78 matches found
CVE-2019-13163
The Fujitsu TLS library allows a man-in-the-middle attack. This affects Interstage Application Development Cycle Manager V10 and other versions, Interstage Application Server V12 and other versions, Interstage Business Application Manager V2 and other versions, Interstage Information Integrator V...
CVE-2017-18197
In mxGraphViewImageReader.java in mxGraph before 3.7.6, the SAXParserFactory instance in convert is missing flags to prevent XML External Entity XXE attacks, as demonstrated by /ServerView...
CVE-2017-18197
In mxGraphViewImageReader.java in mxGraph before 3.7.6, the SAXParserFactory instance in convert is missing flags to prevent XML External Entity XXE attacks, as demonstrated by /ServerView...
CVE-2014-3898
Cross-site scripting XSS vulnerability in Fujitsu ServerView Operations Manager 5.00.09 through 6.30.05 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in Fujitsu ServerView Operations Manager 5.00.09 through 6.30.05 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-3898
CVE-2014-3898 affects Fujitsu ServerView Operations Manager (V5.00.09–V6.30.05). It is a cross-site scripting (XSS) vulnerability allowing remote attackers to inject arbitrary scripts via unspecified vectors, potentially executing in the user’s browser. Remediation guidance in connected sources a...
CVE-2014-3898
Cross-site scripting XSS vulnerability in Fujitsu ServerView Operations Manager 5.00.09 through 6.30.05 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
ServerView Operations Manager vulnerable to cross-site scripting
Overview ServerView Operations Manager provided by FUJITSU LIMITED is server management software. ServerView Operations Manager contains a cross-site scripting vulnerability. TAIZO TSUKAMOTO of GLOBAL SECURITY EXPERTS inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the develop...
Fujitsu ServerView <= 4.50.8 DBASCIIAccess Remote Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/24762/info Fujitsu ServerView is prone to a remote command-execution vulnerability because it fails to adequately sanitize user-supplied data. Attackers can exploit this issue to execute arbitrary commands with the...
ServerView Server Detection
Binary data 6957.prm...
Stack overflow
Multiple stack-based buffer overflows in the ServerView web interface SnmpGetMibValues.exe in Fujitsu Siemens Computers ServerView 04.60.07 and earlier allow remote authenticated users to execute arbitrary code via a crafted URL...
CVE-2008-3126
Multiple stack-based buffer overflows in the ServerView web interface SnmpGetMibValues.exe in Fujitsu Siemens Computers ServerView 04.60.07 and earlier allow remote authenticated users to execute arbitrary code via a crafted URL...
CVE-2008-3126
Multiple stack-based buffer overflows in the ServerView web interface SnmpGetMibValues.exe in Fujitsu Siemens Computers ServerView 04.60.07 and earlier allow remote authenticated users to execute arbitrary code via a crafted URL...
CVE-2008-3126
The CVE-2008-3126 issue affects Fujitsu Siemens Computers ServerView (04.60.07 and earlier), specifically the ServerView web interface component SnmpGetMibValues.exe. The root cause is multiple stack-based buffer overflows that allow remote authenticated users to execute arbitrary code via a craf...
KLA10323 ACE vulnerabilities ServerView
A buffer overflow was found in ServerView. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed URL. Original advisories - Related products ServerView CVE list CVE-2008-3126 high Solution Update to lates...
ServerView 'SnmpGetMibValues.exe'多个未明缓冲区溢出漏洞
BUGTRAQ ID: 30081 CNCAN ID:CNCAN-2008070706 Fujitsu ServerView是一款用于进行自动分析和版本维护的资产管理工具。 Fujitsu ServerView不正确检查用户提交的数据,远程攻击者可以利用漏洞进行缓冲区溢出攻击,可能以应用程序权限执行任意指令。 目前没有详细漏洞细节提供。 Fujitsu ServerView 4.60.7 可联系供应商获得补丁信息:...
ServerView cross-site scripting vulnerability
Overview ServerView, server-monitoring software included with Fujitsu servers, contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution None...
ServerView directory traversal vulnerability
Overview ServerView, server monitoring software included in Fujitsu servers, contains a directory traversal vulnerability. Impact A remote attacker could view particular files on the server. Solution None...
fujitsu-serverview-exec.txt
Advisory: Fujitsu-Siemens ServerView Remote Command Execution RedTeam Pentesting discovered a remote command execution in the Fujitsu- Siemens ServerView during a penetration test. The DBAsciiAccess CGI script is vulnerable to a remote command execution because of a parameter which is not properl...
ServerView Servername Parameter Arbitrary Command Execution
The remote host is running ServerView, a web-based suite of asset management tools. The version of ServerView installed on the remote host fails to sanitize user-supplied input to the 'Servername' parameter of the 'SnmpView/SnmpListMibValues' script before using it to execute a shell command. An...