233 matches found
CVE-2010-3490
CVE-2010-3490 affects FreePBX
Novell Groupwise 8.0 Webaccess - Multiple Vulnerabilities
Novell Groupwise 8.0 Webaccess - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/35066/info Novell GroupWise WebAccess is prone to multiple security vulnerabilities. An attacker may leverage these issues to bypass certain security restrictions or conduct cross-site scripting...
[SA20431] TIBCO Hawk "tibhawkhma" Privilege Escalation Vulnerability
---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...
TIBCO Hawk Monitoring Agent vulnerable to buffer overflow via the configuration interface
Overview A vulnerability in the TIBCO Hawk Monitoring Agent configuration interface may allow a local attacker to execute arbitrary code with elevated privileges. Description TIBCO Hawk is a tool for monitoring and managing distributed applications and systems throughout an enterprise. A buffer...
Cisco VG248 login password is blank
The remote host is a Cisco VG248 with a blank password. SPDX-FileCopyrightText: 2005 Rick McCloskey Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only Cisco VG248 with a blank password nas...
MERCUR Mailserver buffer overflow
Buffer overflow in configuration interface TCP/32000 access verification. Multiple overflows in IMAP, POP3, SNTP protocol...
Cisco VG248 Unpassworded Account
The remote host is a Cisco VG248 with a blank password. The Cisco VG248 does not have a password set and allows direct access to the configuration interface. An attacker could telnet to the Cisco unit and reconfigure it to lock the owner out as well as completely disable the phone system. Cisco...
SureCom EP-9510AX/EP-4504AX Network Device - Malformed Web Authorisation Request Denial of Service (1)
source: https://www.securityfocus.com/bid/9795/info An issue in the handling of specific web requests by SureCom network devices has been identified. By placing a malformed request to the web configuration interface, it is possible for an attacker to deny service to legitimate users of a vulnerab...
SureCom EP-9510AX/EP-4504AX Network Device - Malformed Web Authorisation Request Denial of Service (2)
// source: https://www.securityfocus.com/bid/9795/info An issue in the handling of specific web requests by SureCom network devices has been identified. By placing a malformed request to the web configuration interface, it is possible for an attacker to deny service to legitimate users of a...
Abyss WebServer Brute Force Vulnerability
Abyss WebServer Brute Force Vulnerability Package: Abyss WebServer Vendor Web Site: http://www.aprelium.com Versions: All versions = v1.1.2 Platforms: Linux, Windows Local: No Remote: Yes Fix Available: Nofix in progress Vendor Contacted: Sunday, February 09, 2003 6:12 PM Advisory Author: thomas...
Phenoelit Advisory 0815 ++ // Xedia
Phenoelit Advisory wir-haben-auch-mal-was-gefunden 0815 +++ Authors FX [email protected] kim0 [email protected] Phenoelit Group http://www.phenoelit.de Advisory http://www.phenoelit.de/stuff/LucentXedia.txt Affected Products Lucent Access Point IP Services Router Formerly known as Xedia Router Luce...
Cisco Security Advisory: ATA-186 Password Disclosure Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: ATA-186 Password Disclosure Vulnerability Revision 1.0: INTERIM For Public Release 2002 May 23 16:00 GMT - ------------------------------------------------------------------------------- Contents ======== Summary Affected Products Detail...
CVE-2000-0945
The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands without authentication when the enable password is not set, via a URL containing the /exec/ directory...