Lucene search
+L

675 matches found

CNVD
CNVD
added 2021/01/14 12:00 a.m.6 views

Denial of Service Vulnerability in Siemens Automation License Manager (CNVD-2021-05550)

Automation License Manager is an automation license manager. Automation License Manager has a denial of service vulnerability that can be exploited by an attacker to cause a denial of service...

7AI score
SaveExploits0
CNNVD
CNNVD
added 2021/01/13 12:00 a.m.14 views

Multiple Cisco Products Log Information Disclosure Vulnerability

Cisco Unity Connection UC and so on are the products of the American Cisco Cisco company.Cisco Unity Connection is a set of voice message platform.Cisco Unified Communications Manager CUCM, Unified CM, CallManager is a call processing component of the unified communications system. Cisco Unified...

6.5CVSS5.8AI score0.00908EPSS
SaveExploits0References4
Packet Storm
Packet Storm
added 2020/11/18 12:00 a.m.637 views

Avaya Web License Manager XML Injection

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Blind Out-Of-Band XML External Entity Injection Authenticated product: Avaya Web License Manager vulnerable version: 6.x, 7.0 through 7.1.3.6, 8.0 through 8.1.2.0.0 fixed...

0.03451EPSS
SaveExploits2
ICS
ICS
added 2020/08/20 12:00 a.m.447 views

Wibu-Systems CodeMeter (Update F)

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: Wibu-Systems AG Equipment: CodeMeter Vulnerabilities: Buffer Access with Incorrect Length Value, Inadequate Encryption Strength, Origin Validation Error, Improper Input Validation, Improper Verificatio...

9.8CVSS8.9AI score0.0207EPSS
SaveExploits0References5
OSV
OSV
added 2020/08/14 4:15 p.m.7 views

CVE-2020-7583

A vulnerability has been identified in Automation License Manager 5 All versions, Automation License Manager 6 All versions V6.0.8. The application does not properly validate the users' privileges when executing some operations, which could allow a user with low permissions to arbitrary modify...

7.8CVSS5.8AI score0.00268EPSS
SaveExploits0References1
Prion
Prion
added 2020/08/14 4:15 p.m.25 views

Design/Logic Flaw

A vulnerability has been identified in Automation License Manager 5 All versions, Automation License Manager 6 All versions V6.0.8. The application does not properly validate the users' privileges when executing some operations, which could allow a user with low permissions to arbitrary modify...

4.6CVSS7.4AI score0.00268EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2020/08/14 3:24 p.m.56 views

CVE-2020-7583

CVE-2020-7583 affects Automation License Manager 5 (all versions) and ALM 6 (all versions before 6.0.8). The root cause is improper privilege validation in certain operations, enabling a user with low privileges to arbitrarily modify files protected from writing (local access). CVSS v3.1 base sco...

7.8CVSS7.4AI score0.00268EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2020/08/14 12:00 a.m.22 views

Siemens Automation License Manager 5.x < 6.0.8 Privilege Escalation (SSA-388646)

Binary data scadasiemensalmssa388646.nbin...

7.8CVSS7.3AI score0.00268EPSS
SaveExploits0References3
CNVD
CNVD
added 2020/08/12 12:00 a.m.8 views

Siemens Automation License Manager Local Elevation of Privilege Vulnerability

Siemens Automation License Manager is a Siemens system for processing remote and local licenses for HMI, SCADA and industrial products. Siemens Automation License Manager local elevation of privilege vulnerability. The vulnerability is due to the application failing to properly validate a user's...

7.8CVSS7AI score0.00268EPSS
SaveExploits0References1
ICS
ICS
added 2020/08/11 12:00 a.m.49 views

Siemens Automation License Manager

1. EXECUTIVE SUMMARY CVSS v3 7.3 ATTENTION: Low skill level to exploit Vendor: Siemens Equipment: Automation License Manager ALM Vulnerability: Improper Authorization 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to locally escalate privileges and modify...

7.8CVSS7.9AI score0.00268EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
added 2020/07/21 12:00 a.m.13 views

The vulnerability in the web management interface of the Cisco Prime License Manager (PLM) allows a perpetrator to gain access to the device.

The vulnerability of the Web management interface of the Cisco Prime License Manager PLM software is related to errors in managing registration data. Exploiting this vulnerability can allow a malicious actor to gain access to the device remotely...

10CVSS7.7AI score0.03079EPSS
SaveExploits0References3
CNVD
CNVD
added 2020/07/17 12:00 a.m.11 views

Cisco Prime License Manager Software Trust Management Issues Vulnerability

Cisco Prime License Manager Software is a set of license management software for Cisco products from the U.S. company Cisco Cisco. A trust management issue vulnerability exists in the web management interface in Cisco Prime License Manager PLM Software versions 10.52SU9 and earlier, and 11.51SU6...

10CVSS7.1AI score0.03079EPSS
SaveExploits0References1
NVD
NVD
added 2020/07/16 6:15 p.m.22 views

CVE-2020-3140

A vulnerability in the web management interface of Cisco Prime License Manager PLM Software could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to insufficient validation of user input on the web management interface. An...

10CVSS0.03079EPSS
SaveExploits0References1
OSV
OSV
added 2020/07/16 6:15 p.m.8 views

CVE-2020-3140

A vulnerability in the web management interface of Cisco Prime License Manager PLM Software could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to insufficient validation of user input on the web management interface. An...

9.8CVSS7.3AI score0.03079EPSS
SaveExploits0References1
Prion
Prion
added 2020/07/16 6:15 p.m.20 views

Input validation

A vulnerability in the web management interface of Cisco Prime License Manager PLM Software could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to insufficient validation of user input on the web management interface. An...

10CVSS9.3AI score0.03079EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2020/07/16 5:15 p.m.12 views

CVE-2020-3140 Cisco Prime License Manager Privilege Escalation Vulnerability

A vulnerability in the web management interface of Cisco Prime License Manager PLM Software could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to insufficient validation of user input on the web management interface. An...

9.8CVSS7.5AI score0.03079EPSS
SaveExploits0References1
CVE
CVE
added 2020/07/16 5:15 p.m.74 views

CVE-2020-3140

Cisco Prime License Manager (PLM) suffers a privilege-escalation vulnerability in its web management interface due to insufficient validation of user input. An unauthenticated, remote attacker could submit a crafted request and gain administrative privileges, given a valid username. Impact is hig...

10CVSS9.6AI score0.03079EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/07/16 5:15 p.m.38 views

CVE-2020-3140 Cisco Prime License Manager Privilege Escalation Vulnerability

A vulnerability in the web management interface of Cisco Prime License Manager PLM Software could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to insufficient validation of user input on the web management interface. An...

9.8CVSS9.6AI score0.03079EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/05/21 12:00 a.m.13 views

SmartBear Software ReadyAPI Injection Vulnerability

SmartBear Software ReadyAPI is an API testing platform from SmartBear Software, USA. The platform provides security testing Secure Pro, functional testing SoapUI Pro, performance testing LoadUI Pro, service virtualization ServiceV Pro, as well as generating test reports and other functions...

9.8CVSS7AI score0.12973EPSS
SaveExploits3References1
Citrix
Citrix
added 2019/12/30 12:00 a.m.10 views

Error: "Error getting status - Cannot find license file"

When the lmstat -a command is run from the command prompt on a computer with the Licensing software version 11.9 or later, the following error message is displayed: “Error getting status: Cannot find license file:” The preceding error message appears even after setting the location of the license...

7.2AI score
SaveExploits0
Rows per page
Query Builder