code execution vulnerability affects HPE Intelligent Management Center (iMC) PLAT 7.2. The issue targets the dbman service (default port 2810) where insufficient input validation allows an attacker to execute arbitrary code with SYSTEM privileges. Documented as a remote, ...
CVE-2015-8954
The MemcmpLowercase function in Suricata before 2.0.6 improperly excludes the first byte from comparisons, which might allow remote attackers to bypass intrusion-prevention functionality via a crafted HTTP request...
CVE-2015-8954
The MemcmpLowercase function in Suricata before 2.0.6 improperly excludes the first byte from comparisons, which might allow remote attackers to bypass intrusion-prevention functionality via a crafted HTTP request...
CVE-2015-8954
Summary: CVE-2015-8954 affects Suricata before 2.0.6. The MemcmpLowercase function omits the first byte from comparisons, potentially allowing a remote attacker to bypass intrusion-prevention functionality via a crafted HTTP request. Impact (as stated): Network-based bypass of IDS/IPS protections...
CVE-2015-8954
The MemcmpLowercase function in Suricata before 2.0.6 improperly excludes the first byte from comparisons, which might allow remote attackers to bypass intrusion-prevention functionality via a crafted HTTP request...
CVE-2016-8954
IBM dashDB Local uses hard-coded credentials that could allow a remote attacker to gain access to the Docker container or database...
CVE-2016-8954
IBM dashDB Local uses hard-coded credentials that could allow a remote attacker to gain access to the Docker container or database...
CVE-2014-8954
CVE-2014-8954 affects phpSound up to version 1.0.5. The issue is multiple XSS vulnerabilities exploitable via (1) the Title field, (2) the Description field in playlists, or (3) the filter parameter in an explore action to index.php, enabling remote script/HTML injection. The OpenVAS entry corrob...
