Lucene search
+L

57 matches found

Zero Day Initiative
Zero Day Initiative
added 2020/04/08 12:0 a.m.25 views

Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech WebAccess/NMS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of calls to the CheckFwtaskname method of the DBUtil clas...

7.5CVSS2.5AI score0.01263EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/04/08 12:0 a.m.17 views

Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech WebAccess/NMS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of calls to the getTopogroupIndex method of the DBUtil...

7.5CVSS2.2AI score0.01263EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/04/08 12:0 a.m.21 views

Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech WebAccess/NMS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of calls to the CheckManagedid method of the DBUtil class...

7.5CVSS2.6AI score0.01263EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/04/08 12:0 a.m.21 views

Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech WebAccess/NMS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of calls to the getDeviceOidStrT method of the DBUtil...

7.5CVSS2.3AI score0.01263EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/04/08 12:0 a.m.21 views

Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech WebAccess/NMS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of calls to the CheckEmsnamemodify method of the DBUtil...

7.5CVSS2.9AI score0.01263EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/04/08 12:0 a.m.18 views

Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech WebAccess/NMS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of calls to the CheckEmsname method of the DBUtil class...

7.5CVSS2.6AI score0.01263EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/04/08 12:0 a.m.21 views

Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech WebAccess/NMS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of calls to the getSeverityIndex method of the DBUtil...

7.5CVSS1.1AI score0.01263EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/04/08 12:0 a.m.15 views

Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech WebAccess/NMS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of calls to the getDeviceicon method of the DBUtil class...

7.5CVSS2.9AI score0.01263EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/04/08 12:0 a.m.18 views

Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech WebAccess/NMS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of calls to the updateAckedEventlogByID method of the...

7.5CVSS2.5AI score0.01263EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/04/08 12:0 a.m.14 views

Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech WebAccess/NMS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of calls to the CheckManagedip method of the DBUtil class...

7.5CVSS2.2AI score0.01263EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/04/08 12:0 a.m.22 views

Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech WebAccess/NMS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of calls to the CheckCfgtasknamemodify method of the DBUt...

7.5CVSS2.9AI score0.01263EPSS
SaveExploits0References1
Veracode
Veracode
added 2018/05/28 8:0 a.m.33 views

Integer Overflow

krb5 is vulnerable to integer overflow. Storing 32-bit variable data into the 16-bit variable dbentry-nkeydata in kadmin/dbutil/dump leads to integer overflow...

7.5CVSS7.5AI score0.02067EPSS
SaveExploits0References4Affected Software1
Prion
Prion
added 2018/01/16 9:29 a.m.20 views

Design/Logic Flaw

An issue was discovered in MIT Kerberos 5 aka krb5 through 1.16. There is a variable "dbentry-nkeydata" in kadmin/dbutil/dump.c that can store 16-bit data but unknowingly the developer has assigned a "u4" variable to it, which is for 32-bit data. An attacker can use this vulnerability to affect...

5CVSS7.4AI score0.02067EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2015/05/07 12:0 a.m.3 views

ManageEngine Applications Manager DBUtil port Remote Code Execution Vulnerability

ZOHO ManageEngine Applications Manager is a set of application performance monitoring software from ZOHO. The software allows remote monitoring and management of different business systems, applications and network services e.g. servers, operating systems, etc.. A remote code execution...

8.9AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2015/05/06 12:0 a.m.30 views

ManageEngine Applications Manager DBUtil port SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of ManageEngine Applications Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DBUtil class. The issue lies in the failure to sanitize...

10CVSS7.9AI score
SaveExploits0
Cvelist
Cvelist
added 2000/10/13 4:0 a.m.26 views

CVE-2000-0616

Vulnerability in HP TurboIMAGE DBUTIL allows local users to gain additional privileges via DBUTIL.PUB.SYS...

6.5AI score0.00562EPSS
SaveExploits1References2
CVE
CVE
added 2000/10/13 4:0 a.m.44 views

CVE-2000-0616

This CVE concerns a vulnerability in HP TurboIMAGE DBUTIL that allows local users to gain additional privileges via DBUTIL.PUB.SYS. Affected software: HP TurboIMAGE DBUTIL; vulnerable component/file: DBUTIL.PUB.SYS. Impact: local privilege escalation as described (partial confidentiality/integrit...

4.6CVSS6.9AI score0.00562EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder