8224 matches found
CVE-2013-3506: Undefined Security Weakness
cgi-bin/performance/perfchart.cgi in the Performance component in GroundWork Monitor Enterprise 6.7.0 does not properly restrict XML content, which allows remote attackers to execute arbitrary commands by creating a .shtml file and leveraging Server Side Includes SSI functionality...
CVE-2013-3511: Improper Input Validation
Open redirect vulnerability in the NeDi component in GroundWork Monitor Enterprise 6.7.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...
CVE-2013-3505: Undefined Security Weakness
The Nagios-App component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to bypass intended access restrictions via a direct request for a 1 log file or 2 configuration file...
CVE-2013-3510: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in GroundWork Monitor Enterprise 6.7.0 allow remote authenticated users to execute arbitrary SQL commands via 1 nedi/html/System-Export.php, 2 nedi/html/Devices-List.php, or 3 the Noma component...
CVE-2013-3507: Exposure of Sensitive Information to an Unauthorized Actor
The NeDi component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to obtain sensitive information via a direct request for 1 a configuration file, 2 a database dump, or 3 the Tomcat status context...
CVE-2013-0673
Directory traversal vulnerability in the web interface in the Health Monitor service in MatrikonOPC A&E Historian 1.0.0.0 allows remote attackers to read and delete arbitrary files via a crafted URL...
CVE-2013-0673
CVE-2013-0673 describes a directory traversal vulnerability in the web interface of the MatrikonOPC A&E Historian Health Monitor service (version 1.0.0.0). An attacker can remotely read and delete arbitrary files by crafting a URL to the Health Monitor web interface, exposing sensitive server fil...
CVE-2013-0673
Directory traversal vulnerability in the web interface in the Health Monitor service in MatrikonOPC A&E Historian 1.0.0.0 allows remote attackers to read and delete arbitrary files via a crafted URL...
CVE-2013-0673: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in the web interface in the Health Monitor service in MatrikonOPC A&E Historian 1.0.0.0 allows remote attackers to read and delete arbitrary files via a crafted URL...
op5 Monitor < 5.7.3 Multiple Vulnerabilities
The version of op5 Monitor hosted on the remote web server is earlier than 5.7.3. It is, therefore, affected by the following vulnerabilities: - The 'status/hostgroupgrid' script fails to properly sanitize user-supplied input to the 'itemsperpage' parameter, which could allow for a SQL injection...
WordPress Download Monitor Plugin <= 3.3.6.1 - XSS #2
Because of this vulnerability in admin/admin.php, the attackers can inject arbitrary web script or HTML via the "p" parameter. Solution Update the plugin...
Virtual Access Monitor SQL injection
Few different SQL injections...
NGS00248 Patch Notification: Virtual Access Monitor Multiple SQL Injection Vulnerabilities
High Risk Vulnerability in Virtual Access Monitor 2 April 2013 Ken Wolstencroft of NCC Group has discovered a High risk vulnerability in Virtual Access Monitor Impact: Multiple SQL Injection Vulnerabilities Versions affected: Virtual Access Monitor 3.10.17 and previous Details of the most recent...
SEC Consult SA-20130308-1 :: Multiple vulnerabilities in GroundWork Monitor Enterprise (part 2)
SEC Consult Vulnerability Lab Security Advisory 20130308-1 ======================================================================= title: Multiple high risk vulnerabilities part 2 product: GroundWork Monitor Enterprise vulnerable version: 6.7.0 fixed version: none - optional technical bulletin...
SEC Consult SA-20130308-0 :: Multiple critical vulnerabilities in GroundWork Monitor Enterprise (part 1)
SEC Consult Vulnerability Lab Security Advisory 20130308-0 ======================================================================= title: Multiple critical vulnerabilities part 1 product: GroundWork Monitor Enterprise vulnerable version: 6.7.0 fixed version: none - optional technical bulletin...
GroundWork Monitor Enterprise 6.7.0 SQL Injection / Command Execution
GroundWork Monitor Enterprise version 6.7.0 suffers from remote SQL injection, file disclosure, command injection, and cross site scripting vulnerabilities. This is the second of two advisories documenting all the issues in GroundWork. Detailed proof of concepts were removed by the author because...
GroundWork Monitor Enterprise 6.7.0 XSS / Disclosure / Command Execution
GroundWork Monitor Enterprise version 6.7.0 suffers from insufficient authentication, file disclosure, file modification, cross site scripting, XML external entity injection, command injection, and various other vulnerabilities. Detailed proof of concepts were removed by the author because...
GroundWork Monitor Enterprise contains multiple vulnerabilities
Overview GroundWork Monitor Enterprise 6.7.0 and possibly earlier versions contain multiple vulnerabilities. Description The SEC Consult Vulnerability Lab Security Advisory states:The following vulnerability description has been categorized into the components where the vulnerabilities have been...
Not getting hardware sensor alerts in a timely manner
Challenge You do not receive information about specific alerts regarding host hardware sensors quick enough for your environment, both in the Veeam ONE Monitor GUI and e-mails. For example, a host goes offline and you do not get any alerts for 20 minutes. Or there is another delayed alerting...
Debian Security Advisory DSA 2616-1 (nagios3 - buffer overflow in CGI scripts)
A buffer overflow problem has been found in nagios3, a host/service/network monitoring and management system. A malicious client could craft a request to history.cgi and cause application crashes. OpenVAS Vulnerability Test $Id: deb2616.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated fro...