HP Service Manager 9.30.x / 9.31.x / 9.32.x / 9.33.x / 9.34.x / 9.35.x < 9.35.6007 / 9.40.x / 9.41.x < 9.41.6000 / 9.50.x / 9.51.x Remote SQL Injection

The HP Service Manager application running on the remote host is version 9.30.x; 9.31.x; 9.32.x; 9.33.x; 9.34.x; 9.35.x prior to 9.35.6007; 9.40.x; 9.41.x prior to 9.41.6000; 9.50.x; or 9.51.x. It is, therefore, affected by an SQL injection vulnerability. Note that Nessus has not tested for these...

HP Service Manager SQL Injection Vulnerability

HP Service Manager is a cloud-based help desk management solution that helps organizations handle change and incident management. An SQL injection vulnerability exists in HP Service Manager. The vulnerability arises because the Service Manager web tier does not properly validate user-supplied...

IBM Tivoli Business Service Manager Information Disclosure Vulnerability

IBM Tivoli Business Service Manager is a suite of enterprise-class business service management BSM solutions from IBM in the United States. The solution provides real-time service visibility and health indicators, multiple KPI historical time analysis and tracking, and more. An information...

CVE-2016-0286

IBM Tivoli Business Service Manager 6.1.0 before 6.1.0-TIV-BSM-FP0004 and 6.1.1 before 6.1.1-TIV-BSM-FP0004 allows remote authenticated users to obtain administrator passwords by leveraging unspecified privileges. BM X-Force ID: 111234...

CVE-2016-0286

IBM Tivoli Business Service Manager 6.1.0 before 6.1.0-TIV-BSM-FP0004 and 6.1.1 before 6.1.1-TIV-BSM-FP0004 allows remote authenticated users to obtain administrator passwords by leveraging unspecified privileges. BM X-Force ID: 111234...

CVE-2016-0286

IBM Tivoli Business Service Manager (TBSM) 6.1.0 before 6.1.0-TIV-BSM-FP0004 and 6.1.1 before 6.1.1-TIV-BSM-FP0004 contains an information-disclosure vulnerability. An authenticated user with specific privileges could trigger exposure of the administrator password by manipulating the communicatio...

CVE-2016-0286: Exposure of Sensitive Information to an Unauthorized Actor

IBM Tivoli Business Service Manager 6.1.0 before 6.1.0-TIV-BSM-FP0004 and 6.1.1 before 6.1.1-TIV-BSM-FP0004 allows remote authenticated users to obtain administrator passwords by leveraging unspecified privileges. BM X-Force ID: 111234...

PT-2018-4600

Name of the Vulnerable Software and Affected Versions IBM Tivoli Business Service Manager versions 6.1.0 through 6.1.0-TIV-BSM-FP0003 IBM Tivoli Business Service Manager versions 6.1.1 through 6.1.1-TIV-BSM-FP0003 Description The issue allows remote authenticated users to obtain administrator...

[SECURITY] Fedora 27 Update: systemd-234-10.git5f8984e.fc27

systemd is a system and service manager that runs as PID 1 and starts the rest of the system. It provides aggressive parallelization capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, keeps track of processes using Linux control groups,...

IBM Tivoli Business Service Manager Cross-Site Scripting Vulnerability (CNVD-2018-02991)

IBM Tivoli Business Service Manager is a suite of enterprise-class business service management BSM solutions from IBM in the United States. The solution provides real-time service visibility and health indicators, multiple KPI historical time analysis and tracking, and more. A cross-site scriptin...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Tivoli Business Service Manager 6.1.0 before 6.1.0-TIV-BSM-FP0004 and 6.1.1 before 6.1.1-TIV-BSM-FP0004 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 111480...

CVE-2016-0311

Cross-site scripting XSS vulnerability in IBM Tivoli Business Service Manager 6.1.0 before 6.1.0-TIV-BSM-FP0004 and 6.1.1 before 6.1.1-TIV-BSM-FP0004 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 111480...

CVE-2016-0311: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Tivoli Business Service Manager 6.1.0 before 6.1.0-TIV-BSM-FP0004 and 6.1.1 before 6.1.1-TIV-BSM-FP0004 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 111480...

PT-2018-4606

Name of the Vulnerable Software and Affected Versions IBM Tivoli Business Service Manager versions 6.1.0 through 6.1.0-TIV-BSM-FP0003 IBM Tivoli Business Service Manager versions 6.1.1 through 6.1.1-TIV-BSM-FP0003 Description A cross-site scripting XSS issue allows remote attackers to inject...

CVE-2017-13209

In the ServiceManager::add function in the hardware service manager, there is an insecure permissions check based on the PID of the caller which could allow an application or service to replace a HAL service with its own service. This could lead to a local elevation of privilege enabling code...

Privilege escalation

In the ServiceManager::add function in the hardware service manager, there is an insecure permissions check based on the PID of the caller which could allow an application or service to replace a HAL service with its own service. This could lead to a local elevation of privilege enabling code...

CVE-2017-13209

This CVE (CVE-2017-13209) affects Android 8.0–8.1 and is due to an insecure permissions check in ServiceManager::add of the hardware service manager. The check based on the caller’s PID could allow an application or service to replace a HAL service with its own, enabling local elevation of privil...

CVE-2017-13209

In the ServiceManager::add function in the hardware service manager, there is an insecure permissions check based on the PID of the caller which could allow an application or service to replace a HAL service with its own service. This could lead to a local elevation of privilege enabling code...

Android - Hardware Service Manager Arbitrary Service Replacement due to getpidcon Exploit

Exploit for Android platform in category dos / poc This bug is similar to Jann Horn's issue https://bugs.chromium.org/p/project-zero/issues/detail?id=851 -- credit should go to him. The hardware service manager allows the registration of HAL services. These services are used by the vendor domain...

Android - Hardware Service Manager Arbitrary Service Replacement due to getpidcon

Android - Hardware Service Manager Arbitrary Service Replacement due to getpidcon This bug is similar to Jann Horn's issue https://bugs.chromium.org/p/project-zero/issues/detail?id=851 -- credit should go to him. The hardware service manager allows the registration of HAL services. These services...