CVE-2015-3722: Undefined Security Weakness

Application Store in Apple iOS before 8.4 does not ensure the uniqueness of bundle IDs, which allows attackers to cause a denial of service ID collision and launch outage via a crafted universal provisioning profile app...

CVE-2015-3725: Undefined Security Weakness

MobileInstallation in Apple iOS before 8.4 does not ensure the uniqueness of Watch bundle IDs, which allows attackers to cause a denial of service ID collision and Watch launch outage via a crafted universal provisioning profile app...

Apple Patches Dozens of Flaws in iOS 8.4, OS X 10.10.4

Apple has released new versions of iOS and OS X, both of which include a significant number of security patches, several for bugs that can lead to remote code execution and other serious issues. Version 8.4 of iOS contains fixes for more than 30 security vulnerabilities, including bugs in the iOS...

EMC Unified Infrastructure Manager/Provisioning authentication bypass

Authentication bypass if LDAP authentication is used...

PT-2015-1320

Name of the Vulnerable Software and Affected Versions EMC Unified Infrastructure Manager/Provisioning UIM/P version 4.1 Description The issue exists due to an error in the access control subsystem, allowing a remote attacker to bypass the authentication procedure via the LDAP service by providing...

CVE-2015-0546: Undefined Security Weakness

EMC Unified Infrastructure Manager/Provisioning UIM/P 4.1 allows remote attackers to bypass LDAP authentication by providing a valid account name...

Cisco NX-OS DHCP POAP Command Injection Vulnerability

The remote Cisco device is running a version of NX-OS software that is affected by a command injection vulnerability due to the PowerOn Auto Provisioning POAP feature not properly validating the DHCP options returned by POAP. An attacker on an adjacent network, using crafted DHCP packets, can...

HP Intelligent Provisioning information leakage

No description provided...

[security bulletin] HPSBGN03307 rev.1 - HP Intelligent Provisioning, Disclosure of Information

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04626732 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04626732 Version: 1 HPSBGN03307 rev....

HP Intelligent Provisioning Information Disclosure Vulnerability

HP Intelligent Provisioning is the server configuration tool. An information disclosure vulnerability exists in HP Intelligent Provisioning versions 1.40-1.60 on Windows 2008 R2 and Windows 2012 platforms. The vulnerability could be exploited by an attacker to obtain sensitive information...

CVE-2015-2111

Unspecified vulnerability in HP Intelligent Provisioning 1.40 through 1.60 on Windows Server 2008 R2 and 2012 allows local users to obtain sensitive information via unknown vectors...

CVE-2015-2111

Unspecified vulnerability in HP Intelligent Provisioning 1.40 through 1.60 on Windows Server 2008 R2 and 2012 allows local users to obtain sensitive information via unknown vectors...

Code injection

Unspecified vulnerability in HP Intelligent Provisioning 1.40 through 1.60 on Windows Server 2008 R2 and 2012 allows local users to obtain sensitive information via unknown vectors...

CVE-2015-2111

CVE-2015-2111 concerns HP Intelligent Provisioning. The connected HP security bulletin documents a disclosure-of-information vulnerability affecting HP Intelligent Provisioning versions 1.40–1.60 on Windows Server 2008 R2 and Windows Server 2012. The bulletin lists a Base Score of 5.0 (AV:L/AC:M/...

CVE-2015-2111

Unspecified vulnerability in HP Intelligent Provisioning 1.40 through 1.60 on Windows Server 2008 R2 and 2012 allows local users to obtain sensitive information via unknown vectors...

PT-2015-5616

Name of the Vulnerable Software and Affected Versions HP Intelligent Provisioning versions 1.40 through 1.60 Description The issue allows local users to obtain sensitive information via unknown vectors. Recommendations For HP Intelligent Provisioning versions 1.40 through 1.60, update to a versio...

CVE-2015-2111: Undefined Security Weakness

Unspecified vulnerability in HP Intelligent Provisioning 1.40 through 1.60 on Windows Server 2008 R2 and 2012 allows local users to obtain sensitive information via unknown vectors...

Cisco NX-OS PowerOn Auto Provisioning (POAP) Arbitrary Command Execution Vulnerability

Cisco NX-OS software is a data center-class operating system that embodies modular design, perpetuity, and maintainability. The Cisco NX-OS PowerOn Auto Provisioning POAP DHCP code fails to properly restrict the initialization process, allowing remote attackers to send specially crafted answer...

CVE-2015-0658: Improper Input Validation

The DHCP implementation in the PowerOn Auto Provisioning POAP feature in Cisco NX-OS does not properly restrict the initialization process, which allows remote attackers to execute arbitrary commands as root by sending crafted response packets on the local network, aka Bug ID CSCur14589...

EMC Secure Remote Services Virtual Edition SQL Injection

------------------------------------------------------------------------ EMC Secure Remote Services Virtual Edition Provisioning component is affected by SQL injection ------------------------------------------------------------------------ Han Sahin, November 2014...