3664 matches found
CVE-2017-5784
A missing HSTS Header vulnerability in HPE Matrix Operating Environment version v7.6 was found...
CVE-2017-5782
A missing HSTS Header vulnerability in HPE Matrix Operating Environment version v7.6 was found...
CVE-2016-8531
A remote information disclosure vulnerability in HPE Matrix Operating Environment version 7.6 was found...
CVE-2016-8534
A remote privilege elevation vulnerability in HPE Matrix Operating Environment version 7.6 was found...
CVE-2017-5780
CVE-2017-5780 concerns a remote clickjacking vulnerability in Hewlett Packard Enterprise’s HPE Matrix Operating Environment (MEO) software. Connected data confirms the affected components are HPE Matrix Operating Environment Software (v7.6) and Systems Insight Manager (SIM) Software (v7.6). The r...
CVE-2017-5784
CVE-2017-5784 : A missing HSTS header vulnerability affects Hewlett Packard Enterprise’s Matrix Operating Environment (MOE) version 7.6. The CVE entry notes HSTS misconfiguration as the underlying issue, with CVSS metrics indicating a Medium severity (CVSSv2 base 5.8, CVSSv3 base 6.5). Connected ...
CVE-2016-8535
Summary: CVE-2016-8535 corresponds to a remote HTTP parameter pollution vulnerability in HPE Matrix Operating Environment 7.6 . The connected data confirms the issue affects this product/version and cites a vulnerability descriptor; no vendor-supplied exploit specifics, attack vectors, or confirm...
CVE-2016-8533
CVE-2016-8533 describes a remote privilege-escalation in HPE Matrix Operating Environment 7.6 (and SIM 7.6 per CNVD) that can be exploited over the network to raise privileges. CVSSv3 score is 8.8 HIGH (network, low privileges required, no user interaction). The root cause is not explicitly detai...
CVE-2017-8972
A clickjacking vulnerability affects HP Matrix Operating Environment (Matrix OE) 7.6 LR1. The CVE-2017-8972 entry notes a clickjacking flaw; NVD data shows CVSS scores (2.0: 4.0, 3.0: 4.3) with network access and low complexity. Connected documents also describe the same issue across multiple sou...
CVE-2017-5781
CVE-2017-5781 is a CSRF vulnerability affecting Hewlett Packard Enterprise Matrix Operating Environment (MEO) software and Systems Insight Manager (SIM) Software version 7.6. CNVD-2018-05098 states a cross-site request forgery flaw in MEO v7.6 and SIM v7.6, enabling a remote attacker to perform u...
CVE-2017-8970
A remote unauthenticated disclosure of information vulnerability in HPE Matrix Operating Environment version 7.6 LR1 was found...
CVE-2017-5783
A remote clickjacking vulnerability in HPE Matrix Operating Environment version v7.6 was found...
CVE-2017-5785
A remote information disclosure vulnerability in HPE Matrix Operating Environment version v7.6 was found...
CVE-2017-5783
CVE-2017-5783 describes a remote clickjacking vulnerability affecting HPE Matrix Operating Environment (MEO) v7.6 (and SIM 7.6 per CNVD). The root cause involves a clickjacking weakness that could allow a remote attacker to hijack click-to-operate sessions. Exploit specifics, affected subcomponen...
CVE-2016-8531
The connected CNVD entry describes an information disclosure vulnerability in HPE Matrix Operating Environment Software version 7.6 (and SIM Software version 7.6). It allows a remote attacker to obtain sensitive information. No explicit remediation or patch details are provided in the connected d...
EZSA-2018-001 Several vulnerabilities in Forgot password, Information collector, XML text, and Matrix field type features
More info at http://share.ez.no/community-project/security-advisories/ezsa-2018-001-several-vulnerabilities-in-forgot-password-information-collector-xml-text-and-matrix-field-type-features...
DEBIAN-CVE-2017-18027
In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allow remote attackers to cause a denial of service via a crafted file...
Partner Perspectives: Red Canary ATT&CKs (Part 1): Why We’re Using ATT&CK Across Red Canary
Editor's Note: This blog originally appeared on RedCanary.com Information security is grounded in risk management. And, because what gets measured gets managed, we rely on a variety of frameworks and key performance indicators to tell us whether we’re moving in the right direction. Frameworks lik...
PHP Scripts Mall MLM Forced Matrix SQL Injection Vulnerability
PHP Scripts Mall MLM Forced Matrix is a set of PHP based online marketing website scripts by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall MLM Forced Matrix version 2.0.9. A remote attacker can exploit the vulnerability by sending the 'newid' parameter to the...