HP OpenView NNM ovwebsnmpsrv.exe Command Line Argument Buffer Overflow (CVE-2010-1961; CVE-2010-1964)

The HP OpenView product consists of a suite of network and system management software applications developed by HP. It includes several optional modules and components, such as OpenView Quality Manager, OpenView Performance Insight, and OpenView Network Node Manager. A buffer overflow vulnerabili...

Sun Solaris DHCP Client Arbitrary Code Execution (CVE-2005-2870)

The DHCP protocol is used by network administrators to centrally manage and automate the assignment of IP addresses on a network. In addition to IP address assignment, DHCP clients receive from a DHCP server information that is required to manage their network configuration including the sub-net...

CVE-2009-1798

Multiple cross-site scripting XSS vulnerabilities on the Network Management Card NMC on American Power Conversion APC Switched Rack PDU aka Rack Mount Power Distribution devices and other devices allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: the...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities on the Network Management Card NMC on American Power Conversion APC Switched Rack PDU aka Rack Mount Power Distribution devices and other devices allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: the...

CVE-2009-1797

The CVE-2009-1797 issue affects the APC Network Management Card (NMC) web interface used in APC UPS/Rack PDU products. It describes cross‑site request forgery (CSRF) vulnerabilities that can allow an attacker to hijack a user’s session and perform actions such as creating new administrative users...

CVE-2009-1798

Multiple cross-site scripting XSS vulnerabilities on the Network Management Card NMC on American Power Conversion APC Switched Rack PDU aka Rack Mount Power Distribution devices and other devices allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: the...

CVE-2009-1798

CVE-2009-1798 refers to multiple cross-site scripting (XSS) vulnerabilities in the APC Network Management Card (NMC) used in APC Switched Rack PDU devices. The issue is that the NMC web interface does not adequately validate user-supplied data, allowing remote attackers to inject arbitrary web sc...

Zabbix Agent Code Execution

From Wikipedia : "Zabbix is a network management system application ... designed to monitor and track the status of various network services, servers, and other network hardware." Zabbix Agent : Bypass of EnableRemoteCommands=0 Impacted software : Zabbix Agent FreeBSD and Solaris only Zabbix...

APC Network Management Card - Cross-Site Request Forgery Cross-Site Scripting

APC Network Management Card - Cross-Site Request Forgery Cross-Site Scripting source: https://www.securityfocus.com/bid/37338/info The APC Network Management Card is prone to multiple cross-site request-forgery and cross-site scripting vulnerabilities. An attacker can exploit the cross-site reque...

APC Network Management Card - Cross-Site Request Forgery / Cross-Site Scripting

source: https://www.securityfocus.com/bid/37338/info The APC Network Management Card is prone to multiple cross-site request-forgery and cross-site scripting vulnerabilities. An attacker can exploit the cross-site request forgery issues to alter the settings on affected devices, which may lead to...

Zabbix Agent < 1.6.7 Remote Bypass Vulnerability

No description provided by source. Zabbix Agent : Bypass of EnableRemoteCommands=0 From: Nicob nicob nicob net Date: Sun, 13 Dec 2009 16:28:30 +0100 From Wikipedia : "Zabbix is a network management system application ... designed to monitor and track the status of various network services, server...

Zabbix Agent < 1.6.7 Remote Bypass Vulnerability

Exploit for unknown platform in category web applications ================================================ Zabbix Agent Date: Sun, 13 Dec 2009 16:28:30 +0100 From Wikipedia : "Zabbix is a network management system application ... designed to monitor and track the status of various network service...

Zabbix Server - Multiple Vulnerabilities

Zabbix Server - Multiple Vulnerabilities Zabbix Server : Multiple remote vulnerabilities From: Nicob Date: Sun, 13 Dec 2009 16:28:35 +0100 From Wikipedia : "Zabbix is a network management system application ... designed to monitor and track the status of various network services, servers, and oth...

Castle Rock Computing SNMPc Network Manager Community String Buffer Overflow (CVE-2008-2214)

SNMPc is a secure distributed network management system developed by Castle Rock Computing. SNMPc uses Simple Network Management Protocol SNMP to communicate with other network entities. A buffer overflow vulnerability exists in Castle Rock Computing SNMPc Network Manager. The vulnerability can b...

ClearSite 4.50 (cs_base_path) Remote File Inclusion Vulnerability

No description provided by source. Network Management/Inventory System header.php Remote File Include Vulnerability ----------------------------------------------------------------------------------...

Network Management/Inventory System [header.php] Remote File Include

No description provided by source. Network Management/Inventory System header.php Remote File Include Vulnerability ----------------------------------------------------------------------------------...

ClearSite 4.50 (cs_base_path) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================= ClearSite 4.50 csbasepath Remote File Inclusion Vulnerability ================================================================= Network Management/Inventory System header.ph...

Network ManagementInventory System - header.php Remote File Inclusion

Network ManagementInventory System - header.php Remote File Inclusion Network Management/Inventory System header.php Remote File Include Vulnerability ----------------------------------------------------------------------------------...

Network Management/Inventory System - &#039;header.php&#039; Remote File Inclusion

Network Management/Inventory System header.php Remote File Include Vulnerability ---------------------------------------------------------------------------------- @======================================================================================================@ + Author : EA Ngel + +...

[NGENUITY] - Spiceworks Multiple Vulnerabilities &#40;XSS &amp; CSRF&#41;

nGenuity Information Services - Security Advisory Advisory ID: NGENUITY-2009-009 - Spiceworks Multiple Vulnerabilities XSS & CSRF Application: Spiceworks 3.6.31847 Vendor: Spiceworks Vendor website: http://www.spiceworks.com Author: Adam Baldwin [email protected] Class: XSS, CSRF I...