Lucene search
+L

987 matches found

Check Point Advisories
Check Point Advisories
added 2015/11/11 12:0 a.m.21 views

IBM Tivoli Storage Manager FastBack Server FXCLI_OraBR_Exec_Command Buffer Overflow (CVE-2015-1929)

A buffer overflow vulnerability exists in IBM Tivoli Storage Manager FastBack Server. The vulnerability is due to insufficient boundary checking while processing remote requests within the FXCLIOraBRExecCommand function. A remote unauthenticated attacker could exploit this vulnerability by sendin...

7.8CVSS9.6AI score0.03254EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2015/10/05 12:0 a.m.18 views

(0Day) Agilent Technologies 2100 Expert CSDispatcher.exe Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Agilent Technologies 2100 Expert. Authentication is not required to exploit this vulnerability. The specific flaw exists within the CSDispatcher.exe process, which listens on port 3434. By sending ...

10CVSS7.5AI score
SaveExploits0References1
CNVD
CNVD
added 2015/10/03 12:0 a.m.7 views

Apple OS X IOHIDFamily Memory Corruption Vulnerability

Apple OS X is an operating system developed by Apple Inc. A memory corruption vulnerability exists in Apple OS X IOHIDFamily, which can be exploited by a local attacker to execute arbitrary code in the system context...

9.3CVSS7.5AI score0.02619EPSS
SaveExploits0References1
Check Point Advisories
Check Point Advisories
added 2015/09/29 12:0 a.m.2 views

ManageEngine Multiple Products It360SPUtil resIds SQL Injection

An SQL injection vulnerability has been reported in ManageEngine Applications Manager and ManageEngine IT360 MSP Edition. This vulnerability is due to the insufficient validation of user-supplied input when processing requests sent to the It360SPUtil class. A remote, unauthenticated attacker can...

3.3AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2015/09/02 12:0 a.m.57 views

(0Day) Borland AccuRev Reprise License Server service_setup_doit Command Stack Buffer Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Borland AccuRev. Authentication is not required to exploit this vulnerability. The specific flaw exists within the servicestartupdoit functionality of the Reprise License Manager service. The issue...

9.3CVSS7AI score0.19984EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
added 2015/09/02 12:0 a.m.21 views

(0Day) Borland AccuRev Reprise License Server diagnostics_doit Command outputfile Parameter File Overwrite Denial of Service Vulnerability

This vulnerability allows remote attackers to overwrite arbitrary files on vulnerable installations of Borland AccuRev. Authentication is not required to exploit this vulnerability. The specific flaw exists within the diagonosticdoit command of the AccuRev Reprise License Manager service. The iss...

7.1CVSS6.7AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2015/09/02 12:0 a.m.28 views

(0Day) Borland AccuRev Reprise License Server edit_lf_process Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Borland AccuRev. Authentication is not required to exploit this vulnerability. The specific flaw exists within the editlfprocess resource of the AccuRev Reprise License Manager service. The issue...

8.8CVSS7.6AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2015/09/02 12:0 a.m.36 views

(0Day) Borland AccuRev Reprise License Server activate_doit Command actserver Parameter Stack Buffer Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Borland AccuRev. Authentication is not required to exploit this vulnerability. The specific flaw exists within the activatedoit function of the service. The issue lies in the handling of the...

9.3CVSS7AI score0.19984EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
added 2015/07/30 12:0 a.m.31 views

IBM Tivoli Storage Manager FastBack Server Opcode 1365 Files Restore Agents Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Tivoli Storage Manager FastBack. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of opcode 1365. By sending a crafted packet on TCP...

10CVSS7.4AI score0.08979EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2015/07/30 12:0 a.m.27 views

IBM Tivoli Storage Manager FastBack Server Opcode 4115 Stack Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Tivoli Storage Manager FastBack. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of opcode 4115. By sending a crafted packet on TCP...

10CVSS7.3AI score0.08979EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2015/07/14 12:0 a.m.118 views

Adobe Reader ARMSvc Elevation of Privilege Vulnerability

This vulnerability allows local attackers to elevate privileges on vulnerable installations of Adobe Reader. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ARMSvc service. An attacker can force the service to overwrite the Adobe updater with any...

6.9CVSS6.2AI score0.0107EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2015/06/30 12:0 a.m.66 views

IBM Tivoli Storage Manager FastBack Server Opcode 1335 Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Tivoli Storage Manager FastBack. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of opcode 1335. By sending a crafted packet on TCP...

10CVSS9.3AI score0.03254EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2015/06/30 12:0 a.m.25 views

IBM Tivoli Storage Manager FastBack Server JOB_S_GetJobByUserFriendlyString Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Tivoli Storage Manager FastBack. Authentication is not required to exploit this vulnerability. The specific flaw exists within the JOBSGetJobByUserFriendlyString function. By sending a crafted...

10CVSS9.4AI score0.09971EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2015/06/30 12:0 a.m.23 views

IBM Tivoli Storage Manager FastBack Server Opcode 1331 Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Tivoli Storage Manager FastBack. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of opcode 1331. By sending a crafted packet on TCP...

10CVSS9.4AI score0.19226EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2015/06/30 12:0 a.m.37 views

(0Day) SolarWinds Storage Manager AuthenticationFilter Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SolarWinds Storage Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the AuthenticationFilter class. The issue lies in the ability to subvert th...

10CVSS7.4AI score0.93162EPSS
SaveExploits1References3
Zero Day Initiative
Zero Day Initiative
added 2015/06/30 12:0 a.m.47 views

IBM Tivoli Storage Manager FastBack Server Opcode 1301 Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Tivoli Storage Manager FastBack. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of opcode 1301. By sending a crafted packet on TCP...

10CVSS9.3AI score0.07804EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2015/06/30 12:0 a.m.29 views

IBM Tivoli Storage Manager FastBack Server FXCLI_OraBR_Exec_Command Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Tivoli Storage Manager FastBack. Authentication is not required to exploit this vulnerability. The specific flaw exists within the FXCLIOraBRExecCommand function. By sending a crafted packet on...

10CVSS9.4AI score0.03254EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2015/06/30 12:0 a.m.29 views

IBM Tivoli Storage Manager FastBack Server Opcode 1330 Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Tivoli Storage Manager FastBack. Authentication is not required to exploit this vulnerability. The specific flaw exists within processing of opcode 1330. By sending a crafted packet on TCP port...

10CVSS9.4AI score0.05527EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2015/06/30 12:0 a.m.34 views

IBM Tivoli Storage Manager FastBack Server Opcode 1364 Stack Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Tivoli Storage Manager FastBack. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of opcode 1364. By sending a crafted packet on TCP...

10CVSS9.4AI score0.03254EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2015/05/27 12:0 a.m.33 views

(0Day) Wavelink Emulation ConnectPro TermProxy WLTermProxyService.exe HTTP Request Headers Remote Code Execution Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Wavelink Emulation ConnectPro TermProxy. User interaction is not required to exploit this vulnerability. The specific flaw exists in the parsing of HTTP requests in WLTermProxyService.exe listening by...

10CVSS7.3AI score0.0488EPSS
SaveExploits0References4
Rows per page
Query Builder