PT-2017-17992

Name of the Vulnerable Software and Affected Versions ABB VSN300 WiFi Logger Card versions 1.8.15 and prior ABB VSN300 WiFi Logger Card for React versions 2.1.3 and prior Description A Permissions, Privileges, and Access Controls issue was found in the web application, where it does not properly...

CVE-2017-11356

The application distribution export functionality in PEGA Platform 7.2 ML0 and earlier allows remote authenticated users with certain privileges to obtain sensitive configuration information by leveraging a missing access control...

Thermo Fisher Scientific Thermo Fisher Scientific dataTaker DT80 dEX Information Disclosure Vulnerability

The Thermo Fisher Scientific dataTaker DT80 dEX is a data acquisition recorder from Thermo Fisher Scientific Australia. A security vulnerability exists in Thermo Fisher Scientific dataTaker DT80 dEX version 1.50.012. A remote attacker can exploit the vulnerability to obtain sensitive credentials...

Information disclosure

dataTaker DT80 dEX 1.50.012 allows remote attackers to obtain sensitive credential and configuration information via a direct request for the /services/getFile.cmd?userfile=config.xml URI...

DataTaker DT80 dEX 1.50.012 Sensitive Configuration Exposure

Title: DataTaker DT80 dEX 1.50.012 - Sensitive Configurations Exposure + Credits / Discovery: Nassim Asrir + Author Contact: [email protected] || https://www.linkedin.com/in/nassim-asrir-b73a57122/ + Author Company: Henceforth + CVE: CVE-2017-11165 Vendor: ===============...

DataTaker DT80 dEX 1.50.012 - Information Disclosure

DataTaker DT80 dEX 1.50.012 - Information Disclosure + Title: DataTaker DT80 dEX 1.50.012 - Sensitive Configurations Exposure + Credits / Discovery: Nassim Asrir + Author Contact: [email protected] || https://www.linkedin.com/in/nassim-asrir-b73a57122/ + Author Company: Henceforth + CVE:...

CVE-2017-6045

An Information Exposure issue was discovered in Trihedral VTScada Versions prior to 11.2.26. Some files are exposed within the web server application to unauthenticated users. These files may contain sensitive configuration information...

CVE-2017-6045

Summary: CVE-2017-6045 is an information disclosure vulnerability in Trihedral VTScada prior to version 11.2.26. The issue arises from files being exposed within the web server to unauthenticated users, potentially revealing sensitive configuration data. Affected product/version: VTScada before 1...

CVE-2017-6045: Exposure of Information Through Directory Listing

An Information Exposure issue was discovered in Trihedral VTScada Versions prior to 11.2.26. Some files are exposed within the web server application to unauthenticated users. These files may contain sensitive configuration information...

Hardcoded credentials

SAP Download Manager 2.1.142 and earlier uses a hardcoded encryption key to protect stored data, which allows context-dependent attackers to obtain sensitive configuration information by leveraging knowledge of this key, aka SAP Security Note 2282338...

CVE-2016-3684: Undefined Security Weakness

SAP Download Manager 2.1.142 and earlier uses a hardcoded encryption key to protect stored data, which allows context-dependent attackers to obtain sensitive configuration information by leveraging knowledge of this key, aka SAP Security Note 2282338...

Format string

Siemens SIMATIC STEP 7 TIA Portal before 14 uses an improper format for managing TIA project files during version updates, which makes it easier for local users to obtain sensitive configuration information via unspecified vectors...

WIN-911 7.17.00 - Multiple Vulnerabilities

Exploit for windows platform in category local exploits Title: WIN-911 - Insecure File Permissions EoP CWE Class: CWE-276: Incorrect Default Permissions Date: 05/09/2016 Vendor: Win911 Product: WIN-911 Type: Alarm Notification Software Version: V7.17.00 Download URL: through Rockwell Automation...

CVE-2016-5849

CVE-2016-5849 affects Siemens SICAM PAS up to version 8.07, where an authenticated local attacker can obtain sensitive configuration information from the SICAM PAS database file if the database is in a stopped state. The issue is an information exposure vulnerability (not remote-exploit) requirin...

Citrix Endpoint Management (XenMobile) Server Support Bundle Overview

The following table has key information about Citrix Endpoint Management XenMobile Server Support Bundle. For additional information please review the following link. This includes: List of log files included in the bundle Log type Description of what is included in the log file Analytical value ...

Cross site request forgery (csrf)

Web Server in Apple OS X Server before 5.1 does not properly restrict access to .DSStore and .htaccess files, which allows remote attackers to obtain sensitive configuration information via an HTTP request...

CVE-2016-1776

CVE-2016-1776 affects Apple OS X Server before 5.1, in the Web Server component. The issue is an information disclosure where access to .DS_Store and .htaccess files is not properly restricted, allowing remote attackers to obtain sensitive configuration information via HTTP. Mitigation: upgrade t...

Design/Logic Flaw

IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 through 8.0.0.1 CF18, and 8.5.0 before CF08 improperly restricts resource access, which allows remote attackers to obtain sensitive information via unspecified vectors, as demonstrated b...

PT-2015-4119

Name of the Vulnerable Software and Affected Versions IBM WebSphere Portal versions 6.1.0 through 6.1.0.6 CF27 IBM WebSphere Portal versions 6.1.5 through 6.1.5.3 CF27 IBM WebSphere Portal versions 7.0.0 through 7.0.0.2 CF29 IBM WebSphere Portal versions 8.0.0 through 8.0.0.1 CF18 IBM WebSphere...

Information disclosure

The web interface in McAfee Advanced Threat Defense MATD before 3.4.4.63 allows remote authenticated users to obtain sensitive configuration information via unspecified vectors...