Lucene search
+L

464 matches found

NVD
NVD
•added 2017/08/14 10:29 p.m.•37 views

CVE-2017-1190

IBM Emptoris Strategic Supply Management Platform 10.x and 10.1 could allow a local user with special access roles to execute arbitrary code on the system. By manipulating a configurable property, an attacker could exploit this vulnerability to gain full control over the system. IBM X-Force ID:...

6.4CVSS6.8AI score0.0033EPSS
SaveExploits0References2
Prion
Prion
•added 2017/07/13 3:29 p.m.•25 views

Cross site scripting

IBM Emptoris Strategic Supply Management Platform 10.0.0.x through 10.1.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trust...

3.5CVSS6.1AI score0.00729EPSS
SaveExploits0References3Affected Software1
Prion
Prion
•added 2017/07/13 3:29 p.m.•21 views

Cross site scripting

IBM Emptoris Strategic Supply Management Platform 10.0.0.x through 10.1.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trust...

3.5CVSS6.1AI score0.00729EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2017/07/13 3:29 p.m.•23 views

CVE-2016-8952

IBM Emptoris Strategic Supply Management Platform 10.0.0.x through 10.1.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trust...

5.4CVSS5.2AI score0.00729EPSS
SaveExploits0References3
CVE
CVE
•added 2017/07/13 3:00 p.m.•65 views

CVE-2016-8952

CVE-2016-8952 affects IBM Emptoris Strategic Supply Management Platform 10.0.0.x through 10.1.1.x. It describes a cross-site scripting vulnerability that allows an attacker to inject arbitrary JavaScript into the Web UI, potentially leading to credentials disclosure within a trusted session. The ...

5.4CVSS5.2AI score0.00729EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2016/03/09 8:59 p.m.•27 views

CVE-2016-1312

The HTTPS inspection engine in the Content Security and Control Security Services Module CSC-SSM 6.6 before 6.6.1164.0 for Cisco ASA 5500 devices allows remote attackers to cause a denial of service memory consumption or device reload via a flood of HTTPS packets, aka Bug ID CSCue76147...

7.8CVSS7.5AI score0.02868EPSS
SaveExploits0References3
CVE
CVE
•added 2016/03/09 8:00 p.m.•65 views

CVE-2016-1312

The CVE-2016-1312 issue affects Cisco ASA 5500-series devices with the Content Security and Control Security Services Module (CSC-SSM) HTTPS inspection engine. The vulnerability is due to improper handling of a high rate of HTTPS packets, enabling an unauthenticated, remote attacker to cause memo...

7.8CVSS7.4AI score0.02868EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2016/03/09 12:00 a.m.•6 views

PT-2016-4702

Name of the Vulnerable Software and Affected Versions Content Security and Control Security Services Module CSC-SSM versions 6.6 through 6.6 before 6.6.1164.0 for Cisco ASA 5500 devices Description The issue allows remote attackers to cause a denial of service, resulting in memory consumption or...

7.8CVSS0.02868EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/03/09 12:00 a.m.•6 views

CVE-2016-1312: Improper Restriction of Operations within the Bounds of a Memory Buffer

The HTTPS inspection engine in the Content Security and Control Security Services Module CSC-SSM 6.6 before 6.6.1164.0 for Cisco ASA 5500 devices allows remote attackers to cause a denial of service memory consumption or device reload via a flood of HTTPS packets, aka Bug ID CSCue76147...

7.8CVSS7.2AI score0.02868EPSS
SaveExploits0References3
CVE
CVE
•added 2015/05/01 3:00 p.m.•83 views

CVE-2015-3435

CVE-2015-3435 affects Samsung Security Manager (SSM) prior to 1.31. The vulnerability allows remote attackers to upload a file via HTTP PUT or HTTP MOVE, leading to arbitrary code execution on the server. Multiple sources describe the impact as remote code execution with SYSTEM privileges, effect...

10CVSS7.8AI score0.10236EPSS
SaveExploits2References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/05/01 12:00 a.m.•9 views

CVE-2015-3435: Undefined Security Weakness

Samsung Security Manager SSM before 1.31 allows remote attackers to execute arbitrary code by uploading a file with an HTTP 1 PUT or 2 MOVE request...

10CVSS6.5AI score0.10236EPSS
SaveExploits2References2
Prion
Prion
•added 2013/06/05 3:43 a.m.•20 views

Buffer overflow

Multiple buffer overflows in IBM Tivoli Netcool System Service Monitors SSM and Application Service Monitors ASM 4.0.0 before FP14 and 4.0.1 before FP1 allow context-dependent attackers to execute arbitrary code or cause a denial of service via a long line in 1 hrfstable.idx, 2 hrdevice.idx, 3...

7.6CVSS8.2AI score0.02966EPSS
SaveExploits0References2Affected Software2
CVE
CVE
•added 2013/06/05 1:00 a.m.•59 views

CVE-2013-0508

The CVE-2013-0508 entry covers multiple buffer overflows in IBM Tivoli Netcool System Service Monitors (SSM) and Application Service Monitors (ASM) versions 4.0.0 before FP14 and 4.0.1 before FP1. The vulnerability arises from processing abnormally long lines in specific files: hrfstable.idx, hrd...

7.6CVSS7.9AI score0.02966EPSS
SaveExploits0References2Affected Software2
Positive Technologies
Positive Technologies
•added 2013/06/05 12:00 a.m.•7 views

PT-2013-2393

Name of the Vulnerable Software and Affected Versions IBM Tivoli Netcool System Service Monitors SSM and Application Service Monitors ASM versions 4.0.0 through 4.0.0 FP13 IBM Tivoli Netcool System Service Monitors SSM and Application Service Monitors ASM version 4.0.1 through 4.0.1 FP0 Descripti...

7.6CVSS0.02966EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2013/06/05 12:00 a.m.•3 views

PT-2013-2394

Name of the Vulnerable Software and Affected Versions IBM Tivoli Netcool System Service Monitors SSM and Application Service Monitors ASM versions 4.0.0 through 4.0.0 FP13 Description The issue is related to a buffer overflow in the Transaction MIB agent. This occurs when a SQL transaction with a...

7.6CVSS0.07211EPSS
SaveExploits0References3
securityvulns
securityvulns
•added 2012/02/03 12:00 a.m.•82 views

Mozilla Foundation Security Advisory 2012-05

Mozilla Foundation Security Advisory 2012-05 Title: Frame scripts calling into untrusted objects bypass security checks Impact: Critical Announced: January 31, 2012 Reporter: mozbugra4 Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 10.0 Thunderbird 10.0 SeaMonkey 2.7 Description...

4.3CVSS1.1AI score0.0155EPSS
SaveExploits0
The Hacker News
The Hacker News
•added 2011/04/30 7:37 p.m.•12 views

Mallika sherawat's Official Website, SSM College hacked by Hackethis29

Mallika sherawat's Official Website, SSM College hacked by Hackethis29 Hacked Sites :...

7AI score
SaveExploits0
Prion
Prion
•added 2010/02/19 5:30 p.m.•29 views

Code injection

Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.08.10, 7.2 before 7.24.45, 8.0 before 8.04.44, 8.1 before 8.12.35, and 8.2 before 8.21.10 allows remote attackers to cause a denial of service device reload via a malformed TCP segment when certain NAT...

7.1CVSS7.1AI score0.0252EPSS
SaveExploits0References7Affected Software1
NVD
NVD
•added 2010/02/19 5:30 p.m.•32 views

CVE-2010-0566

Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.08.10, 7.2 before 7.24.45, 8.0 before 8.04.44, 8.1 before 8.12.35, and 8.2 before 8.21.10 allows remote attackers to cause a denial of service device reload via a malformed TCP segment when certain NAT...

7.1CVSS6.5AI score0.0252EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/02/19 12:00 a.m.•7 views

CVE-2010-0566: Undefined Security Weakness

Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.08.10, 7.2 before 7.24.45, 8.0 before 8.04.44, 8.1 before 8.12.35, and 8.2 before 8.21.10 allows remote attackers to cause a denial of service device reload via a malformed TCP segment when certain NAT...

7.1CVSS5.9AI score0.0252EPSS
SaveExploits0References1
Rows per page
Query Builder