Lucene search
+L

1248 matches found

OSV
OSV
•added 2016/05/31 1:59 a.m.•16 views

CVE-2016-4501

Environmental Systems Corporation ESC 8832 Data Controller 3.02 and earlier mishandles sessions, which allows remote attackers to bypass authentication and make arbitrary configuration changes via unspecified vectors...

9.1CVSS5.9AI score0.01728EPSS
SaveExploits0References1
NVD
NVD
•added 2016/05/31 1:59 a.m.•25 views

CVE-2016-4501

Environmental Systems Corporation ESC 8832 Data Controller 3.02 and earlier mishandles sessions, which allows remote attackers to bypass authentication and make arbitrary configuration changes via unspecified vectors...

9.1CVSS9.4AI score0.01728EPSS
SaveExploits0References1
Prion
Prion
•added 2016/05/31 1:59 a.m.•22 views

Authentication flaw

Environmental Systems Corporation ESC 8832 Data Controller 3.02 and earlier mishandles sessions, which allows remote attackers to bypass authentication and make arbitrary configuration changes via unspecified vectors...

6.4CVSS7.6AI score0.01728EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2016/05/31 12:00 a.m.•3 views

PT-2016-5984

Name of the Vulnerable Software and Affected Versions Environmental Systems Corporation ESC 8832 Data Controller versions 3.02 and earlier Description The issue allows remote attackers to bypass authentication and make arbitrary configuration changes. Recommendations For versions 3.02 and earlier...

9.1CVSS0.01728EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/05/31 12:00 a.m.•6 views

CVE-2016-4501: Improper Access Control

Environmental Systems Corporation ESC 8832 Data Controller 3.02 and earlier mishandles sessions, which allows remote attackers to bypass authentication and make arbitrary configuration changes via unspecified vectors...

9.1CVSS8.3AI score0.01728EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2016/05/13 12:00 a.m.•51 views

Cisco TelePresence XML API HTTP Request Handling Authentication Bypass (cisco-sa-20160504-tpxml)

The remote host is running a version of Cisco TelePresence Codec TC that is 7.2.x prior to 7.3.6 or a version of Cisco Collaboration Endpoint CE software that is 8.x prior 8.1.1. It is, therefore, affected by an authentication bypass vulnerability in the XML application programming interface API ...

9.8CVSS8.5AI score0.01778EPSS
SaveExploits0References2
OSV
OSV
•added 2016/05/09 10:59 a.m.•14 views

CVE-2016-2457

server/pm/UserManagerService.java in Wi-Fi in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 allows attackers to bypass intended restrictions on Wi-Fi configuration changes by leveraging guest access, aka internal bug 27411179...

5.5CVSS5.8AI score0.0019EPSS
SaveExploits0References3
Prion
Prion
•added 2016/05/09 10:59 a.m.•27 views

Design/Logic Flaw

server/pm/UserManagerService.java in Wi-Fi in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 allows attackers to bypass intended restrictions on Wi-Fi configuration changes by leveraging guest access, aka internal bug 27411179...

2.1CVSS7AI score0.0019EPSS
SaveExploits0References3Affected Software1
UbuntuCve
UbuntuCve
•added 2016/05/09 10:59 a.m.•31 views

CVE-2016-2457

server/pm/UserManagerService.java in Wi-Fi in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 allows attackers to bypass intended restrictions on Wi-Fi configuration changes by leveraging guest access, aka internal bug 27411179...

5.5CVSS6.5AI score0.0019EPSS
SaveExploits0References3
OSV
OSV
•added 2016/05/09 10:59 a.m.•12 views

UBUNTU-CVE-2016-2457

server/pm/UserManagerService.java in Wi-Fi in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 allows attackers to bypass intended restrictions on Wi-Fi configuration changes by leveraging guest access, aka internal bug 27411179...

5.5CVSS7.3AI score0.0019EPSS
SaveExploits0References4
OSV
OSV
•added 2016/05/06 7:50 a.m.•23 views

SUSE-SU-2016:1247-1 Security update for ntp

ntp was updated to version 4.2.8p6 to fix 28 security issues. Major functional changes: - The 'sntp' commandline tool changed its option handling in a major way, some options have been renamed or dropped. - 'controlkey 1' is added during update to ntp.conf to allow sntp to work. - The local clock...

9.8CVSS7.5AI score0.81762EPSS
SaveExploits13References59
CNVD
CNVD
•added 2016/05/06 12:00 a.m.•46 views

Cisco TelePresence Codec and Collaboration Endpoint Software Authentication Bypass Vulnerability

Cisco TelePresence is the United States Cisco Cisco company's set of video conferencing solutions known as "telepresence" system. TelePresence Codec TC and Collaboration Endpoint CE software are two of the endpoint software. Software are two of the endpoint software. An authentication bypass...

9.8CVSS7.3AI score0.01778EPSS
SaveExploits0References1
NVD
NVD
•added 2016/05/05 9:59 p.m.•38 views

CVE-2016-1387

The XML API in TelePresence Codec TC 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.3.2, 7.3.3, 7.3.4, and 7.3.5 and Collaboration Endpoint CE 8.0.0, 8.0.1, and 8.1.0 in Cisco TelePresence Software mishandles authentication, which allows remote attackers to execute control commands or make configuration changes v...

9.8CVSS9.8AI score0.01778EPSS
SaveExploits0References2
OSV
OSV
•added 2016/05/05 9:59 p.m.•13 views

CVE-2016-1387

The XML API in TelePresence Codec TC 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.3.2, 7.3.3, 7.3.4, and 7.3.5 and Collaboration Endpoint CE 8.0.0, 8.0.1, and 8.1.0 in Cisco TelePresence Software mishandles authentication, which allows remote attackers to execute control commands or make configuration changes v...

9.8CVSS5.9AI score0.01778EPSS
SaveExploits0References2
Prion
Prion
•added 2016/05/05 9:59 p.m.•26 views

Command injection

The XML API in TelePresence Codec TC 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.3.2, 7.3.3, 7.3.4, and 7.3.5 and Collaboration Endpoint CE 8.0.0, 8.0.1, and 8.1.0 in Cisco TelePresence Software mishandles authentication, which allows remote attackers to execute control commands or make configuration changes v...

9CVSS7.8AI score0.01778EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2016/05/05 9:00 p.m.•43 views

CVE-2016-1387

The XML API in TelePresence Codec TC 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.3.2, 7.3.3, 7.3.4, and 7.3.5 and Collaboration Endpoint CE 8.0.0, 8.0.1, and 8.1.0 in Cisco TelePresence Software mishandles authentication, which allows remote attackers to execute control commands or make configuration changes v...

9.8AI score0.01778EPSS
SaveExploits0References2
CVE
CVE
•added 2016/05/05 9:00 p.m.•77 views

CVE-2016-1387

Cisco TelePresence TC (Codec) 7.2.x–7.3.x and CE (Collaboration Endpoint) 8.0.x–8.1.x are affected by an authentication bypass in the XML API due to improper authentication implementation. An unauthenticated, remote attacker can bypass XML API authentication and perform configuration changes or i...

9.8CVSS9.7AI score0.01778EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2016/05/05 12:00 a.m.•3 views

PT-2016-4754

Name of the Vulnerable Software and Affected Versions TelePresence Codec TC versions 7.2.0 through 7.3.5 Collaboration Endpoint CE versions 8.0.0 through 8.1.0 Description The XML API in Cisco TelePresence Software mishandles authentication, allowing remote attackers to execute control commands o...

9.8CVSS0.01778EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/05/05 12:00 a.m.•9 views

CVE-2016-1387: Improper Authentication

The XML API in TelePresence Codec TC 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.3.2, 7.3.3, 7.3.4, and 7.3.5 and Collaboration Endpoint CE 8.0.0, 8.0.1, and 8.1.0 in Cisco TelePresence Software mishandles authentication, which allows remote attackers to execute control commands or make configuration changes v...

9.8CVSS8.5AI score0.01778EPSS
SaveExploits0References2
Cisco
Cisco
•added 2016/05/04 4:00 p.m.•56 views

Cisco TelePresence XML Application Programming Interface Authentication Bypass Vulnerability

A vulnerability in the XML application programming interface API of Cisco TelePresence Codec TC and Collaboration Endpoint CE Software could allow an unauthenticated, remote attacker to bypass authentication and access a targeted system through the API. The vulnerability is due to improper...

9CVSS9.8AI score0.01778EPSS
SaveExploits0References1
Rows per page
Query Builder