WPN-XM Server Stack Multiple Vulnerabilities

WPN-XM Server Stack is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wpnxmserverstack:wpnxm"...

DB Mitarbeiter - External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application DB Mitarbeiter published at the 'play' market has multiple vulnerabilities...

DB International - External URLs, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application DB International published at the 'play' market has multiple vulnerabilities...

DB Busradar NRW - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application DB Busradar NRW published at the 'play' market has multiple vulnerabilities...

DB Mitfahrer - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application DB Mitfahrer published at the 'play' market has multiple vulnerabilities...

DB Netze - Base64 encoded String, Customized SSL, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application DB Netze published at the 'play' market has multiple vulnerabilities...

FreeBSD : bind -- denial of service vulnerability (cba246d2-f483-11e5-92ce-002590263bf5)

ISC reports : A problem parsing resource record signatures for DNAME resource records can lead to an assertion failure in resolver.c or db.c %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database :...

Null pointer dereference

The processdbargs function in plugins/kdb/ldap/libkdbldap/ldapprincipal2.c in the LDAP KDB module in kadmind in MIT Kerberos 5 aka krb5 through 1.13.4 and 1.14.x through 1.14.1 mishandles the DB argument, which allows remote authenticated users to cause a denial of service NULL pointer dereferenc...

PT-2016-5373

Name of the Vulnerable Software and Affected Versions MIT Kerberos 5 krb5 versions 1.13.4 and earlier MIT Kerberos 5 krb5 versions 1.14.x through 1.14.1 Description The issue is related to the process db args function in the LDAP KDB module, which does not handle the DB argument properly. This...

PT-2016-5032

Name of the Vulnerable Software and Affected Versions Moodle versions prior to 2.6.11 Moodle versions 2.7.x before 2.7.13 Moodle versions 2.8.x before 2.8.11 Moodle versions 2.9.x before 2.9.5 Moodle versions 3.0.x before 3.0.3 Description The issue allows remote attackers to inject arbitrary web...

OSIsoft PI SQL Data Access Server Input Validation Vulnerability

OVERVIEW OSIsoft has identified an input validation vulnerability in its own PI SQL Data Access Server. OSIsoft has produced a new version of PI SQL Data Access Server OLE DB 2016 1.5 to address this issue. This vulnerability could be exploited remotely. AFFECTED PRODUCTS Affected versions of PI...

AKIPS Network Monitor OS Command Injection

AKIPS Network Monitor is prone to an OS Command Injection SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:akips:networkmonitor";...

WordPress DZS Videogallery Plugin Multiple Vulnerabilities

WordPress DZS Videogallery Plugin is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Netwrix Auditor 7.1.322.0 ActiveX (sourceFile) Stack Buffer Overflow Vulnerability

Summary Netwrix Auditor is an IT audit software that maximizes visibility of IT infrastructure changes and data access. The product provides actionable audit data about who changed what, when and where and who has access to what. Description The application suffers from a stack-based buffer...

Schneider Electric StruxureWare Building Operation Automation Server msh bypass

Added: 03/14/2016 CVE: CVE-2016-2278 Background The Schneider Electric StruxureWare Building Operation software suite provides integrated monitoring, control, and management of energy, HVAC, lighting and fire safety. The Automation Server is a building automation system for small and medium-sized...

Schneider Electric StruxureWare Building Operation Automation Server msh bypass

Added: 03/14/2016 CVE: CVE-2016-2278 Background The Schneider Electric StruxureWare Building Operation software suite provides integrated monitoring, control, and management of energy, HVAC, lighting and fire safety. The Automation Server is a building automation system for small and medium-sized...

Amazon Linux: Security Advisory (ALAS-2016-665)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VMware ESX Multiple Vulnerabilities (VMSA-2010-0015) (remote check)

The remote VMware ESX host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several third-party components and libraries : - Berkeley DB NSS module - cURL / libcURL - GnuTLS - Network Security Services...

Centreon web interface command injection

Added: 02/29/2016 Background Centreon is a suite of enterprise monitoring products written in PHP. Problem A command injection vulnerability in the Centreon web interface allows remote attackers to execute arbitrary commands by sending a specially crafted useralias parameter in a POST request. Th...

Centreon web interface command injection

Added: 02/29/2016 Background Centreon is a suite of enterprise monitoring products written in PHP. Problem A command injection vulnerability in the Centreon web interface allows remote attackers to execute arbitrary commands by sending a specially crafted useralias parameter in a POST request. Th...