CVE-2016-8564

Siemens Automation License Manager (ALM) is affected by CVE-2016-8564 through SQL injection in ALM before 5.3 SP3 Update 1. an attacker can send crafted traffic to port 4410/TCP to execute arbitrary SQL commands that may read or modify configuration data. The issue stems from improper handling of...

Siemens Automation License Manager suffers from a denial of service vulnerability (CNVD-2016-08772)

Siemens Automation License Manager ALM is a software that centrally manages license keys for various Siemens software products. A denial of service vulnerability exists in Siemens Automation License Manager. An attacker can exploit the vulnerability by sending specially crafted packets to port...

File Upload Vulnerability in Siemens Automation License Manager

Siemens Automation License Manager ALM is a software that centrally manages license keys for various Siemens software products. A file upload vulnerability exists in Siemens Automation License Manager. A remote attacker could use the vulnerability to send specially crafted packets to upload files...

SQL Injection Vulnerability in Siemens Automation License Manager

Siemens Automation License Manager ALM is a software that centrally manages license keys for various Siemens software products. A SQL injection vulnerability exists in Siemens Automation License Manager. A remote attacker can access port 4410/TCP to read and write ALM configuration information,...

Reprise License Manager '/goform/activate_doit' Stack Buffer Overflow Vulnerability

Reprise License Manager RLM is a suite of license management software from Reprise, Inc. A stack buffer overflow vulnerability exists in Reprise License Manager version 12.0BL2, which stems from the program's failure to perform sufficient bounds checking on user-submitted input. An attacker could...

Reprise License Manager 'akey' stack buffer overflow vulnerability

Reprise License Manager RLM is a suite of license management software from Reprise, Inc. A stack buffer overflow vulnerability exists in Reprise License Manager versions 12.0BL2, 12.1BL2, and 12.1BL3, which stems from the program's failure to perform sufficient bounds checking on user-submitted...

Siemens Automation License Manager Vulnerabilities

OVERVIEW Siemens has identified vulnerabilities in Siemen’s Automation License Manager ALM. These vulnerabilities were reported directly to Siemens by Sergey Temnikov and Vladimir Dashchenko from Critical Infrastructure Defence Team, Kaspersky Lab. Siemens has produced a new version to mitigate...

Gemalto Sentinel License Manager 18.0.1.55505 - Directory Traversal

Exploit for windows platform in category web applications Gemalto Sentinel License Manager 18.0.1 Directory Traversal Vulnerability Vendor: Gemalto NV | SafeNet, Inc Product web page: http://www.gemalto.com | http://www.safenet-inc.com Affected version: 18.0.1.55505 Summary: The Sentinel License...

Gemalto Sentinel License Manager 18.0.1 Directory Traversal

Gemalto Sentinel License Manager 18.0.1 Directory Traversal Vulnerability Vendor: Gemalto NV | SafeNet, Inc Product web page: http://www.gemalto.com | http://www.safenet-inc.com Affected version: 18.0.1.55505 Summary: The Sentinel License Manager enforces and manages licensing in multi-user...

Gemalto Sentinel License Manager 18.0.1.55505 - Directory Traversal

Gemalto Sentinel License Manager 18.0.1 Directory Traversal Vulnerability Vendor: Gemalto NV | SafeNet, Inc Product web page: http://www.gemalto.com | http://www.safenet-inc.com Affected version: 18.0.1.55505 Summary: The Sentinel License Manager enforces and manages licensing in multi-user...

Gemalto Sentinel License Manager 18.0.1.55505 - Directory Traversal

Gemalto Sentinel License Manager 18.0.1.55505 - Directory Traversal Gemalto Sentinel License Manager 18.0.1 Directory Traversal Vulnerability Vendor: Gemalto NV | SafeNet, Inc Product web page: http://www.gemalto.com | http://www.safenet-inc.com Affected version: 18.0.1.55505 Summary: The...

Gemalto Sentinel License Manager 18.0.1 Directory Traversal Vulnerability

Summary The Sentinel License Manager enforces and manages licensing in multi-user environment. It keeps track of all the licenses and handles requests from network users who want to run your application, granting authorization to the requesters to allow them to run the application, and denying...

Reprise License Manager diagnostics_doit Directory Traversal

A path traversal vulnerability exists in the Reprise License Manager due to insufficient input validation while processing HTTP requests. A remote unauthenticated attacker can leverage this vulnerability by sending crafted HTTP requests to the target system. Successful exploitation would allow an...

Reprise License Manager edit_lf_process Directory Traversal

A directory traversal vulnerability exists in the Reprise License Manager. The vulnerability is due to insufficient input validation while processing HTTP requests to the "/goform/editlfprocess" URI. A remote unauthenticated attacker can leverage this vulnerability by sending crafted HTTP request...

Reprise License Manager HTTP Parameter Parsing Stack Buffer Overflow

A stack buffer overflow vulnerability exists in the Reprise License Manager. The vulnerability is due to insufficient input validation of the licfile and debuglog parameters while processing an HTTP request. Successful exploitation would lead to arbitrary code execution under the security context...

Siemens Automation License Manager ‘almaxcx.dll’绝对路径遍历漏洞

Siemens Automation License Manager ALM 2.0至5.1+SP1+Upd2版本中的图形用户界面中almaxcx.dll ALMListView.ALMListCtrl ActiveX控件中存在绝对路径遍历漏洞。远程攻击者可利用该漏洞借助Save方法重写任意文件。...

Reprise License Manager edit_lf_get_data Directory Traversal

A directory traversal vulnerability exists in the Reprise License Manager. The vulnerability is due to insufficient input validation while processing HTTP requests to the editlfgetdata operation. A remote authenticated attacker can leverage this vulnerability by sending crafted HTTP requests to t...

Reprise License Manager actserver and akey HTTP Parameters Parsing Stack Buffer Overflow

A stack buffer overflow vulnerability exists in the Reprise License Manager. The vulnerability is due to insufficient input validation of the actserver and akey parameters while processing a number of HTTP requests. Successful exploitation would lead to arbitrary code execution under the security...

Borland AccuRev Buffer Overflow Vulnerability (CNVD-2015-06027)

Borland AccuRev is a software configuration management tool. Multiple stack buffer overflow vulnerabilities exist in the function activatedoit in Borland AccuRev's Reprise License Manager service, which can be exploited by a remote attacker to execute arbitrary code via the akey or actserver...

Borland AccuRev Buffer Overflow Vulnerability

Borland AccuRev is a software configuration management tool. A buffer overflow vulnerability exists in Borland AccuRev's Reprise License Manager service, which can be exploited by remote attackers to execute arbitrary code via the licfile parameter...