728 matches found
CVE-2014-4864
The NETGEAR ProSafe Plus Configuration Utility creates configuration backup files containing cleartext passwords, which might allow remote attackers to obtain sensitive information by reading a file...
CVE-2014-4864
CVE-2014-4864 affects the NETGEAR ProSafe Plus Configuration Utility. The issue is that configuration backup files created by the utility expose passwords in plaintext, enabling (where backup files are accessible) an attacker to obtain sensitive credentials. The linked sources indicate this affec...
PT-2014-6175
Name of the Vulnerable Software and Affected Versions NETGEAR ProSafe Plus Configuration Utility affected versions not specified Description The issue allows remote attackers to obtain sensitive information by reading a configuration backup file that contains cleartext passwords. Recommendations ...
CVE-2014-4864: Undefined Security Weakness
The NETGEAR ProSafe Plus Configuration Utility creates configuration backup files containing cleartext passwords, which might allow remote attackers to obtain sensitive information by reading a file...
SOL15564 - TLS vulnerability CVE-2014-3511
1 If you are planning to upgrade to BIG-IP APM 11.5.1 HF6 to mitigate this issue, you should instead upgrade to 11.5.1 HF7 to avoid an issue specific to BIG-IP APM. For more information, refer to SOL15914: The tmm process may restart and produce a core file after BIG-IP APM systems are upgraded...
SOL15532 - XSS vulnerability in echo.jsp CVE-2014-4023
Vulnerability Recommended Actions If the previous table lists a version in the Versions known to be not vulnerable column, you can eliminate this vulnerability by upgrading to the listed version. If the listed version is older than the version you are currently running, or if the table does not...
SOL15461 - OpenSSL vulnerability CVE-2011-4619
Recommended Action If the previous table lists a version in the Versions known to be not vulnerable column, you can eliminate this vulnerability by upgrading to the listed version. If the table does not list any version in the column, then no upgrade candidate currently exists. Note: SGC...
SOL15404 - OpenSSL vulnerability CVE-2009-3245
Recommended action You can eliminate this vulnerability by running a version listed in the Versions known to be not vulnerable column in the previous table. If the Versions known to be not vulnerable column does not list a version that is higher than the version you are running, then no upgrade...
SOL15406 - HTTP cookie vulnerability CVE-2004-0462
Vulnerability Recommended Actions If the previous table lists a version in the Versions known to be not vulnerable column, you can eliminate this vulnerability by upgrading to the listed version. If the table does not list any version in the column, then no upgrade candidate currently exists. To...
SOL15401 - OpenSSL vulnerability CVE-2012-2333
Recommended action You can eliminate this vulnerability by running a version listed in the Versions known to be not vulnerable column in the previous table. If the Versions known to be not vulnerable column does not list a version that is higher than the version you are running, then no upgrade...
CVE-2014-3959
Cross-site scripting XSS vulnerability in list.jsp in the Configuration utility in F5 BIG-IP LTM, AFM, Analytics, APM, ASM, GTM, and Link Controller 11.2.1 through 11.5.1, AAM 11.4.0 through 11.5.1 PEM 11.3.0 through 11.5.1, PSM 11.2.1 through 11.4.1, WebAccelerator and WOM 11.2.1 through 11.3.0,...
CVE-2014-3959
CVE-2014-3959 is an XSS vulnerability in list.jsp used by BIG-IP Configuration utilities. Concretes: affected products include BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, Enterprise Manager and related components; vulnerable across multiple versions (for example BIG-IP LTM, A...
PT-2014-5635
Name of the Vulnerable Software and Affected Versions F5 BIG-IP LTM, AFM, Analytics, APM, ASM, GTM, and Link Controller versions 11.2.1 through 11.5.1 F5 AAM versions 11.4.0 through 11.5.1 F5 PEM versions 11.3.0 through 11.5.1 F5 PSM versions 11.2.1 through 11.4.1 F5 WebAccelerator and WOM versio...
F5 Networks BIG-IQ Configuration Utility Login Page Detection
Binary data f5bigiqconfigutilitydetect.nbin...
[security bulletin] HPSBST02980 rev.1 - HP Array Configuration Utility, HP Array Diagnostics Utility, HP ProLiant Array Diagnostics and SmartSSD Wear Gauge Utility Running on Linux, Local Elevation of Privilege
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04187357 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04187357 Version: 1 HPSBST02980 rev....
Code injection
Unspecified vulnerability in HP Array Configuration Utility, Array Diagnostics Utility, ProLiant Array Diagnostics, and SmartSSD Wear Gauge Utility 9.40 and earlier allows local users to gain privileges via unknown vectors...
CVE-2013-6216
Unspecified vulnerability in HP Array Configuration Utility, Array Diagnostics Utility, ProLiant Array Diagnostics, and SmartSSD Wear Gauge Utility 9.40 and earlier allows local users to gain privileges via unknown vectors...
CVE-2013-6216
CVE-2013-6216 affects HP Array Configuration Utility, HP Array Diagnostics Utility, HP ProLiant Array Diagnostics, and SmartSSD Wear Gauge Utility running on Linux (version 9.40 and earlier). The vulnerability arises from insecure RPATH and SetUID/SetGID binaries that can allow local privilege es...
CVE-2013-6216: Undefined Security Weakness
Unspecified vulnerability in HP Array Configuration Utility, Array Diagnostics Utility, ProLiant Array Diagnostics, and SmartSSD Wear Gauge Utility 9.40 and earlier allows local users to gain privileges via unknown vectors...
PT-2014-3060
Name of the Vulnerable Software and Affected Versions HP Array Configuration Utility versions 9.40 and earlier HP Array Diagnostics Utility versions 9.40 and earlier HP ProLiant Array Diagnostics versions 9.40 and earlier HP SmartSSD Wear Gauge Utility versions 9.40 and earlier Description The...