Lucene search
+L

923 matches found

Zero Day Initiative
Zero Day Initiative
added 2014/01/10 12:0 a.m.35 views

Hewlett-Packard Data Protector Backup Client Service EXEC_BAR Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute remote code on vulnerable installations of HP Data Protector. Authentication is not required to exploit this vulnerability. This specific flaw exists in the Backup Client Service OmniInet.exe. The Backup Client Service listens on TCP port 5555...

10CVSS5.4AI score0.66409EPSS
SaveExploits14References1
Zero Day Initiative
Zero Day Initiative
added 2014/01/10 12:0 a.m.67 views

Hewlett-Packard Data Protector Backup Client Service vrda Remote Code Execution Vulnerability

This vulnerability allows remote attackers directory traversal on vulnerable installations of HP OpenView Data Protector. Authentication is not required to exploit this vulnerability. This specific flaw exists in the Backup Client Service OmniInet.exe. The Backup Client Service listens on TCP por...

10CVSS5.6AI score0.10436EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
added 2014/01/10 12:0 a.m.30 views

Hewlett-Packard Data Protector Backup Client Service rbda Remote Code Execution Vulnerability

This vulnerability allows remote attackers directory traversal on vulnerable installations of HP OpenView Data Protector. Authentication is not required to exploit this vulnerability. This specific flaw exists in the Backup Client Service OmniInet.exe. The Backup Client Service listens on TCP por...

10CVSS6AI score0.10436EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
added 2014/01/10 12:0 a.m.669 views

Hewlett-Packard Data Protector Backup Client Service Opcode 45 and 46 Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute remote code on vulnerable installations of HP Data Protector. Authentication is not required to exploit this vulnerability. This specific flaw exists in the Backup Client Service OmniInet.exe. The Backup Client Service listens on TCP port 5555...

10CVSS5.9AI score0.10436EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
added 2014/01/10 12:0 a.m.39 views

Hewlett-Packard Data Protector Backup Client Service RxNtSetup Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute remote code on vulnerable installations of HP Data Protector. Authentication is not required to exploit this vulnerability. This specific flaw exists in the Backup Client Service OmniInet.exe. The Backup Client Service listens on TCP port 5555...

10CVSS5.5AI score0.10436EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
added 2014/01/10 12:0 a.m.23 views

Hewlett-Packard Data Protector Backup Client Service rrda Remote Code Execution Vulnerability

This vulnerability allows remote attackers directory traversal on vulnerable installations of HP OpenView Data Protector. Authentication is not required to exploit this vulnerability. This specific flaw exists in the Backup Client Service OmniInet.exe. The Backup Client Service listens on TCP por...

10CVSS5.7AI score0.10436EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
added 2014/01/10 12:0 a.m.77 views

Hewlett-Packard Data Protector Backup Client Service vbda Remote Code Execution Vulnerability

This vulnerability allows remote attackers directory traversal on vulnerable installations of HP OpenView Data Protector. Authentication is not required to exploit this vulnerability. This specific flaw exists in the Backup Client Service OmniInet.exe. The Backup Client Service listens on TCP por...

10CVSS5.6AI score0.10436EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
added 2013/11/24 12:0 a.m.30 views

Cisco Data Center Network Manager fileUploadServlet Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco Data Center Network Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the FileUploadServlet. Multiple arguments of a multipart form reques...

10CVSS5.6AI score0.75962EPSS
SaveExploits6References1
Zero Day Initiative
Zero Day Initiative
added 2013/11/24 12:0 a.m.38 views

HP SiteScope issueSiebelCmd SOAP Request Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP SiteScope. Authentication is not required to exploit this vulnerability. The specific flaw exists within the issueSiebelCmd web method. A remote attacker can abuse this web method in order to...

10CVSS3.1AI score0.71003EPSS
SaveExploits5References1
Zero Day Initiative
Zero Day Initiative
added 2013/10/16 12:0 a.m.28 views

PANDA Security Communications Agent Service Pagent.exe 'MESSAGE_FROM_REMOTE' Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of PANDA Security for Business Communications. Authentication is not required to exploit this vulnerability. The specific flaw exists within the 'Panda AdminSecure Communications Agent' Pagent.exe whi...

10CVSS7.9AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2013/10/16 12:0 a.m.35 views

Hewlett-Packard Intelligent Management Center BIMS UploadServlet Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard Intelligent Management Center. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UploadServlet in the Branch Intelligent Management...

10CVSS5.1AI score0.62617EPSS
SaveExploits5References1
Check Point Advisories
Check Point Advisories
added 2013/10/13 12:0 a.m.40 views

Microsoft Windows RAS Manager Registry Corruption (CVE-2006-2371)

A buffer overflow vulnerability has been reported in Microsoft Routing and Remote Access Service. The flaw is caused by improper boundary checking of user-supplied data to the Routing and Remote Access service. A remote attacker may leverage this vulnerability by sending a crafted request to the...

7.5CVSS7.5AI score0.22597EPSS
SaveExploits6
Saint
Saint
added 2013/10/03 12:0 a.m.60 views

HP ProCurve Manager SNAC UpdateCertificatesServlet FileName Vulnerability

Added: 10/03/2013 CVE: CVE-2013-4812 BID: 62348 OSVDB: 97155 Background HP ProCurve Manager PCM is a secure, advanced Windows-based network management platform that allows administrators to configure, update, monitor, and troubleshoot ProCurve devices centrally. Problem The SNAC registration serv...

10CVSS7.1AI score0.51903EPSS
SaveExploits10
Zero Day Initiative
Zero Day Initiative
added 2013/09/11 12:0 a.m.42 views

HP PCM+ SNAC Registration Server UpdateCertificatesServlet Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP PCM Plus. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UpdateCertificatesServlet. This servlet improperly sanitizes the 'fileName' argument...

10CVSS4.1AI score0.51903EPSS
SaveExploits10References1
Zero Day Initiative
Zero Day Initiative
added 2013/09/11 12:0 a.m.36 views

HP PCM+ GetEventsServlet SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP PCM Plus. Authentication is not required to exploit this vulnerability. The specific flaw exists within the GetEventsServlet. This servlet contains a SQL injection vulnerability in the sort and...

10CVSS3.2AI score0.03304EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2013/09/11 12:0 a.m.35 views

HP PCM+ AgentController Servlet Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP PCM Plus. Authentication is not required to exploit this vulnerability. The specific flaws exist within the Agent servlet. This servlet is vulnerable to a command injection vulnerability when...

10CVSS3.9AI score0.08507EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2013/09/11 12:0 a.m.40 views

HP PCM+ SNAC Registration Server UpdateDomainControllerServlet Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP PCM Plus. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UpdateDomainControllerServlet. This servlet improperly sanitizes the 'adCert' argument...

10CVSS6.5AI score0.71293EPSS
SaveExploits6
Zero Day Initiative
Zero Day Initiative
added 2013/09/11 12:0 a.m.73 views

HP PCM+ and Application Lifecycle Management JBoss Invoker Servlets Marshalled Object Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP PCM Plus and Application Lifecycle Management. Authentication is not required to exploit this vulnerability. The specific flaw exists within the exposed EJBInvokerServlet and JMXInvokerServlet. ...

10CVSS5AI score0.79003EPSS
SaveExploits6References2
Saint
Saint
added 2013/09/09 12:0 a.m.66 views

HP System Management Homepage iprange Parameter Stack Buffer Overflow

Added: 09/09/2013 CVE: CVE-2013-2362 BID: 61337 OSVDB: 95489 Background HP System Management Homepage SMH is a web-based interface that consolidates the management of ProLiant and Integrity servers. Problem A stack buffer overflow vulnerability in HP SMH allows command execution when an attacker...

2.1CVSS9.8AI score0.00527EPSS
SaveExploits4
OpenVAS
OpenVAS
added 2013/09/09 12:0 a.m.39 views

Sophos Web Protection Appliance Multiple Vulnerabilities (Jul 2013) - Active Check

Sophos Web Protection Appliance is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

10CVSS6.3AI score0.90133EPSS
SaveExploits17References1
Rows per page
Query Builder