Lucene search
+L

6801 matches found

Positive Technologies
Positive Technologies
•added 2012/03/14 12:00 a.m.•5 views

PT-2012-2326

Name of the Vulnerable Software and Affected Versions HP Data Protector Express versions 5.0.00 before build 59287 HP Data Protector Express versions 6.0.00 before build 11974 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service. The exact vectors o...

10CVSS0.10322EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/03/14 12:00 a.m.•5 views

CVE-2012-0121: Undefined Security Weakness

Unspecified vulnerability in HP Data Protector Express aka DPX 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1392...

10CVSS6.5AI score0.10322EPSS
SaveExploits4References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/03/14 12:00 a.m.•4 views

CVE-2012-0123: Undefined Security Weakness

Unspecified vulnerability in HP Data Protector Express aka DPX 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1498...

10CVSS6.5AI score0.10235EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/03/14 12:00 a.m.•4 views

CVE-2012-0124: Undefined Security Weakness

Unspecified vulnerability in HP Data Protector Express aka DPX 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors...

10CVSS6.5AI score0.62305EPSS
SaveExploits4References1
attackerkb
attackerkb
•added 2012/03/14 12:00 a.m.•20 views

HP Data Protector Express 6.0.00.11974 dpwintdb.exe Buffer Overflow

Unspecified vulnerability in HP Data Protector Express aka DPX 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1498. Recent assessments: wchen-r7 at September 12, 2019 6:07pm UT...

10CVSS0.4AI score0.62305EPSS
SaveExploits8References1
Positive Technologies
Positive Technologies
•added 2012/03/14 12:00 a.m.•5 views

PT-2012-2325

Name of the Vulnerable Software and Affected Versions HP Data Protector Express versions 5.0.00 before build 59287 HP Data Protector Express versions 6.0.00 before build 11974 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service. The vulnerability i...

10CVSS0.10322EPSS
SaveExploits4References3
Positive Technologies
Positive Technologies
•added 2012/03/14 12:00 a.m.•4 views

PT-2012-2328

Name of the Vulnerable Software and Affected Versions HP Data Protector Express versions 5.0.00 before build 59287 HP Data Protector Express versions 6.0.00 before build 11974 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service. The exact vectors...

10CVSS0.62305EPSS
SaveExploits4References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/03/14 12:00 a.m.•5 views

CVE-2012-0122: Undefined Security Weakness

Unspecified vulnerability in HP Data Protector Express aka DPX 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1393...

10CVSS6.5AI score0.10322EPSS
SaveExploits0References1
CISA
CISA
•added 2012/03/08 12:00 a.m.•28 views

Microsoft Releases March Security Bulletin

Microsoft has released updates to address vulnerabilities in Microsoft Windows, Visual Studio, and Express Design as part of the Microsoft Security Bulletin Summary for March 2012. These vulnerabilities may allow an attacker to execute arbitrary code, cause a denial-of-service condition, or opera...

7.4AI score
SaveExploits0References2
Prion
Prion
•added 2012/03/06 4:18 a.m.•22 views

Stack overflow

Stack-based buffer overflow in the RunAndUploadFile method in the Isig.isigCtl.1 ActiveX control in IBM Tivoli Provisioning Manager Express for Software Distribution 4.1.1 allows remote attackers to execute arbitrary code via vectors related to an Asset Information file...

9.3CVSS8.4AI score0.37437EPSS
SaveExploits8References2Affected Software1
CVE
CVE
•added 2012/03/06 2:00 a.m.•172 views

CVE-2012-0199

CVE-2012-0199 affects IBM Tivoli Provisioning Manager Express for Software Distribution 4.1.1, with multiple SQL injection paths in the web interface (notably SoapServlet’s Printer.getPrinterAgentKey, register.do’s User.updateUserValue, logon.do’s User.isExistingUser, CallHomeExec’s Asset.getHWKe...

7.5CVSS6.6AI score0.01757EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/03/06 12:00 a.m.•6 views

CVE-2012-0199: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in IBM Tivoli Provisioning Manager Express for Software Distribution 4.1.1 allow remote attackers to execute arbitrary SQL commands via 1 a SOAP message to the Printer.getPrinterAgentKey function in the SoapServlet servlet, 2 the User.updateUserValue functio...

7.5CVSS6.4AI score0.01757EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/03/06 12:00 a.m.•5 views

CVE-2012-0198: Undefined Security Weakness

Stack-based buffer overflow in the RunAndUploadFile method in the Isig.isigCtl.1 ActiveX control in IBM Tivoli Provisioning Manager Express for Software Distribution 4.1.1 allows remote attackers to execute arbitrary code via vectors related to an Asset Information file...

9.3CVSS6.9AI score0.37437EPSS
SaveExploits8References1
Positive Technologies
Positive Technologies
•added 2012/03/06 12:00 a.m.•5 views

PT-2012-2395

Name of the Vulnerable Software and Affected Versions IBM Tivoli Provisioning Manager Express for Software Distribution version 4.1.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved through various means, including: - a SOAP message to the...

7.5CVSS0.01757EPSS
SaveExploits1References3
Zero Day Initiative
Zero Day Initiative
•added 2012/03/01 12:00 a.m.•41 views

IBM Tivoli Provisioning Manager Express for Software Distribution 4.1.1 Multiple Remote Code Execution Vulnerabilities

IBM Tivoli Provisioning Manager soapServlet SOAP Message Printer.getPrinterAgentKey SQL Injection Vulnerability This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Tivoli Provisioning Manager Express for Software Distribution. Authentication is...

3.1AI score
SaveExploits0References1
Metasploit
Metasploit
•added 2012/03/01 12:00 a.m.•31 views

IBM Tivoli Provisioning Manager Express for Software Distribution Isig.isigCtl.1 ActiveX RunAndUploadFile() Method Overflow

This module exploits a buffer overflow vulnerability in the Isig.isigCtl.1 ActiveX installed with IBM Tivoli Provisioning Manager Express for Software Distribution 4.1.1. The vulnerability is found in the "RunAndUploadFile" method where the "OtherFields" parameter with user controlled data is use...

9.3CVSS5.7AI score0.37437EPSS
SaveExploits8
Positive Technologies
Positive Technologies
•added 2012/03/01 12:00 a.m.•7 views

PT-2012-2394

Name of the Vulnerable Software and Affected Versions IBM Tivoli Provisioning Manager Express for Software Distribution version 4.1.1 Description The issue is related to a stack-based buffer overflow in the RunAndUploadFile method of the Isig.isigCtl.1 ActiveX control. This allows remote attacker...

9.3CVSS0.37437EPSS
SaveExploits8References6
CISA
CISA
•added 2012/02/29 12:00 a.m.•45 views

Cisco Releases Multiple Security Advisories

Cisco has released six security advisories to address vulnerabilities affecting the following products: Cius Wifi devices running Cius Software Version 9.21 SR1 and prior Cisco Unified Communications Manager Software versions 6.x, 7.x, and 8.x Cisco Business Edition 3000, 5000, and 6000 Cisco Uni...

7.7AI score
SaveExploits0References6
NVD
NVD
•added 2012/01/18 10:55 p.m.•30 views

CVE-2012-0097

Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect confidentiality via unknown vectors related to ksh93 Shell...

2.1CVSS5.3AI score0.00323EPSS
SaveExploits0References3
Prion
Prion
•added 2012/01/18 10:55 p.m.•29 views

Design/Logic Flaw

Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect confidentiality via unknown vectors related to ksh93 Shell...

2.1CVSS5.8AI score0.00323EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder