CVE-2016-3155

Siemens APOGEE Insight uses weak permissions for the application folder, which allows local users to obtain sensitive information or modify data via unspecified vectors...

CVE-2016-3155

Siemens APOGEE Insight uses weak permissions for the application folder, which allows local users to obtain sensitive information or modify data via unspecified vectors...

CVE-2016-3155

Summary: CVE-2016-3155 affects Siemens APOGEE Insight, where the application folder has weak default permissions. This could let an authenticated local user view or modify APOGEE Insight data via unspecified vectors. The vulnerability is not remote-exploitable; exploitation requires OS-level acce...

CVE-2016-3155: Exposure of Sensitive Information to an Unauthorized Actor

Siemens APOGEE Insight uses weak permissions for the application folder, which allows local users to obtain sensitive information or modify data via unspecified vectors...

PT-2016-5387

Name of the Vulnerable Software and Affected Versions Siemens APOGEE Insight affected versions not specified Description The issue concerns weak permissions for the application folder in Siemens APOGEE Insight, allowing local users to access sensitive information or modify data through unspecifie...

DTE Energy Insight application for Android information disclosure vulnerability

The DTE Energy Insight application for Android is DTE Energy's suite of Android-based applications that enable DTE Energy customers to track their energy usage. A security vulnerability exists in the REST API of the DTE Energy Insight application for Android prior to version 1.7.8. The...

CVE-2016-1562

The REST API in the DTE Energy Insight application before 1.7.8 for Android allows remote authenticated users to obtain unspecified customer information via a SQL expression in the filter parameter...

CVE-2016-1562

The REST API in the DTE Energy Insight application before 1.7.8 for Android allows remote authenticated users to obtain unspecified customer information via a SQL expression in the filter parameter...

Design/Logic Flaw

The REST API in the DTE Energy Insight application before 1.7.8 for Android allows remote authenticated users to obtain unspecified customer information via a SQL expression in the filter parameter...

CVE-2016-1562

The REST API in the DTE Energy Insight application before 1.7.8 for Android allows remote authenticated users to obtain unspecified customer information via a SQL expression in the filter parameter...

CVE-2016-1562

The CVE-2016-1562 issue affects the DTE Energy Insight Android app’s REST API prior to version 1.7.8. An authenticated remote user could obtain limited customer data by manipulating a SQL expression in the filter parameter. The root cause is exposure via the filter parameter in the REST API, lead...

CVE-2016-1562: Exposure of Sensitive Information to an Unauthorized Actor

The REST API in the DTE Energy Insight application before 1.7.8 for Android allows remote authenticated users to obtain unspecified customer information via a SQL expression in the filter parameter...

PT-2016-4860

Name of the Vulnerable Software and Affected Versions DTE Energy Insight application versions prior to 1.7.8 Description The issue concerns the REST API in the DTE Energy Insight application, where remote authenticated users can obtain unspecified customer information. This is achieved by using a...

CVE-2015-6858

HP Insight Control server provisioning before 7.5.0 RabbitMQ allows remote attackers to obtain sensitive information via unspecified vectors...

Design/Logic Flaw

HP Insight Control server provisioning before 7.5.0 RabbitMQ allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2015-6858

HP Insight Control Server Provisioning (HP) is affected by CVE-2015-6858 due to a vulnerability in the RabbitMQ component used by the server provisioning feature prior to version 7.5.0. The issue enables remote attackers to obtain sensitive information via unspecified vectors. The provided docume...

CVE-2015-6858: Exposure of Sensitive Information to an Unauthorized Actor

HP Insight Control server provisioning before 7.5.0 RabbitMQ allows remote attackers to obtain sensitive information via unspecified vectors...

PT-2016-3726

Name of the Vulnerable Software and Affected Versions HP Insight Control server provisioning versions prior to 7.5.0 Description The issue allows remote attackers to obtain sensitive information via unspecified vectors. Recommendations For versions prior to 7.5.0, update to version 7.5.0 or later...

HP Insight Control Server Provisioning Information Disclosure Vulnerability

HP Insight Control Server Provisioning is a set of server management tools. The tool supports managing server health, deploying and quickly migrating servers, and more. A security vulnerability exists in HP Insight Control Server Provisioning, which allows remote attackers to exploit the...

Oracle: Security Advisory (ELSA-2015-2355)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...