CVE-2018-11456

A vulnerability has been identified in Automation License Manager 5 All versions 5.3.4.4. An attacker with network access to the device could send specially crafted network packets to determine whether or not a network port on another remote system is accessible or not. This allows the attacker t...

CVE-2018-11456

Siemens Automation License Manager (ALM) 5.x prior to 5.3.4.4 contains a network-based information-disclosure/port-scanning flaw. An unauthenticated, remote attacker could send crafted packets to determine whether a remote port is reachable, enabling basic port discovery using the victim’s machin...

CVE-2018-11455

The vulnerability CVE-2018-11455 affects Siemens Automation License Manager: all versions of 5 before 5.3.4.4 and all versions of 6 before 6.0.1. It is a directory traversal flaw that could allow a remote attacker to move arbitrary files, potentially enabling code execution and impacting confiden...

CVE-2017-6779

Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated, remote attacker to cause high disk utilization, resulting in a denial of service DoS condition. The vulnerability occu...

CVE-2011-4135

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/license/flexnetlmgrdbof.rb 2025-10-23 21:12:56+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7...

Schneider Electric Floating License Manager

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION : Remotely exploitable/low skill level to exploit Vendor : Schneider Electric Equipment : Floating License Manager Vulnerabilities : Heap-based Buffer Overflow, Improper Restriction of Operations within the Bounds of a Memory Buffer, Open Redirect 2...

Gemalto HASP SRM, Sentinel HASP and Sentinel LDK Cross-Site Scripting Vulnerabilities

Gemalto HASP SRM, Sentinel HASP and Sentinel LDK are products of Gemalto, Inc. Gemalto HASP SRM and Sentinel HASP are cryptographic lock drivers. License Manager service is one of the license management services. A cross-site scripting vulnerability exists in the License Manager service in Gemalt...

CVE-2018-8900

The License Manager service of HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE 7.80 allows remote attackers to inject malicious web script in the logs page of Admin Control Center ACC for cross-site scripting XSS vulnerability...

CVE-2018-8900

The License Manager service of HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE 7.80 allows remote attackers to inject malicious web script in the logs page of Admin Control Center ACC for cross-site scripting XSS vulnerability...

Cross site scripting

The License Manager service of HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE 7.80 allows remote attackers to inject malicious web script in the logs page of Admin Control Center ACC for cross-site scripting XSS vulnerability...

CVE-2018-8900

The License Manager service of HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE 7.80 allows remote attackers to inject malicious web script in the logs page of Admin Control Center ACC for cross-site scripting XSS vulnerability...

CVE-2018-8900

The License Manager service of HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE 7.80 allows remote attackers to inject malicious web script in the logs page of Admin Control Center ACC for cross-site scripting XSS vulnerability...

CVE-2018-8900

CVE-2018-8900 affects Gemalto HASP SRM, Sentinel HASP, and Sentinel LDK licenses. The License Manager service (ACC) is vulnerable to cross-site scripting (XSS) in the logs page. Affected versions are listed variably across sources: CNVD cites 2.10–7.66; NVD notes all versions prior to Sentinel LD...

Rockwell Automation FactoryTalk Activation Manager (Update B)

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION : Exploitable remotely/low skill level to exploit Vendor : Rockwell Automation Equipment : Factory Talk Activation Manager Vulnerabilities : Cross-site Scripting, Improper Restriction of Operations within the Bounds of a Memory Buffer 2. UPDATE...

Reprise License Manager Path Traversal Vulnerability

Reprise License Manager RLM is a suite of license management software from Reprise, Inc. A path traversal vulnerability exists in RLM version 11.0. An attacker could exploit this vulnerability by changing fields in a web request to gain access to files on the file system...

Path traversal

An issue was discovered in Reprise License Manager 11.0. This vulnerability is a Path Traversal where the attacker, by changing a field in the Web Request, can have access to files on the File System of the Server. By specifying a pathname in the POST parameter "lf" to the goform/editlfgetdata UR...

CVE-2018-5716

An issue was discovered in Reprise License Manager 11.0. This vulnerability is a Path Traversal where the attacker, by changing a field in the Web Request, can have access to files on the File System of the Server. By specifying a pathname in the POST parameter "lf" to the goform/editlfgetdata UR...

CVE-2018-5716

An issue was discovered in Reprise License Manager 11.0. This vulnerability is a Path Traversal where the attacker, by changing a field in the Web Request, can have access to files on the File System of the Server. By specifying a pathname in the POST parameter "lf" to the goform/editlfgetdata UR...

CVE-2018-5716

An issue was discovered in Reprise License Manager 11.0. This vulnerability is a Path Traversal where the attacker, by changing a field in the Web Request, can have access to files on the File System of the Server. By specifying a pathname in the POST parameter "lf" to the goform/editlfgetdata UR...

CVE-2018-5716

CVE-2018-5716 affects Reprise License Manager 11.0. A Path Traversal flaw allows an attacker to specify a pathname in the POST parameter LF to the goform/edit_lf_get_data URI, enabling retrieval of arbitrary files from the server’s filesystem. This impacts confidentiality and integrity of the ser...