PT-2016-7156

Name of the Vulnerable Software and Affected Versions Huawei E9000 rack servers with software before V100R001C00SPC296 Description The issue is related to an XML external entity XXE vulnerability in the Hyper Management Module HMM. This allows remote authenticated users to read arbitrary files or...

Unauthorized Access Vulnerability in DMS Integrated Management System of Shanghai Toothwood Communication Technology Co.

Toothwood Technology yamutech claims to be the leading integrated DNS service provider with the widest coverage area and the largest number of users in China. Multiple overstepping access vulnerabilities exist in the DMS, the network management module of yamutech's DNS equipment, allowing an...

Siemens SIMATIC WinCC (TIA Portal) 13 < 13 SP1 Multiple Vulnerabilities (SSA-543623)

Binary data scadasiemenstiawinccmultiplevulnerabilitiesSSA-543623.nbin...

CVE-2015-1358

Siemens SIMATIC WinCC (TIA Portal) CVE-2015-1358: The remote-management modules in WinCC (TIA Portal) Multi Panels, Comfort Panels and RT Advanced, and in WinCC Flexible panels/runtime before the stated SPs, transmit credentials in weak or unencrypted form. This allows network-sniffing attackers ...

PT-2015-5233

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC WinCC TIA Portal versions prior to 13 SP1 Siemens SIMATIC WinCC flexible versions prior to 2008 SP3 Up7 Description The issue concerns the remote-management module in certain Siemens products, where credentials are not properly...

RHEL 6 : rhev 3.2 - vdsm (RHSA-2013:0886)

Updated vdsm packages that fix one security issue and various bugs are now available. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available from the C...

CVE-2014-2390

Cross-site request forgery CSRF vulnerability in the User Management module in McAfee Network Security Manager NSM before 6.1.15.39 7.1.5.x before 7.1.5.15, 7.1.15.x before 7.1.15.7, 7.5.x before 7.5.5.9, and 8.x before 8.1.7.3 allows remote attackers to hijack the authentication of users for...

Information disclosure

The Configuration Patterns component in IBM Flex System Manager FSM 1.2.0.x, 1.2.1.x, 1.3.0.x, and 1.3.1.x uses a weak algorithm in an encryption step during Chassis Management Module CMM account creation, which makes it easier for remote authenticated users to defeat cryptographic protection...

CVE-2014-2390: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the User Management module in McAfee Network Security Manager NSM before 6.1.15.39 7.1.5.x before 7.1.5.15, 7.1.15.x before 7.1.15.7, 7.5.x before 7.5.5.9, and 8.x before 8.1.7.3 allows remote attackers to hijack the authentication of users for...

CVE-2014-0897: Undefined Security Weakness

The Configuration Patterns component in IBM Flex System Manager FSM 1.2.0.x, 1.2.1.x, 1.3.0.x, and 1.3.1.x uses a weak algorithm in an encryption step during Chassis Management Module CMM account creation, which makes it easier for remote authenticated users to defeat cryptographic protection...

CVE-2014-0860: Undefined Security Weakness

The firmware before 3.66E in IBM BladeCenter Advanced Management Module AMM, the firmware before 1.43 in IBM Integrated Management Module IMM, and the firmware before 4.15 in IBM Integrated Management Module II IMM2 contains cleartext IPMI credentials, which allows attackers to execute arbitrary...

PT-2014-3898

Name of the Vulnerable Software and Affected Versions IBM BladeCenter Advanced Management Module AMM versions prior to 3.66E IBM Integrated Management Module IMM versions prior to 1.43 IBM Integrated Management Module II IMM2 versions prior to 4.15 Description The issue allows attackers to execut...

Allied Telesis AT-MCF2000M 3.0.2 Gaining Root Shell Access

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP YmmMMMM MMM YM Discovered by dun \ posdubatgmail.com 2013-01-02 Allied Telesis AT-MCF2000M 3.0.2 Gaining Root Shell Access Device: The AT-MCF2000M is t...

IBM BladeCenter Advanced Management Module 1.42 Login username XSS

No description provided by source. source: http://www.securityfocus.com/bid/34447/info IBM BladeCenter Advanced Management Module is prone to the following remote vulnerabilities: - An HTML-injection vulnerability - A cross-site scripting vulnerability - An information-disclosure vulnerability -...

IBM BladeCenter Advanced Management Module 1.42 private/file_management.ssi PATH Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/34447/info IBM BladeCenter Advanced Management Module is prone to the following remote vulnerabilities: - An HTML-injection vulnerability - A cross-site scripting vulnerability - An information-disclosure vulnerability -...

IBM BladeCenter Advanced Management Module 1.42 CSRF

No description provided by source. source: http://www.securityfocus.com/bid/34447/info IBM BladeCenter Advanced Management Module is prone to the following remote vulnerabilities: - An HTML-injection vulnerability - A cross-site scripting vulnerability - An information-disclosure vulnerability -...

IBM BladeCenter Management Module - DoS vulnerability

No description provided by source. DSECRG-09-049 IBM BladeCenter Management Module - DoS vulnerability Source: http://www.dsecrg.com/pages/vul/show.php?id=149 This device can be remotely rebooted by sending a malformed TCP packets Digital Security Research Group DSecRG Advisory DSECRG-09-049...

CVE-2013-4030: Undefined Security Weakness

Integrated Management Module IMM 2 1.00 through 2.00 on IBM System X and Flex System servers supports SSL cipher suites with short keys, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack against 1 SSL or 2 TLS traffic...

PT-2014-2732

Name of the Vulnerable Software and Affected Versions Integrated Management Module IMM 2 versions 1.00 through 2.00 Description The issue allows remote attackers to defeat cryptographic protection mechanisms via a brute-force attack against SSL or TLS traffic, due to the support of SSL cipher...

Cubic CMS多个安全漏洞

Cubic CMS是一款内容管理系统。 由于/login.usuario没有正确过滤传递的'login'和'pass' POST参数的用户输入，允许远程攻击者注入或操纵SQL查询。 0 Cubic CMS 目前厂商暂无提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.cubicfactory.com/ I. BACKGROUND ------------------------- "CUBIC CMS" is a non-free content management system for websites and portals o...