114 matches found
CVE-2016-4502
The CVE-2016-4502 entry affects Environmental Systems Corporation (ESC) 8832 Data Controller versions 3.02 and earlier. The vulnerability allows remote attackers to bypass authentication and perform unauthorized administrative operations by abusing a modified parameter, enabling privilege escalat...
CVE-2016-4502
Environmental Systems Corporation ESC 8832 Data Controller 3.02 and earlier allows remote attackers to bypass intended access restrictions and execute arbitrary functions via a modified parameter...
PT-2016-5985
Name of the Vulnerable Software and Affected Versions Environmental Systems Corporation ESC 8832 Data Controller versions 3.02 and earlier Description The issue allows remote attackers to bypass intended access restrictions and execute arbitrary functions via a modified parameter. Recommendations...
CVE-2016-4501: Improper Access Control
Environmental Systems Corporation ESC 8832 Data Controller 3.02 and earlier mishandles sessions, which allows remote attackers to bypass authentication and make arbitrary configuration changes via unspecified vectors...
CVE-2016-4502: Improper Access Control
Environmental Systems Corporation ESC 8832 Data Controller 3.02 and earlier allows remote attackers to bypass intended access restrictions and execute arbitrary functions via a modified parameter...
PT-2016-5984
Name of the Vulnerable Software and Affected Versions Environmental Systems Corporation ESC 8832 Data Controller versions 3.02 and earlier Description The issue allows remote attackers to bypass authentication and make arbitrary configuration changes. Recommendations For versions 3.02 and earlier...
ESC 8832 Unauthorized Operation Vulnerability
ESC 8832 is a Web-based SCADA system from ESC Corporation. A security vulnerability exists in the ESC 8832 version 3.02 and prior. A remote attacker could exploit the vulnerability to make unauthorized changes to the configuration...
ESC 8832 Unauthorized Access Vulnerability
ESC 8832 is a Web-based SCADA system from ESC Corporation. A security vulnerability exists in ESC 8832 version 3.02 and earlier. A remote attacker can exploit this vulnerability to gain unauthorized access by performing a brute force attack on the parameters...
Environmental Systems Corporation Data Controllers Vulnerabilities (Update B)
OVERVIEW This updated advisory is a follow-up to the updated advisory titled ICSA-16-147-01A Environmental Systems Corporation Data Controllers Vulnerabilities that was published June 2, 2016, on the NCCIC/ICS-CERT web site. Independent researcher Maxim Rupp has identified data controller...
ESC Pocket Guidelines - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application ESC Pocket Guidelines published at the 'play' market has multiple vulnerabilities...
Environmental Systems Corporation Data Controllers Vulnerabilities
OVERVIEW This updated advisory is a follow-up to the updated advisory titled ICSA-16-147-01A Environmental Systems Corporation Data Controllers Vulnerabilities that was published June 2, 2016, on the NCCIC/ICS-CERT web site. Independent researcher Maxim Rupp has identified data controller...
Oracle: Security Advisory (ELSA-2010-0501)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
WordPress All In One WP Security & Firewall 3.9.0 SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title : WordPress All In One WP Security & Firewall 3.9.0 SQL Injection Vulnerability Exploit Author : Claudio Viviani Vendor Homepage : https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/ Software Link :...
xpdf / poppler ESC sequences injection
Terminal control ESC sequences injection...
CentOS Update for devhelp CESA-2010:0501 centos5 i386
Check for the Version of devhelp OpenVAS Vulnerability Test CentOS Update for devhelp CESA-2010:0501 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
ProFTPD security vulnerabilities
Buffer overflow on TELNETIAC ESC-sequence parsing. Directory traversal by creating symlinks with modsitemisc module...
VTE control characters vulnerability
Control characters are not checked when setting window or icon title, making it possible to insert terminal ESC-sequences...
bash terminal characters injection
It's possible to inject ESC-sequences into ls command output...
RHEL 5 : kernel (RHSA-2009:1222)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:1222 advisory. - kernel: uninit op in SOCKOPSWRAP leads to privesc CVE-2009-2692 - kernel: udp socket NULL ptr dereference CVE-2009-2698 Note that Nessus h...