CVE-2014-6510

Unspecified vulnerability in Oracle Solaris 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Power Management Utility...

CVE-2014-6510

CVE-2014-6510 affects Oracle Solaris 11, where a vulnerability in the Power Management Utility could allow a local attacker to compromise confidentiality, integrity, and availability. The exposed impact is rated as complete for all three CIA aspects, with local attack vector and no authentication...

CVE-2014-6521

Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality, integrity, and availability via vectors related to CDE - Power Management Utility...

CVE-2014-6521

CVE-2014-6521 affects Oracle Solaris 10, specifically the CDE - Power Management Utility. The Solaris 10 component is vulnerable to a local, easily exploitable flaw that can lead to complete compromise of confidentiality, integrity, and availability (arbitrary code execution). Patches addressing ...

Unspecified Vulnerability in Oracle Solaris (CNVD-2015-00469)

Oracle Solaris is a unix-based operating system. A local unspecified vulnerability exists in Oracle Solaris that could be exploited by an attacker to compromise the 'Power Management Utility' subcomponent...

Unspecified Vulnerability in Oracle Solaris (CNVD-2015-00489)

Oracle Solaris is a unix-based operating system. An unspecified vulnerability exists in Oracle Solaris. This vulnerability allows attackers to exploit the 'CDE - Power Management Utility' subcomponent...

JVN#13313061: TOSHIBA TEC e-Studio series vulnerable to cross-site request forgery

e-Studio provided by TOSHIBA TEC CORPORATION is a multi-function peripheral MFP. Multiple e-Studio series products contain a vulnerability in web-based management utility, which may result in a cross-site request forgery. Impact If the administrator views a malicious page while logged into the...

Solaris 10 (x86) : 126120-02 (deprecated)

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: CDE - Power Management Utility. The supported version that is affected is 10. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in...

osCommerce 2.2 - Arbitrary PHP Code Execution (Metasploit)

$Id: oscommercefilemanager.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Multiple BFCommand & Control Server Manager game servers management utility vulnerabilities

Authentication bypass, privilege escalation, DoS...

rlmadmin v3.8M view file symlink vulnerability

-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- Ministry-Of-Peace - Security Advisory 01 - 07th Sept 2001 rlmadmin v3.8M view file symlink vulnerability -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- Overview: --------- rlmadmin is a user management...

CVE-2001-1000

rlmadmin RADIUS management utility in Merit AAA Server 3.8M, 5.01, and possibly other versions, allows local users to read arbitrary files via a symlink attack on the rlmadmin.help file...

Merit AAA RADIUS Server 3.8 - rlmadmin Symbolic Link

Merit AAA RADIUS Server 3.8 - rlmadmin Symbolic Link source: https://www.securityfocus.com/bid/3302/info The 'rlmadmin' user management utility included with the Merit AAA RADIUS Server package is susceptible to a trivial symbolic link attack. The program allows users to specify a directory from...

PassWD 1.2 - Weak Encryption

PassWD 1.2 - Weak Encryption // source: https://www.securityfocus.com/bid/1300/info PassWd 1.2 is a password management utility designed to store user login information to various URLs. The login information, which includes username, password and link location is stored in the pass.dat file which...