7856 matches found
iDefense Security Advisory 12.01.06: Novell ZENworks Asset Management Collection Client Heap Overflow Vulnerability
Novell ZENworks Asset Management Collection Client Heap Overflow Vulnerability iDefense Security Advisory 12.01.06 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 01, 2006 I. BACKGROUND Novell Inc's ZENworks is a set of tools used to automate IT management and business processes across...
Design/Logic Flaw
Secure Elements Class 5 AVR client aka C5 EVM before 2.8.1 does not validate the CEID of an incoming message, which allows remote attackers to send messages to a protected asset without knowing the proper CEID...
Code injection
Secure Elements Class 5 AVR client aka C5 EVM before 2.8.1 generates predictable CEIDs, which allows remote attackers to determine the CEID of a protected asset, which can be used in other attacks against AVR...
CVE-2006-2714
Secure Elements Class 5 AVR client aka C5 EVM before 2.8.1 does not validate the CEID of an incoming message, which allows remote attackers to send messages to a protected asset without knowing the proper CEID...
CVE-2006-2713
CVE-2006-2713 affects Secure Elements Class 5 AVR client (aka C5 EVM) prior to version 2.8.1. The vulnerability stems from generating predictable CEIDs, allowing a remote attacker to determine the CEID of a protected asset. This information could be leveraged in subsequent attacks against AVR. Th...
CVE-2006-2714: Undefined Security Weakness
Secure Elements Class 5 AVR client aka C5 EVM before 2.8.1 does not validate the CEID of an incoming message, which allows remote attackers to send messages to a protected asset without knowing the proper CEID...
Cross site scripting
UNVERIFIABLE NOTE: this issue does not contain any verifiable or actionable details. Cross-site scripting XSS vulnerability in John Frank Asset Manager AssetMan 2.4a and earlier allows remote attackers to inject arbitrary web script or HTML via "any of its input." NOTE: the original disclosure is...
CVE-2006-2641
UNVERIFIABLE NOTE: this issue does not contain any verifiable or actionable details. Cross-site scripting XSS vulnerability in John Frank Asset Manager AssetMan 2.4a and earlier allows remote attackers to inject arbitrary web script or HTML via "any of its input." NOTE: the original disclosure is...
CVE-2006-2641
Technical details for CVE-2006-2641 are not publicly available in the provided documents; no affected product, component, or exploit information is specified. Monitor for updates.
CVE-2006-2641: Undefined Security Weakness
UNVERIFIABLE NOTE: this issue does not contain any verifiable or actionable details. Cross-site scripting XSS vulnerability in John Frank Asset Manager AssetMan 2.4a and earlier allows remote attackers to inject arbitrary web script or HTML via "any of its input." NOTE: the original disclosure is...
Secure Elements Class 5 AVR client sends messages in cleartext
Overview The Secure Elements Class 5 AVR client sends messages in cleartext. This may allow an attacker to read traffic from an asset. Description Class 5 AVR Secure Elements Class 5 AVR Automated Vulnerability Remediation is a security product that monitors and enforces security policies on...
YusASP Web Asset Manager Vulnerability
YusASP Web Asset Manager is a complete file manager for your website. If left uprotected, the YusASP allows you to anage the remote server SPDX-FileCopyrightText: 2005 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
CVE-2004-2269
Stack-based buffer overflow in pads.c in Passive Asset Detection System Pads might allow local users to execute arbitrary code via a long report file name argument. NOTE: since Pads is not normally installed setuid, this may not be a vulnerability...
CVE-2004-2269
The CVE-2004-2269 entry concerns a stack-based buffer overflow in pads.c of Passive Asset Detection System (Pads). The vulnerability could allow local users to execute arbitrary code via a long report file name argument. Note that Pads is not normally installed setuid, which may affect exploitabi...
CVE-2004-2269: Undefined Security Weakness
Stack-based buffer overflow in pads.c in Passive Asset Detection System Pads might allow local users to execute arbitrary code via a long report file name argument. NOTE: since Pads is not normally installed setuid, this may not be a vulnerability...
CVE-2005-1668
CVE-2005-1668 – YusASP Web Asset Manager 1.0 : Multiple connected sources confirm a privilege escalation via a direct request to the endpoint assetmanager.asp, allowing remote attackers to gain privileges. No patch/version details are provided in the documents. OpenVAS and PT-Security references ...
CVE-2005-1668
YusASP Web Asset Manager 1.0 allows remote attackers to gain privileges via a direct request to assetmanager.asp...
CVE-2005-1668
YusASP Web Asset Manager 1.0 allows remote attackers to gain privileges via a direct request to assetmanager.asp...
PT-2005-2645 · Yusasp · Yusasp Web Asset Manager
Name of the Vulnerable Software and Affected Versions: YusASP Web Asset Manager version 1.0 Description: The issue allows remote attackers to gain privileges via a direct request to the "assetmanager.asp" endpoint. Recommendations: For YusASP Web Asset Manager version 1.0, consider restricting...