Cisco Prime Collaboration Provisioning Lightweight Directory Access Protocol Authentication Bypass Vulnerability

Cisco Prime Collaboration Provisioning is a Web-based, next-generation communications services solution from Cisco. The solution provides IP communication services capabilities for IP telephony, voicemail, and unified communications environments. An authentication bypass vulnerability exists in t...

Cisco Prime Collaboration Provisioning Lightweight Directory Access Protocol Authentication Bypass Vulnerability

A vulnerability in the Lightweight Directory Access Protocol LDAP authentication for Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to bypass authentication. The attacker could be granted full administrator privileges. The vulnerability is due to...

Cisco Prime Collaboration Provisioning SQL Injection Vulnerability (cisco-sa-20151008-pcp)

A vulnerability in web framework of Cisco Prime Collaboration Provisioning PCP could allow an authenticated, remote attacker to execute unauthorized SQL queries. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Provisioning Server 7.6: Error- “vDisk is locked. 0xffff8017”

The vDisk is locked with the following error message: “vDisk is locked. 0xffff8017”...

Cisco NX-OS Software DHCP Options Command Injection Vulnerability (Cisco-SA-20150327-CVE-2015-0658)

A vulnerability in DHCP code used with PowerOn Auto Provisioning POAP of Cisco NX-OS could allow an unauthenticated, adjacent attacker to inject arbitrary commands into the Cisco NX-OS device. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced...

Cisco Prime Collaboration Provisioning 10.6.x / 11.0.x < 11.0.0.815 Web Framework SQLi (cisco-sa-20151008-pcp)

According to its self-reported version number, the Cisco Prime Collaboration Provisioning PCP device is 10.6.x or 11.0.x prior to 11.0.0.582. It is, therefore, affected by a SQL injection vulnerability in the web framework component due to improper sanitization of user-supplied input before using...

The vulnerability of the SAP HANA database management system allows attackers to obtain confidential information or enhance their privileges.

The vulnerability of the Data Provisioning Agent component of the SAP HANA database management system arises from an improper restriction on access to the functions of the service. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain confidential information or...

The vulnerability of the SAP HANA database management system allows a hacker to trigger a service failure.

The vulnerability of the Data Provisioning Agent component of the SAP HANA database management system is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Uber: OneLogin authentication bypass on WordPress sites

First, I'm sorry about reporting another WordPress bug my intention was just to check if WP-OneLogin stores any sensitive info that could be used to attack OneLogin on your other websites. Overview The .uber.com WordPress sites use OneLogin SAML-SSO instead of the normal WordPress login. The...

Design/Logic Flaw

server/telecom/CallsManager.java in Telephony in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not properly consider whether a device is provisioned, which allows physically proximate attackers to bypass the Factory Reset Protection protection...

UBUNTU-CVE-2016-2423

server/telecom/CallsManager.java in Telephony in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not properly consider whether a device is provisioned, which allows physically proximate attackers to bypass the Factory Reset Protection protection...

SAP HANA Data Provisioning Agent Component Information Disclosure Vulnerability

SAP HANA is a high-performance, real-time data analytics platform. the Data Provisioning Agent is one of the components that provides monitoring and proxying capabilities. The DP Agent component of SAP HANA fails to properly restrict the use of service functions, allowing remote attackers to...

SAP HANA Data Provisioning Agent Component Denial of Service Vulnerability

SAP HANA is a high-performance, real-time data analytics platform. the Data Provisioning Agent is one of the components that provides monitoring and proxying capabilities. A security vulnerability exists in the DP Agent component of SAP HANA that allows remote attackers to submit special requests...

CVE-2016-4017

The Data Provisioning Agent aka DP Agent in SAP HANA allows remote attackers to cause a denial of service process crash via unspecified vectors, aka SAP Security Note 2262710...

CVE-2016-4018

The Data Provisioning Agent aka DP Agent in SAP HANA does not properly restrict access to service functionality, which allows remote attackers to obtain sensitive information, gain privileges, and conduct unspecified other attacks via unspecified vectors, aka SAP Security Note 2262742...

Information disclosure

The Data Provisioning Agent aka DP Agent in SAP HANA does not properly restrict access to service functionality, which allows remote attackers to obtain sensitive information, gain privileges, and conduct unspecified other attacks via unspecified vectors, aka SAP Security Note 2262742...

CVE-2016-4018

The SAP HANA Data Provisioning Agent (DP Agent) component is affected. The DP Agent fails to properly restrict access to its service functionality, enabling remote attackers to obtain sensitive information and potentially gain privileges via unspecified vectors. Root cause cited as insufficient a...

CVE-2016-4017

CVE-2016-4017 concerns SAP HANA’s Data Provisioning Agent (DP Agent). The vulnerability enables remote attackers to cause a denial of service (process crash) via unspecified vectors, as referenced by SAP Security Note 2262710. The Connected documents corroborate this description across multiple c...

CVE-2016-4018

The Data Provisioning Agent aka DP Agent in SAP HANA does not properly restrict access to service functionality, which allows remote attackers to obtain sensitive information, gain privileges, and conduct unspecified other attacks via unspecified vectors, aka SAP Security Note 2262742...

CVE-2016-4018: Improper Access Control

The Data Provisioning Agent aka DP Agent in SAP HANA does not properly restrict access to service functionality, which allows remote attackers to obtain sensitive information, gain privileges, and conduct unspecified other attacks via unspecified vectors, aka SAP Security Note 2262742...