CVE-2014-9354

NetApp OnCommand Balance before 4.2P3 allows local users to obtain sensitive information via unspecified vectors related to cleartext storage...

CVE-2014-9353

NetApp OnCommand Balance before 4.2P2 contains a "default privileged account," which allows remote attackers to gain privileges via unspecified vectors...

Design/Logic Flaw

NetApp OnCommand Balance before 4.2P2 contains a "default privileged account," which allows remote attackers to gain privileges via unspecified vectors...

Open redirect

NetApp OnCommand Balance before 4.2P3 allows local users to obtain sensitive information via unspecified vectors related to cleartext storage...

CVE-2014-9353

NetApp OnCommand Balance before 4.2P2 contains a "default privileged account," which allows remote attackers to gain privileges via unspecified vectors...

CVE-2014-9354

NetApp OnCommand Balance before 4.2P3 allows local users to obtain sensitive information via unspecified vectors related to cleartext storage...

CVE-2014-9353

Affected product: NetApp OnCommand Balance. Vulnerability: presence of a default privileged account in Balance prior to version 4.2P2, enabling remote privilege elevation via unspecified vectors. Root cause: default privileged account included in the application. Impact: attacker could gain privi...

CVE-2014-9354

CVE-2014-9354 affects NetApp OnCommand Balance before 4.2P3. The vulnerability enables local users to obtain sensitive information due to cleartext storage. Affected product: NetApp OnCommand Balance; root cause: cleartext storage leading to information disclosure. Potential impact: exposure of s...

PT-2015-4187

Name of the Vulnerable Software and Affected Versions NetApp OnCommand Balance versions prior to 4.2P2 Description The issue allows remote attackers to gain privileges via unspecified vectors due to a default privileged account. Recommendations For versions prior to 4.2P2, update to version 4.2P2...

PT-2015-4188

Name of the Vulnerable Software and Affected Versions NetApp OnCommand Balance versions prior to 4.2P3 Description The issue allows local users to obtain sensitive information due to cleartext storage. Recommendations For versions prior to 4.2P3, update to version 4.2P3 or later to resolve the...

CVE-2014-9354: Exposure of Sensitive Information to an Unauthorized Actor

NetApp OnCommand Balance before 4.2P3 allows local users to obtain sensitive information via unspecified vectors related to cleartext storage...

CVE-2014-9353: Undefined Security Weakness

NetApp OnCommand Balance before 4.2P2 contains a "default privileged account," which allows remote attackers to gain privileges via unspecified vectors...

WordPress Simple Balance Theme <= 2.2.1 - Cross Site Scripting

This vulnerability allows remote attackers to inject arbitrary script or HTML via "index.php" file, "s" parameter. Solution Update the theme...

Threat Outbreak Alert: Fake Bank Balance Document Email Messages on November 10, 2013

Medium Alert ID: 31702 First Published: 2013 November 11 20:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a bank balance notification for the recipient. The text in the email message attempts to convince the recipie...

shopex register any user-defined pre-Deposit of balance or integration-vulnerability warning-the black bar safety net

Brief description: shopex in the registered user is present when the validation is not strict, leading to the time of registration can be freely defined the pre-Deposit balances or credits such as the contents of the field Detailed description: 在 文件 \core\shop\controller\ctl.passport.php if !$ in...

Inside the Security Model of BlackBerry 10

LAS VEGAS–The new BlackBerry 10 operating system contains a number of security improvements and upgrades over earlier versions, but there are still some features and functions that an attacker may be able to exploit. The OS also contains a diagnostic tool called QUIP that has the ability to colle...

shopex注册用户任意定义预存款余额或积分

简要描述： shopex在注册用户时存在验证不严，导致注册时可以随意定义预存款余额或积分等字段的内容 详细说明： 在文件\core\shop\controller\ctl.passport.php if !$info = $account-create$POST,$message $this-splash'failed','back',$message,'','',$POST'fromminipassport'; 用户注册的变量都保存在$POST中，继续看根目录文件index.php filterData$POST; require...

PHPValley Micro Jobs Site Script 1.01 Account Takeover

PHPValley Micro Jobs Site Script version 1.01 allows for a logged in user to spoof another user and take over their account. Author: Jason Whelan PacketStorm: exploitdev Email: email protected Target Software: PHPValley Micro Jobs Site Script 1.01 Vendor URL: http://phpvalley.com/ Demo:...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64

CVE-2009-2695 kernel: SELinux and mmapminaddr CVE-2009-3228 kernel: tc: uninitialised kernel memory leak CVE-2009-3286 kernel: OEXCL creates on NFSv4 are broken CVE-2009-2908 kernel ecryptfs NULL pointer dereference CVE-2009-3613 kernel: flood ping cause out-of-iommu error and panic when mtu larg...

PHPCMS V9 member table of contents feel free to modify the vulnerability and fix-vulnerability warning-the black bar safety net

A variable is not initialized causing the server setting registerglobal=On when members can freely modify their own member information. Due to the need registerglobal=On support, the impact is limited.. Vulnerability relates to members can modify their own balance lead to the website may have...