550 matches found
CVE-2016-3650
Symantec Endpoint Protection Manager SEPM 12.1 before RU6 MP5 allows remote authenticated users to discover credentials via a brute-force attack...
CVE-2016-3707
The icmpchecksysrq function in net/ipv4/icmp.c in the kernel.org projects/rt patches for the Linux kernel, as used in the kernel-rt package before 3.10.0-327.22.1 in Red Hat Enterprise Linux for Real Time 7 and other products, allows remote attackers to execute SysRq commands via crafted ICMP Ech...
[SECURITY] Fedora 23 Update: openslp-2.0.0-8.fc23
Service Location Protocol is an IETF standards track protocol that provides a framework to allow networking applications to discover the existence, location, and configuration of networked services in enterprise networks. OpenSLP is an open source implementation of the SLPv2 protocol as defined b...
CVE-2016-2311
The CVE-2016-2311 vulnerability affects Black Box AlertWerks ServSensor family devices (including ServSensor, ServSensor Junior, ServSensor Junior with PoE, and ServSensor Contact) with firmware before SP473. The issue allows remote authenticated users to obtain administrator and user passwords v...
CVE-2016-2293
The AXM-NET module in Accuenergy Acuvim II NET Firmware 3.08 and Acuvim IIR NET Firmware 3.08 allows remote attackers to discover settings via a direct request to an unspecified URL...
CVE-2016-2293
CVE-2016-2293 affects the AXM-NET module in Accuenergy Acuvim II NET Firmware 3.08 and Acuvim IIR NET Firmware 3.08. Root cause: authentication bypass (CWE-592) allows accessing web-server settings without credentials via a specific URL. Impact: remote attacker could discover and modify network s...
Webutler CMS 3.2 - Cross-Site Request Forgery
Webutler CMS 3.2 - Cross-Site Request Forgery Dear OffSec, Here is the vulnerability detail as I submitted Exploit Title: Webutler CMS Cross-Site Request Forgery Date: 18 April 2016 Exploit Author: Keerati T. Post Vendor Homepage: http://webutler.de/en Software Link:...
Discover Mobile - BSD license, Customized SSL, GPL license vulnerabilities
HackApp vulnerability scanner discovered that application Discover Mobile published at the 'play' market has multiple vulnerabilities...
App Mahal: Discover Great Apps - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application App Mahal: Discover Great Apps published at the 'play' market has multiple vulnerabilities...
DJI+ Discover - DJI New APP - Dangerous filesystem permissions, Exported ContentProvider, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application DJI+ Discover - DJI New APP published at the 'play' market has multiple vulnerabilities...
CVE-2015-4996
IBM Rational ClearQuest 7.1.x and 8.0.0.x before 8.0.0.17 and 8.0.1.x before 8.0.1.10 allows local users to spoof database servers and discover credentials via unspecified vectors...
Design/Logic Flaw
IBM Rational ClearQuest 7.1.x and 8.0.0.x before 8.0.0.17 and 8.0.1.x before 8.0.1.10 allows local users to spoof database servers and discover credentials via unspecified vectors...
Code injection
The portal in IBM Tealeaf Customer Experience before 8.7.1.8818, 8.8 before 8.8.0.9026, 9.0.0, 9.0.0A, 9.0.1 before 9.0.1.1083, 9.0.1A before 9.0.1.5073, 9.0.2 before 9.0.2.1095, and 9.0.2A before 9.0.2.5144 allows local users to discover credentials by leveraging privileges during an unspecified...
CVE-2015-4990
The portal in IBM Tealeaf Customer Experience before 8.7.1.8818, 8.8 before 8.8.0.9026, 9.0.0, 9.0.0A, 9.0.1 before 9.0.1.1083, 9.0.1A before 9.0.1.5073, 9.0.2 before 9.0.2.1095, and 9.0.2A before 9.0.2.5144 allows local users to discover credentials by leveraging privileges during an unspecified...
PT-2016-3647
Name of the Vulnerable Software and Affected Versions IBM Rational ClearQuest versions 7.1.x through 8.0.0.x before 8.0.0.17 IBM Rational ClearQuest versions 8.0.1.x before 8.0.1.10 Description The issue allows local users to spoof database servers and discover credentials via unspecified vectors...
PT-2016-3645
Name of the Vulnerable Software and Affected Versions IBM Tealeaf Customer Experience versions prior to 8.7.1.8818 IBM Tealeaf Customer Experience versions 8.8 prior to 8.8.0.9026 IBM Tealeaf Customer Experience version 9.0.0 IBM Tealeaf Customer Experience version 9.0.0A IBM Tealeaf Customer...
invites.discover-websites.com XSS vulnerability
Vulnerable URL: http://invites.discover-websites.com/unsinviter.jsp?email=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...
VuFind 1.0 Cross Site Scripting
VuFind 1.0 Web Application Reflected XSS Cross-site Scripting 0-Day Bug Security Issue Exploit Title: VuFind Results? &lookfor parameter Reflected XSS Web Security Vulnerability Product: VuFind Vendor: VuFind Vulnerable Versions: 1.0 Tested Version: 1.0 Advisory Publication: September 20, 2015...
CVE-2015-4519
Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow user-assisted remote attackers to bypass intended access restrictions and discover a redirect's target URL via crafted JavaScript code that executes after a drag-and-drop action of an image into a TEXTBOX element...
