7436 matches found
Paessler PRTG Network Monitor Information Disclosure Vulnerability
Paessler PRTG Network Monitor is a full-featured network monitoring and management software from the German company Paessler. A security vulnerability exists in Paessler PRTG Network Monitor versions prior to 20.1.57.1??745. The vulnerability can be exploited by a remote attacker to obtain...
CVE-2020-11547
PRTG Network Monitor before 20.1.57.1745 allows remote unauthenticated attackers to obtain information about probes running or the server itself CPU usage, memory, Windows version, and internal statistics via an HTTP request, as demonstrated by type=probes to login.htm or index.htm...
CVE-2020-11547
PRTG Network Monitor before 20.1.57.1745 allows remote unauthenticated attackers to obtain information about probes running or the server itself CPU usage, memory, Windows version, and internal statistics via an HTTP request, as demonstrated by type=probes to login.htm or index.htm...
CVE-2020-11547
CVE-2020-11547 affects Paessler PRTG Network Monitor prior to 20.1.57.1745. The vulnerability is an information-disclosure flaw that allows remote unauthenticated attackers to retrieve details about probes running or the server (CPU usage, memory, Windows version, internal statistics) via HTTP re...
CVE-2020-11547
PRTG Network Monitor before 20.1.57.1745 allows remote unauthenticated attackers to obtain information about probes running or the server itself CPU usage, memory, Windows version, and internal statistics via an HTTP request, as demonstrated by type=probes to login.htm or index.htm...
pomelo-monitor Command Injection Vulnerability
pomelo-monitor is a monitoring tool for operating systems and processes in nodejs. A command injection vulnerability exists in pomelo-monitor 0.3.7 and earlier versions. An attacker can exploit this vulnerability to inject arbitrary commands...
CVE-2020-7620
pomelo-monitor through 0.3.7 is vulnerable to Command Injection.It allows injection of arbitrary commands as part of 'pomelo-monitor' params...
CVE-2020-7620
pomelo-monitor through 0.3.7 is vulnerable to Command Injection.It allows injection of arbitrary commands as part of 'pomelo-monitor' params...
CVE-2020-7620
pomelo-monitor through 0.3.7 is vulnerable to Command Injection.It allows injection of arbitrary commands as part of 'pomelo-monitor' params...
Design/Logic Flaw
pomelo-monitor through 0.3.7 is vulnerable to Command Injection.It allows injection of arbitrary commands as part of 'pomelo-monitor' params...
CVE-2020-7620
CVE-2020-7620 affects pomelo-monitor up to version 0.3.7. The vulnerability allows command injection through parameters passed to pomelo-monitor, enabling an attacker to execute arbitrary commands. CVSS data indicate a NETWORK, low complexity, no authentication, with high confidentiality, integri...
CVE-2020-7620
pomelo-monitor through 0.3.7 is vulnerable to Command Injection.It allows injection of arbitrary commands as part of 'pomelo-monitor' params...
PRTG Network Monitor < 20.1.57.1745 RCE Vulnerability
PRTG Network Monitor is prone to an unauthenticated remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CP...
Paessler PRTG Network Monitor webserver component input validation error vulnerability
Paessler PRTG Network Monitor is a full-featured network monitoring and management software from Paessler AG, Germany. A security vulnerability exists in the webserver component of Paessler PRTG Network Monitor version 19.2.50 through PRTG version 20.1.56. A remote attacker could exploit the...
CVE-2020-10374
A webserver component in Paessler PRTG Network Monitor 19.2.50 to PRTG 20.1.56 allows unauthenticated remote command execution via a crafted POST request or the what parameter of the screenshot function in the Contact Support form...
CVE-2020-10374
A webserver component in Paessler PRTG Network Monitor 19.2.50 to PRTG 20.1.56 allows unauthenticated remote command execution via a crafted POST request or the what parameter of the screenshot function in the Contact Support form...
CVE-2020-10374
The CVE-2020-10374 affects Paessler PRTG Network Monitor (webserver component) from version 19.2.50 up to 20.1.56, enabling unauthenticated remote command execution via a crafted POST request or via the what parameter of the Contact Support form’s screenshot function. This is a remote, network-ac...
Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Business Monitor (CVE-2020-4276)
Summary IBM WebSphere Application Server is shipped as a component of Business Monitor. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixe...
Moo0 System Monitor Code Execution Vulnerability
Moo0 System Monitor is a suite of computer resource and performance monitoring programs. A security vulnerability exists in the WinRing0x64.sys file in Moo0 System Monitor version 1.83. The vulnerability can be exploited to execute Ring-0 code and elevate privileges with a specially crafted reque...
CVE-2019-7240
An issue was discovered in WinRing0x64.sys in Moo0 System Monitor 1.83. The vulnerable driver exposes a wrmsr instruction via IOCTL 0x9C402088 and does not properly filter the Model Specific Register MSR. Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges...