Information disclosure

Tollgrade SmartGrid LightHouse Sensor Management System SMS Software EMS before 5.1, and 4.1.0 Build 16, allows remote attackers to obtain sensitive report and username information via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Tollgrade SmartGrid LightHouse Sensor Management System SMS Software EMS before 5.1, and 4.1.0 Build 16, allows remote attackers to hijack the authentication of arbitrary users...

CVE-2016-0865

The CVE-2016-0865 entry concerns Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1 and 4.1.0 Build 16. Affected component is the web-based SMS EMS; the root cause is insecure credential handling that allows a remote authenticated user to change arbitrary passwo...

CVE-2016-0863

The vulnerability CVE-2016-0863 affects Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS prior to 5.1 and 4.1.0 Build 16. It is a Cross-Site Request Forgery (CSRF) flaw that allows an attacker to perform actions on an authenticated session, effectively hijacking user aut...

CVE-2016-0864

Tollgrade SmartGrid LightHouse Sensor Management System SMS Software EMS before 5.1, and 4.1.0 Build 16, allows remote attackers to obtain sensitive report and username information via unspecified vectors...

CVE-2016-0866

The CVE-2016-0866 entry maps to a Cross-site Scripting (XSS) vulnerability in Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS prior to 5.1 and 4.1.0 Build 16. Affected product: LightHouse EMS web server; vulnerability arises from improper input handling, enabling remote...

CVE-2016-0865

Tollgrade SmartGrid LightHouse Sensor Management System SMS Software EMS before 5.1, and 4.1.0 Build 16, allows remote authenticated users to change arbitrary passwords via unspecified vectors...

CVE-2016-0866

Cross-site scripting XSS vulnerability in Tollgrade SmartGrid LightHouse Sensor Management System SMS Software EMS before 5.1, and 4.1.0 Build 16, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-0864

The CVE-2016-0864 entry concerns Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS prior to 5.1 and 4.1.0 Build 16. It describes an information disclosure vulnerability where remote attackers can obtain sensitive reports and usernames. Public sources in connected document...

CVE-2016-0863: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Tollgrade SmartGrid LightHouse Sensor Management System SMS Software EMS before 5.1, and 4.1.0 Build 16, allows remote attackers to hijack the authentication of arbitrary users...

CVE-2016-0865: Undefined Security Weakness

Tollgrade SmartGrid LightHouse Sensor Management System SMS Software EMS before 5.1, and 4.1.0 Build 16, allows remote authenticated users to change arbitrary passwords via unspecified vectors...

CVE-2016-0866: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Tollgrade SmartGrid LightHouse Sensor Management System SMS Software EMS before 5.1, and 4.1.0 Build 16, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-0864: Exposure of Sensitive Information to an Unauthorized Actor

Tollgrade SmartGrid LightHouse Sensor Management System SMS Software EMS before 5.1, and 4.1.0 Build 16, allows remote attackers to obtain sensitive report and username information via unspecified vectors...

PT-2016-4429

Name of the Vulnerable Software and Affected Versions Tollgrade SmartGrid LightHouse Sensor Management System SMS Software EMS versions prior to 5.1 Tollgrade SmartGrid LightHouse Sensor Management System SMS Software EMS version 4.1.0 Build 16 Description The issue is related to a cross-site...

PT-2016-4428

Name of the Vulnerable Software and Affected Versions Tollgrade SmartGrid LightHouse Sensor Management System SMS Software EMS versions prior to 5.1 Tollgrade SmartGrid LightHouse Sensor Management System SMS Software EMS version 4.1.0 Build 16 Description The issue allows remote authenticated...

PT-2016-4426

Name of the Vulnerable Software and Affected Versions Tollgrade SmartGrid LightHouse Sensor Management System SMS Software EMS versions prior to 5.1 Tollgrade SmartGrid LightHouse Sensor Management System SMS Software EMS version 4.1.0 Build 16 Description A cross-site request forgery CSRF issue...

PT-2016-4427

Name of the Vulnerable Software and Affected Versions Tollgrade SmartGrid LightHouse Sensor Management System SMS Software EMS versions prior to 5.1 Tollgrade SmartGrid LightHouse Sensor Management System SMS Software EMS version 4.1.0 Build 16 Description The issue allows remote attackers to...