431 matches found
Naming requirement for correct functioning of the "Guest to Agent Relationship" feature
Challenge To make the VM and OpsMgr Agent integration work properly, it is necessary that VMs discovered by the VMGUEST contains OpsMgr Agent discovery have an identical display name and NETBIOS name. Cause If the VMware display name is different from the NETBIOS name, the VM will have two source...
Quest InTrust 10.4.x Annotation Objects ActiveX Control AnnotateX.dll Uninitialized Pointer Remote Code Execution
Quest InTrust 10.4.x Annotation Objects ActiveX Control AnnotateX.dll Uninitialized Pointer Remote Code Execution homepage: http://www.quest.com/intrust/ description: "InTrust securely collects, stores, reports and alerts on event log data from Windows, Unix and Linux systems, helping you comply...
Non Compliant Scada Modbus Comm Event Log Response
...
Failed Accessing Windows Event Log
Challenge SCOM reports a Warning: "Failed Accessing Windows Event Log...". and in the State Change Events description you can find: "The Windows Event Log Provider was unable to open the nworksEventLog event log on computer 'nodexxx' for reading. The provider will retry opening the log every 30...
[SECURITY] Fedora 15 Update: ipmitool-1.8.11-7.fc15
This package contains a utility for interfacing with devices that support the Intelligent Platform Management Interface specification. IPMI is an open standard for machine health, inventory, and remote power control. This utility can communicate with IPMI-enabled devices through either a kernel...
Design/Logic Flaw
Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 uses world-writable permissions for exported report files, which allows local users to change or delete log data by modifying a file, a different vulnerability than CVE-2011-0770...
CVE-2011-2779
Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 uses world-writable permissions for exported report files, which allows local users to change or delete log data by modifying a file, a different vulnerability than CVE-2011-0770...
CVE-2011-2779
Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 uses world-writable permissions for exported report files, which allows local users to change or delete log data by modifying a file, a different vulnerability than CVE-2011-0770...
CVE-2011-0770
Cross-site scripting XSS vulnerability in Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 allows remote attackers to inject arbitrary web script or HTML via the Windows XP variable in a file...
Cross site scripting
Cross-site scripting XSS vulnerability in Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 allows remote attackers to inject arbitrary web script or HTML via the Windows XP variable in a file...
CVE-2011-0770
Cross-site scripting XSS vulnerability in Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 allows remote attackers to inject arbitrary web script or HTML via the Windows XP variable in a file...
Symantec LiveUpdate Administrator控制请求伪造漏洞
CVE ID: CVE-2011-0545 Symantecs LiveUpdate Administrator可对内容提供基础架构支持。 Symantec LiveUpdate Administrator在实现上存在控制请求伪造漏洞，远程攻击者可利用此漏洞以管理员身份执行HTML或脚本代码。 此漏洞源于登录界面未能正确过滤或验证外部输入中的变量。在向受影响系统的事件日志提交了恶意条目后，授权管理员必须登录到管理界面GUI并访问事件登录页面触发漏洞。 Symantec LiveUpdate Administrator 2.2.2.9 厂商补丁： Symantec --------...
Symantec LiveUpdate Administrator < 2.3 CSRF (SYM11-005)
The version of LiveUpdate Administrator running on the remote host is earlier than 2.3. Such versions have a cross-site request forgery CSRF vulnerability. Failed login attempts are logged and viewable from the web console. Usernames from these failed attempts are not sanitized before they are...
CVE-2011-0267
creationtimestamp| type| source ---|---|--- 2011-03-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17038 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/hpnnmnnmrptconfigschdparams.rb 2025-02-06...
CVE-2010-4344
creationtimestamp| type| source ---|---|--- 2010-12-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15725 2010-12-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16925 2018-05-29 15:50:33+00:00| seen|...
IBM TSM FastBack Server _SendToLog Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Tivoli FastBack Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within FastBackServer.exe which listens by default on tcp port 11406. The issue is...
MailEnable POP3 Service PASS Command Buffer Overflow (CVE-2006-6605)
MailEnable is an email server suite for the Microsoft Windows platform. The product supports various email transfer protocols such as SMTP, POP3 and IMAP. The MailEnable protocol handlers are installed as individual services on the system, called Connectors. There exists a stack-based buffer...
IBM BladeCenter Advanced Management Module Multiple vulnerabilities
Louhi Networks Information Security Research Security Advisory Advisory: IBM BladeCenter Advanced Management Module Multiple vulnerabilities XSS type 2 & 1, CSRF, Information Disclosure Release Date: 2009-04-09 Last Modified: 2009-04-09 Authors: Henri Lindberg [email protected], CISA Device...
IBM WebSphere Message Broker本地信息泄露漏洞
BUGTRAQ ID: 33819 CVECAN ID: CVE-2009-0503 WebSphere Message Broker 为增强面向服务的架构交付高级企业服务总线（ESB），为基于标准和非标准的应用程序及服务提供了连通性和通用数据转换。 WebSphere Message Broker在处理JDBC错误时会将数据库连接口令写入到事件日志和系统日志中，本地用户可以通过读取这些日志获得敏感信息。 IBM WebSphere Message Broker 6.1 厂商补丁： IBM --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
Securify bulletin: Microsoft Active Directory Denial-of-service
SECURIFY Bulletin: Active Directory Denial-of-service ===================================================== I. SUMMARY: SECURIFY has discovered a denial-of-service vulnerability in Microsoft Active Directory AD in which a domain user sending a specially-crafted LDAP request causes the Active...