930 matches found
CVE-2017-12819
CVE-2017-12819 refers to remote manipulation of the Gemalto SafeNet Sentinel language-pack updater, enabling NTLM-relay attacks for the system user in HASP SRM, Sentinel HASP and Sentinel LDK before Sentinel LDK RTE 7.55. Connected advisories corroborate remote NTLM-relay risk and advise upgradin...
CVE-2017-11497
Stack buffer overflow in hasplms in Gemalto ACC Admin Control Center, all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote attackers to execute arbitrary code via language packs containing filenames longer than 1024 characters...
CVE-2017-11496
Stack buffer overflow in hasplms in Gemalto ACC Admin Control Center, all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote attackers to execute arbitrary code via malformed ASN.1 streams in V2C and similar input files...
CVE-2017-11498
Buffer overflow in hasplms in Gemalto ACC Admin Control Center, all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote attackers to shut down the remote process a denial of service via a language pack ZIP file with invalid HTML files...
CVE-2017-11498
Buffer overflow in hasplms in Gemalto ACC Admin Control Center, all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote attackers to shut down the remote process a denial of service via a language pack ZIP file with invalid HTML files...
PT-2017-12711
Name of the Vulnerable Software and Affected Versions Sentinel LDK versions prior to 7.55 HASP SRM versions prior to 7.55 Sentinel HASP versions prior to 7.55 Description The issue is related to memory corruption in Gemalto's products, which might lead to remote code execution. Recommendations Fo...
PT-2017-12709
Name of the Vulnerable Software and Affected Versions Sentinel LDK versions prior to 7.55 HASP SRM versions prior to 7.55 Sentinel HASP versions prior to 7.55 Description The issue allows remote manipulations with the language pack updater, leading to an NTLM-relay attack for the system user. Thi...
PT-2017-12712
Name of the Vulnerable Software and Affected Versions Sentinel LDK versions prior to 7.55 HASP SRM affected versions not specified Sentinel HASP affected versions not specified Description The issue allows for remote enabling and disabling of the admin interface in Gemalto's products, leading to...
PT-2017-12708
Name of the Vulnerable Software and Affected Versions Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products versions prior to 7.55 Description The issue is related to a stack overflow in a custom XML-parser, which can lead to a remote denial of service. Recommendations For versions prior to...
CVE-2017-11496
Stack buffer overflow in hasplms in Gemalto ACC Admin Control Center, all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote attackers to execute arbitrary code via malformed ASN.1 streams in V2C and similar input files...
CVE-2017-11498
Buffer overflow in hasplms in Gemalto ACC Admin Control Center, all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote attackers to shut down the remote process a denial of service via a language pack ZIP file with invalid HTML files...
PT-2017-3349
Name of the Vulnerable Software and Affected Versions Sentinel LDK RTE versions prior to 7.55 Gemalto's HASP SRM and Sentinel HASP affected versions not specified Description The issue is caused by an arbitrary memory read from a controlled memory pointer, which can lead to a remote denial of...
CVE-2017-12731
A SQL Injection issue was discovered in OPW Fuel Management Systems SiteSentinel Integra 100, SiteSentinel Integra 500, and SiteSentinel iSite ATG consoles with the following software versions: older than V175, V175-V189, V191-V195, and V16Q3.1. The application is vulnerable to injection of...
OPW Fuel Management Systems SiteSentinel Integra and SiteSentinel iSite SQL Injection Vulnerabilities
The SiteSentinel Integra 100, SiteSentinel Integra 500 and SiteSentinel iSite ATG are products that provide tank monitoring capabilities for OPW's fuel management system. An SQL injection vulnerability exists in OPW Fuel Management Systems SiteSentinel Integra and SiteSentinel iSite, which can be...
dealerspecials.sun-sentinel.com XSS vulnerability
Vulnerable URL: http://dealerspecials.sun-sentinel.com/places/search/type:1/maxprice:0/maxmiles:0/make:Toyota/model:Sienna/services:0/dealer:0%22%27%2D%2D%21 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.08.2017 Vulnerability type:| XSS Vulnerability status:| Public...
NetIQ iManager and NetIQ eDirectory MD5 Hash Algorithm Vulnerabilities
NetIQ iManager and NetIQ eDirectory are both products of the American company NetIQ formerly Novell. The former is a WEB-based application that can manage and configure eDirectory objects using wireless devices. The latter is an identity management infrastructure platform that combines identity...
NetIQ Sentinel Server Denial of Service Vulnerability
NetIQ Sentinel Server is a security information and event management tool. NetIQ Sentinel Server 8.0 prior to version 8.0.1 has a security vulnerability that can lead to information disclosure and remote denial of service...
NetIQ Sentinel Server Information Disclosure Vulnerability
NetIQ Sentinel Server is a security information and event management tool. NetIQ Sentinel Server 8.0 prior to version 8.0.1 has a security vulnerability that can lead to information disclosure account enumeration...
Sentinel Server Leakage of Information and Remote Denial of Service Issue
A vulnerability was discovered in NetIQ Sentinel Server that may allow leakage of information and remote denial of service. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
