CVE-2026-4757

A VAPIX API parameter had improper input validation which could allow code execution and potentially lead to a privilege escalation. This flaw can only be exploited after authenticating with an administrator-privileged service account...

CVE-2026-4757

A VAPIX API parameter had improper input validation which could allow code execution and potentially lead to a privilege escalation. This flaw can only be exploited after authenticating with an administrator-privileged service account...

CVE-2023-21418

Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API irissetup.cgi was vulnerable to path traversal attacks that allows for file deletion. This flaw can only be exploited after authenticating with an operator- or administrator-privileged service account. The impact...

Default credentials

The telnet administrator service running on port 650 on Gigaset DX600A v41.00-175 devices does not implement any lockout or throttling functionality. This situation together with the weak password policy that forces a 4-digit password allows remote attackers to easily obtain administrative access...

CVE-2021-25309

The telnet administrator service running on port 650 on Gigaset DX600A v41.00-175 devices does not implement any lockout or throttling functionality. This situation together with the weak password policy that forces a 4-digit password allows remote attackers to easily obtain administrative access...

CVE-2021-25309

The telnet administrator service running on port 650 on Gigaset DX600A v41.00-175 devices does not implement any lockout or throttling functionality. This situation together with the weak password policy that forces a 4-digit password allows remote attackers to easily obtain administrative access...

CVE-2021-25309

CVE-2021-25309 affects Gigaset DX600A devices with firmware v41.00-175. The telnet administrator service on port 650 does not implement any lockout or throttling, combined with a 4-digit weak password policy, enabling remote attackers to obtain administrative access via brute-force attempts. Publ...

PT-2021-16510

Name of the Vulnerable Software and Affected Versions: Gigaset DX600A version 41.00-175 Description: The issue concerns the telnet administrator service on Gigaset DX600A devices, which lacks lockout or throttling functionality. This, combined with a weak password policy that only allows 4-digit...

CVE-2021-25309: Improper Restriction of Excessive Authentication Attempts

The telnet administrator service running on port 650 on Gigaset DX600A v41.00-175 devices does not implement any lockout or throttling functionality. This situation together with the weak password policy that forces a 4-digit password allows remote attackers to easily obtain administrative access...

Qualcomm Bluetooth Host Information Disclosure Vulnerability

A security vulnerability exists in Qualcomm Bluetooth Host that stems from an arbitrary read issue that results in local privilege escalation in the administrator service...

lmgrd FlexNet Publisher DoS

The vulnerability of the lmgrd component and the components of the FlexNet Publisher daemon are related to errors in message processing within the lmadmin service. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CVE-2018-18810: Undefined Security Weakness

The Administrator Service component of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center, and TIBCO Managed File Transfer Internet Server contains vulnerabilities where an authenticated user with specific privileges can gain access to credentials to other systems. Affected releases...

PT-2018-14669

Name of the Vulnerable Software and Affected Versions TIBCO Managed File Transfer Command Center versions up to and including 8.1.0 TIBCO Managed File Transfer Internet Server versions up to and including 8.1.0 Description The issue allows an authenticated user with specific privileges to gain...

CVE-2017-5531

Deployments of TIBCO Managed File Transfer Command Center versions 8.0.0 and 8.0.1 and TIBCO Managed File Transfer Internet Server versions 8.0.0 and 8.0.1 that enable the Administrator Service may be affected by a vulnerability which may allow any authenticated user to gain administrative contro...

CVE-2017-5531

CVE-2017-5531 affects TIBCO Managed File Transfer Command Center (CC) and Managed File Transfer Internet Server (IS) versions 8.0.0 and 8.0.1. The issue may allow any authenticated user to gain administrative control of the Managed File Transfer web applications via the Administrator Service. In ...

CVE-2017-5531: Undefined Security Weakness

Deployments of TIBCO Managed File Transfer Command Center versions 8.0.0 and 8.0.1 and TIBCO Managed File Transfer Internet Server versions 8.0.0 and 8.0.1 that enable the Administrator Service may be affected by a vulnerability which may allow any authenticated user to gain administrative contro...

PT-2017-16562

Name of the Vulnerable Software and Affected Versions TIBCO Managed File Transfer Command Center versions 8.0.0 through 8.0.1 TIBCO Managed File Transfer Internet Server versions 8.0.0 through 8.0.1 Description The issue may allow any authenticated user to gain administrative control of Managed...

Symantec Veritas Administrator Service vxsvc Buffer Overflow (CVE-2011-0547)

A code execution vulnerability has been reported in Symantec Veritas enterprise administrator service. The vulnerability is due to improper buffer allocation while parsing requests. An attacker may exploit this vulnerability by sending a specially crafted request to an affected server. Successful...

CVE-2009-3749

The Web Administrator service STEMWADM.EXE in Websense Personal Email Manager 7.1 before Hotfix 4 and Email Security 7.1 before Hotfix 4 allows remote attackers to cause a denial of service crash by sending a HTTP GET request to TCP port 8181 and closing the socket before the service can send a...

Code injection

The Web Administrator service STEMWADM.EXE in Websense Personal Email Manager 7.1 before Hotfix 4 and Email Security 7.1 before Hotfix 4 allows remote attackers to cause a denial of service crash by sending a HTTP GET request to TCP port 8181 and closing the socket before the service can send a...