7856 matches found
CVE-2014-8926: Undefined Security Weakness
Common Inventory Technology CIT before 2.7.0.2050 in IBM License Metric Tool 7.2.2, 7.5, and 9; Endpoint Manger for Software Use Analysis 9; and Tivoli Asset Discovery for Distributed 7.2.2 and 7.5 allows remote attackers to cause a denial of service CPU consumption or application crash via a...
PT-2015-4130
Name of the Vulnerable Software and Affected Versions IBM License Metric Tool versions prior to 2.7.0.2050 Endpoint Manger for Software Use Analysis version 9 Tivoli Asset Discovery for Distributed versions 7.2.2 and 7.5 Description The issue allows remote attackers to cause a denial of service,...
PT-2015-4131
Name of the Vulnerable Software and Affected Versions IBM License Metric Tool versions 7.2.2 through 9 before 2.7.0.2050 Endpoint Manger for Software Use Analysis version 9 Tivoli Asset Discovery for Distributed versions 7.2.2 through 7.5 Description The issue allows remote attackers to cause a...
IBM License Metric Tool Directory Traversal Vulnerability
The IBM License Metric Tool is a free tool from IBM USA that helps IBM Passport Advantage Software Upgrade and Support Services customers determine their Processor Value Unit PVU license requirements. A directory traversal vulnerability exists in the IBM License Metric Tool and Tivoli Asset...
CVE-2014-8924
The server in IBM License Metric Tool 7.2.2 before IF15 and 7.5 before IF24 and Tivoli Asset Discovery for Distributed 7.2.2 before IF15 and 7.5 before IF24 allows remote attackers to read arbitrary files or send TCP requests to intranet servers via XML data containing an external entity...
Xxe
The server in IBM License Metric Tool 7.2.2 before IF15 and 7.5 before IF24 and Tivoli Asset Discovery for Distributed 7.2.2 before IF15 and 7.5 before IF24 allows remote attackers to read arbitrary files or send TCP requests to intranet servers via XML data containing an external entity...
CVE-2014-8924
The server in IBM License Metric Tool 7.2.2 before IF15 and 7.5 before IF24 and Tivoli Asset Discovery for Distributed 7.2.2 before IF15 and 7.5 before IF24 allows remote attackers to read arbitrary files or send TCP requests to intranet servers via XML data containing an external entity...
CVE-2014-8924
CVE-2014-8924 describes an XML External Entity (XXE) vulnerability in IBM License Metric Tool (LM Tool) and Tivoli Asset Discovery for Distributed. Affected products/versions include LM Tool 7.2.2 before IF15 and 7.5 before IF24, and Tivoli Asset Discovery for Distributed 7.2.2 before IF15 and 7....
CVE-2014-8924: Undefined Security Weakness
The server in IBM License Metric Tool 7.2.2 before IF15 and 7.5 before IF24 and Tivoli Asset Discovery for Distributed 7.2.2 before IF15 and 7.5 before IF24 allows remote attackers to read arbitrary files or send TCP requests to intranet servers via XML data containing an external entity...
PT-2015-4128
Name of the Vulnerable Software and Affected Versions IBM License Metric Tool versions 7.2.2 before IF15 and 7.5 before IF24 Tivoli Asset Discovery for Distributed versions 7.2.2 before IF15 and 7.5 before IF24 Description The issue allows remote attackers to read arbitrary files or send TCP...
WordPress Asset Manager Plugin <= 0.2 - Arbitrary Code Execution
This plugin is prone to upload.php arbitrary code execution vulnerability. Solution Update plugin...
Global 9 5% of the SAP Enterprise Management System there is a security vulnerability that could lead to serious data leakage-vulnerability warning-the black bar safety net
According to Onapsis research report, the world more than 2 5 million for corporate due to the SAP system in the presence of a series of security vulnerabilities affected, may lead to serious corporate data breaches. SAP is the world's most popular enterprise application software companies and...
CSRF/XSS In Manage Engine Asset Explorer
=============================================================================== CSRF/Stored XSS Vulnerability in Manage Engine Asset Explorer =============================================================================== . contents:: Table Of Content Overview ======== Title :CSRF/Stored XSS...
Manage Engine Asset Explorer 6.1.0 Build: 6110 - CSRF Vulnerability
Exploit for php platform in category web applications =============================================================================== CSRF/Stored XSS Vulnerability in Manage Engine Asset Explorer =============================================================================== . contents:: Table Of...
Manage Engine Asset Explorer 6.1.0 Build: 6110 - Cross-Site Request Forgery
Manage Engine Asset Explorer 6.1.0 Build: 6110 - Cross-Site Request Forgery =============================================================================== CSRF/Stored XSS Vulnerability in Manage Engine Asset Explorer ===============================================================================...
Manage Engine Asset Explorer 6.1.0 Build: 6110 - Cross-Site Request Forgery
=============================================================================== CSRF/Stored XSS Vulnerability in Manage Engine Asset Explorer =============================================================================== . contents:: Table Of Content Overview ======== Title :CSRF/Stored XSS...
Manage Engine Asset Explorer 6.1.0 Build 6110 CSRF / XSS
=============================================================================== CSRF/Stored XSS Vulnerability in Manage Engine Asset Explorer =============================================================================== . contents:: Table Of Content Overview ======== Title :CSRF/Stored XSS...
SQL Injection Vulnerability in Asset Management Digital Platform of Jinan Guozi Digital Technology Co.
Jinan Guozi Digital Technology Co., Ltd. asset management digital platform is to provide all levels and types of schools and education authorities mature education and teaching management solutions. A SQL injection vulnerability exists in the Asset Management Digital Platform of Jinan Guozi Digit...
GLPI Information Disclosure Vulnerability (CNVD-2015-02621)
GLPI is an open source IT asset management software. An information disclosure vulnerability exists in versions of GLPI prior to 0.84.7. A remote attacker is allowed to exploit this vulnerability to obtain sensitive information...