CVE-2015-2134

Cross-site request forgery CSRF vulnerability in HP System Management Homepage SMH before 7.5.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in HP System Management Homepage SMH before 7.5.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...

CVE-2015-2134

Cross-site request forgery CSRF vulnerability in HP System Management Homepage SMH before 7.5.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...

CVE-2015-2134

HP System Management Homepage (SMH) prior to version 7.5.0 is affected by a Cross-Site Request Forgery (CSRF) vulnerability that allows an authenticated remote user to hijack another user’s session and perform actions on behalf of the victim. The HP Security Bulletin HPSBMU03409 (rev.1) lists CVE...

PT-2015-2786

Name of the Vulnerable Software and Affected Versions HP System Management Homepage versions prior to 7.5.0 Description A cross-site request forgery CSRF issue allows remote authenticated users to hijack the authentication of unspecified victims. This can be exploited by a remote attacker to...

CVE-2015-2134: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in HP System Management Homepage SMH before 7.5.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...

KLA10641 Multiple vulnerabilities in HP System Management Homepage

Multiple serious vulnerabilities have been found in HP System Management Homepage. Malicious users can exploit remotely these vulnerabilities to cause a denial of service, execution of arbitrary code, unauthorized modifications and access, disclosure of information and CSRF cross-site request...

HP System Management Homepage Single Sign On Feature Stack Buffer Overflow Vulnerability

HP System Management Homepage is a Web-based interface. The interface consolidates and simplifies the process of single-system management of HP servers running HP-UX, Linux, and Microsoft Windows operating systems. A stack buffer overflow vulnerability exists in HP System Management Homepage, whi...

Toshiba 4690 OS contains an information disclosure vulnerability

Overview The Toshiba 4690 operating system, version 6 Release 3 and possibly earlier versions, contains an information disclosure vulnerability. Description CWE-200: Information Exposure - CVE-2014-4876The Toshiba 4690 operating system, version 6 Release 3 and possibly earlier versions, contains...

[SECURITY] Fedora 21 Update: ruby-2.1.6-27.fc21

Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible...

[SECURITY] Fedora 22 Update: ruby-2.2.2-11.fc22

Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible...

Whitney Walton Internet behavior management system vulnerability packaged-vulnerability warning-the black bar safety net

Brief description: Contains a arbitrary File Download, 2 arbitrary code execution getshell, again without login. It is not individual to submit to be despised brush the hole, not continue to dig, and left to posterity to dig. Detailed description: A, arbitrary File Download Vulnerability file:...

Multiple Product SMM Local Code Execution Vulnerabilities

System Management Mode SMM is the highest privilege execution mode on x86 processors. Multiple BIOS implementations allow the SMM function to call memory locations other than SMRAM. An attacker with access to physical memory first corrupts the function pointer or function called by SMM, then writ...

Cisco Hosted Collaboration Solution Unauthorized System Access Vulnerability

A vulnerability in the Simple Object Access Protocol SOAP Interface of the Cisco Hosted Collaboration Solution HCS could allow an unauthenticated, remote attacker to gain unauthorized access to a targeted system. An attacker could exploit the vulnerability by transmitting crafted Challenge SOAP...

CVE-2015-0626

The SOAP interface in Cisco Hosted Collaboration Solution HCS allows remote attackers to obtain access to system-management tools via crafted Challenge SOAP calls, aka Bug ID CSCuc38114...

Design/Logic Flaw

The SOAP interface in Cisco Hosted Collaboration Solution HCS allows remote attackers to obtain access to system-management tools via crafted Challenge SOAP calls, aka Bug ID CSCuc38114...

CVE-2015-0626

The SOAP interface in Cisco Hosted Collaboration Solution HCS allows remote attackers to obtain access to system-management tools via crafted Challenge SOAP calls, aka Bug ID CSCuc38114...

CVE-2015-0626: Improper Input Validation

The SOAP interface in Cisco Hosted Collaboration Solution HCS allows remote attackers to obtain access to system-management tools via crafted Challenge SOAP calls, aka Bug ID CSCuc38114...

CVE-2015-0626

The CVE-2015-0626 issue affects Cisco Hosted Collaboration Solution (HCS) via the SOAP interface. The vulnerability stems from the SOAP processing of Challenge SOAP calls, enabling an unauthenticated, remote attacker to obtain access to system-management tools on vulnerable HCS deployments. Explo...

PT-2015-4769

Name of the Vulnerable Software and Affected Versions Cisco Hosted Collaboration Solution HCS affected versions not specified Description The issue concerns the SOAP interface in Cisco Hosted Collaboration Solution HCS, which allows remote attackers to gain access to system-management tools by...