177 matches found
RHEL 7 : Red Hat Satellite 6.1.1 on RHEL 7 (Important) (RHSA-2015:1591)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:1591 advisory. Red Hat Satellite is a systems management tool for Linux-based infrastructures. It allows for provisioning, remote management and monitoring...
Kaseya Virtual System Administrator File Download / Open Redirect Vulnerabilities
Kaseya Virtual System Administrator suffers from arbitrary file download open redirection vulnerabilities. Two vulns in Kaseya Virtual System Administrator - an authenticated arbitrary file download and two lame open redirects. Full advisory text below and at 1. Thanks to CERT for helping me to...
CVE-2015-3318
CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Universal Job Management Agent; CA Virtual Assurance for Infrastructure Managers aka SystemEDGE 12....
CVE-2015-3317
CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Universal Job Management Agent; CA Virtual Assurance for Infrastructure Managers aka SystemEDGE 12....
CVE-2015-3316
CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Universal Job Management Agent; CA Virtual Assurance for Infrastructure Managers aka SystemEDGE 12....
Design/Logic Flaw
CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Universal Job Management Agent; CA Virtual Assurance for Infrastructure Managers aka SystemEDGE 12....
Design/Logic Flaw
CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Universal Job Management Agent; CA Virtual Assurance for Infrastructure Managers aka SystemEDGE 12....
Design/Logic Flaw
CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Universal Job Management Agent; CA Virtual Assurance for Infrastructure Managers aka SystemEDGE 12....
CVE-2015-3317
CVE-2015-3317 affects CA Common Services as bundled in CA products on UNIX (CA Client Automation, CA Network and Systems Management, CA NSM JMO, CA Universal Job Management Agent, CA Virtual Assurance/SystemEDGE, CA Workload Automation AE). The issue stems from multiple instances of insufficient ...
CVE-2015-3318
CA Common Services on UNIX in CA Client Automation (r12.5 SP01, r12.8, r12.9), CA Network and Systems Management (r11.0, r11.1, r11.2), CA NSM Job Management Option (r11.0, r11.1, r11.2), CA Universal Job Management Agent, CA Virtual Assurance for Infrastructure Managers (SystemEDGE) 12.6–12.9, a...
CVE-2015-3317
CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Universal Job Management Agent; CA Virtual Assurance for Infrastructure Managers aka SystemEDGE 12....
CVE-2015-3316
CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Universal Job Management Agent; CA Virtual Assurance for Infrastructure Managers aka SystemEDGE 12....
CA20150604-01: Security Notice for CA Common Services
-----BEGIN PGP SIGNED MESSAGE----- CA20150604-01: Security Notice for CA Common Services Issued: June 4, 2015 CA Technologies Support is alerting customers to multiple potential risks with products that bundle CA Common Services on Unix/Linux platforms. A local attacker may exploit these...
Microsoft Systems Management Server 1.2/2.0 - Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10726/info Reportedly Microsoft Systems Management Server is vulnerable to a remote denial of service vulnerability. This issue is due to a failure of the affected server to handle exceptional conditions. Successful...
Microsoft Systems Management Server 2.0 Default Permissions Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/945/info The default permissions applied to the directory containing the SMS Remote Control executable allow any user to replace the executable with any other executable. The new executable will run with System privileges...
Dell KACE K1000 Systems Management Appliance 'LABEL_ID'参数跨站脚本漏洞
BUGTRAQ ID: 65333 CVECAN ID: CVE-2014-0330 Dell KACE K1000是系统管理解决方案。 Dell KACE K1000系统管理设备5.5.90545版本及其他版本的adminui/userlist.php存在跨站脚本漏洞，远程攻击者可通过LABELID参数，利用此漏洞注入任意Web脚本或HTML。 0 Dell Kace 1000 Systems Management Appliance 5.5.90545 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...
Dell Kace 1000 Systems Management Appliance多个SQL注入漏洞
BUGTRAQ ID: 65029 Dell Kace 1000 Systems Management Appliance是系统管理设备。 Dell Kace 1000 Systems Management Appliance 5.4.76847及其他版本没有正确过滤getUploadPath及getKBot SOAP方法的"macAddress"参数值，可导致注入任意SQL代码，从而操作SQL查询。 0 Dell Kace 1000 Systems Management Appliance 5.4.76847 厂商补丁： Dell ----...
Dell Kace 1000 Systems Management Appliance DS-2014-001 - Multiple SQL Injections
Dell Kace 1000 Systems Management Appliance DS-2014-001 - Multiple SQL Injections source: https://www.securityfocus.com/bid/65029/info Dell Kace 1000 Systems Management Appliance is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input befor...
Dell KACE K1000 Systems Management Appliance (SMA) Detection
Detection of Dell KACE K1000 Systems Management Appliance. The script sends a connection request to the server and attempts to extract the version number from the reply. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be...
Dell Kace 1000 SMA 5.4.742 SQL Injection
Title: ====== Dell Kace 1000 SMA 5.4.742 - SQL Injection Vulnerabilities Date: ===== 2013-07-22 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=832 VL-ID: ===== 832 Common Vulnerability Scoring System: ==================================== 7.5 Introduction: =============...