6206 matches found
CVE-2016-8966: Exposure of Sensitive Information to an Unauthorized Actor
IBM BigFix Inventory v9 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques...
CVE-2016-8961: URL Redirection to Untrusted Site
IBM BigFix Inventory v9 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site...
PT-2017-9900
Name of the Vulnerable Software and Affected Versions IBM BigFix Inventory version 9 Description The issue allows a remote attacker to conduct phishing attacks using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, the attacker could exploit this to spoof the...
PT-2017-9912
Name of the Vulnerable Software and Affected Versions IBM BigFix Inventory version 9 Description The issue is caused by an XML External Entity Injection XXE error when processing XML data, which can lead to a denial of service. A remote attacker could exploit this to expose highly sensitive...
PT-2017-9902
Name of the Vulnerable Software and Affected Versions IBM BigFix Inventory version 9 Description The issue concerns the storage of potentially sensitive information in log files by IBM BigFix Inventory. This information could be accessed by a local user, potentially leading to unauthorized...
PT-2017-9904
Name of the Vulnerable Software and Affected Versions IBM BigFix Inventory version 9 Description The issue is caused by the failure to properly enable HTTP Strict Transport Security, allowing a remote attacker to obtain sensitive information. An attacker could exploit this to obtain sensitive...
PT-2017-9911
Name of the Vulnerable Software and Affected Versions IBM BigFix Inventory version 9 Description The issue could disclose sensitive information to an unauthorized user using HTTP GET requests, potentially allowing for further attacks against the system. Recommendations For IBM BigFix Inventory...
PT-2017-9905
Name of the Vulnerable Software and Affected Versions IBM BigFix Inventory version 9.2 Description The issue concerns the storage of user credentials in plain text, which can be accessed by a local user. This allows unauthorized individuals to obtain sensitive information. Recommendations For IBM...
PT-2017-9913
Name of the Vulnerable Software and Affected Versions IBM BigFix Inventory version 9 Description The issue allows web pages to be stored locally, which can then be read by another user on the system. Recommendations For IBM BigFix Inventory version 9, consider implementing access controls to...
MC Inventory Manager SQL Injection
Vulnerability: Admin Login Bypass & SQLi Date: 15.01.2017 Vendor Homepage: http://microcode.ws/ Script Name: MC Inventory Manager Script Buy Now: http://microcode.ws/product/mc-inventory-manager-php-script/3885 Author: Adeghsan Aencan Author Web: http://ihsan.net Mail : ihsanbeygirihsannoktanet...
MC Inventory Manager Script - Multiple Vulnerabilities
MC Inventory Manager Script - Multiple Vulnerabilities Vulnerability: Admin Login Bypass & SQLi Date: 15.01.2017 Vendor Homepage: http://microcode.ws/ Script Name: MC Inventory Manager Script Buy Now: http://microcode.ws/product/mc-inventory-manager-php-script/3885 Author: İhsan Şencan Author Web...
MC Inventory Manager Script - Multiple Vulnerabilities
Vulnerability: Admin Login Bypass & SQLi Date: 15.01.2017 Vendor Homepage: http://microcode.ws/ Script Name: MC Inventory Manager Script Buy Now: http://microcode.ws/product/mc-inventory-manager-php-script/3885 Author: İhsan Şencan Author Web: http://ihsan.net Mail : ihsanbeygirihsannoktanet Admi...
corvettecapital.com XSS vulnerability
Vulnerable URL: http://www.corvettecapital.com/inventory?bodytype=SUV=Passenger' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Che...
IBM License Metric Tool and BigFix Inventory Information Disclosure Vulnerability (CNVD-2017-00327)
The IBM License Metric Tool and BigFix Inventory are both products of IBM Corporation of America. The former is a set of free tools that help IBM Passport Advantage Software Upgrade and Support Services customers determine their Processor Value Unit PVU licensing needs, and the latter is a soluti...
IBM BigFix Inventory Local Information Disclosure Vulnerability
IBM BigFix formerly known as IBM Endpoint Manager, Tivoli Endpoint Manager is a set of system management software from the American company IBM. The software provides remote control, patch management, software distribution, operating system deployment, network access protection and other function...
IBM License Metric Tool and BigFix Inventory Information Disclosure Vulnerability (CNVD-2017-00066)
The IBM License Metric Tool and BigFix Inventory are both products of IBM Corporation of America. The former is a set of free tools that help IBM Passport Advantage Software Upgrade and Support Services customers determine their Processor Value Unit PVU licensing needs, and the latter is a soluti...
IBM License Metric Tool and BigFix Inventory XML External Entity Injection Vulnerability
The IBM License Metric Tool and BigFix Inventory are both products of IBM Corporation of America. The former is a set of free tools that help IBM Passport Advantage Software Upgrade and Support Services customers determine their Processor Value Unit PVU licensing needs, and the latter is a soluti...
IBM License Metric Tool and BigFix Inventory Open Redirect Vulnerability
The IBM License Metric Tool and BigFix Inventory are both products of IBM Corporation of America. The former is a set of free tools that help IBM Passport Advantage Software Upgrade and Support Services customers determine their Processor Value Unit PVU licensing needs, and the latter is a soluti...
IBM License Metric Tool and BigFix Inventory Information Disclosure Vulnerability
The IBM License Metric Tool and BigFix Inventory are both products of IBM Corporation of America. The former is a set of free tools that help IBM Passport Advantage Software Upgrade and Support Services customers determine their Processor Value Unit PVU licensing needs, and the latter is a soluti...