310 matches found
CVE-2016-5063
The RSCD agent in BMC Server Automation before 8.6 SP1 Patch 2 and 8.7 before Patch 3 on Windows might allow remote attackers to bypass authorization checks and make an RPC call via unspecified vectors...
Hitek Software Automize Information Disclosure Vulnerability (CNVD-2017-03647)
Hitek Software Automize is an automation software suite from Hitek Software that increases productivity and saves time. An information disclosure vulnerability exists in Hitek Software Automize. An attacker could exploit this vulnerability to disclose sensitive information...
CVE-2016-4386
HPE Network Automation Software 10.10 allows local users to write to arbitrary files via unspecified vectors...
CVE-2016-4386
HPE Network Automation Software 10.10 allows local users to write to arbitrary files via unspecified vectors...
CVE-2016-4385
The RMI service in HP Network Automation Software 9.1x, 9.2x, 10.0x before 10.00.02.01, and 10.1x before 10.11.00.01 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections ACC and Commons BeanUtils libraries...
CVE-2016-4386
HPE Network Automation Software 10.10 is affected by CVE-2016-4386, described in connected CNVD/NVD entries as a local security bypass that lets a local user write to arbitrary files. The exact vulnerable component, vectors, and root cause are not detailed beyond confirming a local-privelege-elev...
CVE-2016-4385
The RMI service in HP Network Automation Software 9.1x, 9.2x, 10.0x before 10.00.02.01, and 10.1x before 10.11.00.01 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections ACC and Commons BeanUtils libraries...
CVE-2016-4386: Undefined Security Weakness
HPE Network Automation Software 10.10 allows local users to write to arbitrary files via unspecified vectors...
PT-2016-5931
Name of the Vulnerable Software and Affected Versions HPE Network Automation Software version 10.10 Description The issue allows local users to write to arbitrary files. Recommendations For HPE Network Automation Software version 10.10, at the moment, there is no information about a newer version...
CVE-2016-4385: Deserialization of Untrusted Data
The RMI service in HP Network Automation Software 9.1x, 9.2x, 10.0x before 10.00.02.01, and 10.1x before 10.11.00.01 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections ACC and Commons BeanUtils libraries...
PT-2016-5930
Name of the Vulnerable Software and Affected Versions HP Network Automation Software versions 9.1x through 9.2x HP Network Automation Software versions 10.0x through 10.00.02.00 HP Network Automation Software versions 10.1x through 10.10.99.99 Description The issue allows remote attackers to...
Siemens Patches Password Reconstruction Vulnerability in SICAM PAS
The Industrial Control Systems Cyber Emergency Response Team ICS-CERT cautioned users who work in electrical substations to update certain builds of energy automation software this week. ICS-CERT claims two vulnerabilities exist in the Siemens SICAM Power Automation System, or PAS, that could...
Cisco Prime Network Services Controller Arbitrary Command Execution Vulnerability
Cisco Prime Network Services Controller is a set of cloud automation network management software from Cisco Cisco. An arbitrary command execution vulnerability exists in Cisco Prime Network Services Controller 3.0. It allows a local user to bypass predefined access restrictions and execute...
Open Automation Software OPC Systems NET DLL Hijacking Vulnerability
OVERVIEW Ivan Sanchez from Nullcode Team has identified a DLL Hijacking vulnerability in Open Automation Software’s OPC Systems.NET application. Open Automation Software has reviewed the vulnerability and determined not to patch the issue at this time. This vulnerability could be exploited remote...
Critical: Red Hat Enhancement Advisory: Release of Satellite 6.0
Red Hat Satellite 6.0 is now available. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without necessity to provide public Internet access to their servers or other client systems. It also performs provisioning and configuration...
CVE-2014-0762: Improper Input Validation
The CG Automation Software DNP3 driver, used in the ePAQ-9410 Substation Gateway products, does not validate input correctly. An attacker could cause the software to go into an infinite loop, causing the process to crash. The system must be restarted manually to clear the condition...
SPBAS Business Automation Software 2012 - Multiple Vulnerabilities
SPBAS Business Automation Software 2012 - Multiple Vulnerabilities SPBAS Business Automation Software- XSS & CSRF Vulnerability Date: 16 June 2013 Author: Christy Philip Mathew - www.offcon.org Vendor or Software Link: http://www.spbas.com Version: 2012 1.XSS Vulnerability a Client Area - My Info...
SPBAS Business Automation Software 2012 - Multiple Vulnerabilities
SPBAS Business Automation Software- XSS & CSRF Vulnerability Date: 16 June 2013 Author: Christy Philip Mathew - www.offcon.org Vendor or Software Link: http://www.spbas.com Version: 2012 1.XSS Vulnerability a Client Area - My Info - Update the first name and last name to john" b Update the securi...
Buffer overflow
Buffer overflow in the VSFlex7.VSFlexGrid ActiveX control in ComponentOne FlexGrid 7.1, as used in Open Automation Software OPC Systems.NET, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long archive file name argument to the Archive method...