9778 matches found
CVE-2017-3968 McAfee Network Security Management (NSM) and Network Data Loss Prevention (NDLP)- Password recovery exploitation vulnerability
Session fixation vulnerability in the web interface in McAfee Network Security Manager NSM before 8.2.7.42.2 and McAfee Network Data Loss Prevention NDLP before 9.3.4.1.5 allows remote attackers to disclose sensitive information or manipulate the database via a crafted authentication cookie...
Design/Logic Flaw
Password recovery exploitation vulnerability in the non-certificate-based authentication mechanism in McAfee Network Security Management NSM before 8.2.7.42.2 allows attackers to crack user passwords via unsalted hashes...
CVE-2017-3962 McAfee Network Security Management (NSM) - Password recovery exploitation vulnerability
Password recovery exploitation vulnerability in the non-certificate-based authentication mechanism in McAfee Network Security Management NSM before 8.2.7.42.2 allows attackers to crack user passwords via unsalted hashes...
CVE-2017-3962
The CVE concerns McAfee Network Security Management (NSM) where the non-certificate-based authentication mechanism allows password recovery exploitation. Affected product/version: NSM prior to 8.2.7.42.2. Root cause: unsalted hashes enabling attackers to crack user passwords. Impact: password com...
Amazon Linux 2 : thunderbird (ALAS-2018-1032)
The following CVEs are fixed in the updated thunderbird package : CVE-2018-5161 : Hang via malformed headers CVE-2018-5162 : Encrypted mail leaks plaintext through src attribute CVE-2018-5183 : Backport critical security fixes in Skia CVE-2018-5155 : Use-after-free with SVG animations and text...
CVE-2018-0319
A vulnerability in the password recovery function of Cisco Prime Collaboration Provisioning PCP could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to insufficient validation of a password recovery request. An attacker could...
Input validation
A vulnerability in the password recovery function of Cisco Prime Collaboration Provisioning PCP could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to insufficient validation of a password recovery request. An attacker could...
CVE-2018-0319
A vulnerability in the password recovery function of Cisco Prime Collaboration Provisioning PCP could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to insufficient validation of a password recovery request. An attacker could...
CVE-2018-0319
A vulnerability in the password recovery function of Cisco Prime Collaboration Provisioning PCP could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to insufficient validation of a password recovery request. An attacker could...
CVE-2018-0319
A vulnerability in the password recovery function of Cisco Prime Collaboration Provisioning PCP could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to insufficient validation of a password recovery request. An attacker could...
CVE-2018-0319
CVE-2018-0319 affects Cisco Prime Collaboration Provisioning (PCP) Password Recovery. The root cause is insufficient validation of a password recovery request, allowing an unauthenticated remote attacker to submit a recovery request, change the password for any user, and potentially gain administ...
Cisco Prime Collaboration Provisioning Password Recovery Vulnerability
Cisco Prime Collaboration Provisioning PCP is a reliable and scalable Web-based provisioning solution for managing your company's critical next-generation communications services. A password recovery vulnerability exists in Cisco Prime Collaboration Provisioning. The vulnerability stems from...
Cisco Prime Collaboration Provisioning Unauthorized Password Recovery Vulnerability
A vulnerability in the password recovery function of Cisco Prime Collaboration Provisioning PCP could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to insufficient validation of a password recovery request. An attacker could...
Item is not suitable for restore
Upon attempt to recover LVM PV or LV from backup using Agent for Linux recovery media ‘Item is not suitable for restore’ error is thrown if ‘Restore whole disk from…’ option is selected for target dis...
Quest DR Series Disk Backup Software Elevation of Privilege Vulnerability (CNVD-2018-15897)
The Quest DR Series are disk storage and deduplication appliances. An elevation of privilege vulnerability exists in versions of Quest DR Series disk backup software prior to 4.0.3.1. An attacker can exploit this vulnerability to elevate privileges from web server user to root via setsid...
Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15864)
The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the updateRegisterDR2000v method in Quest DR Series disk backup software versions prior to 4.0.3.1. An attacker could exploit this vulnerability to execute commands...
Quest DR Series Disk Backup Software Elevation of Privilege Vulnerability
The Quest DR Series are disk storage and deduplication appliances. An elevation of privilege vulnerability exists in versions of Quest DR Series disk backup software prior to 4.0.3.1. An attacker can exploit this vulnerability to elevate privileges from web server user to root via ocashell...
Bitmain Antminer D3, L3+ and S9 Code Execution Vulnerabilities
The Bitmain Antminer D3, L3+, and S9 are all mining equipment used to mine bitcoins from China's Bitmain Bitmain Technologies. A security vulnerability exists in the Bitmain Antminer D3, L3+ and S9. The vulnerability can be exploited by a remote attacker to execute code with the aid of the system...
Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15877)
The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the "Email Relay Host Update" method in Quest DR Series Disk Backup Software versions prior to 4.0.3.1. The vulnerability can be exploited to execute commands via the 'hostname' request...