CVE-2018-13789

An issue was discovered in Descor Infocad FM before 3.1.0.0. An unauthenticated web service allows the retrieval of files on the web server and on reachable SMB servers...

Design/Logic Flaw

BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting file storage service FileStorageService on port 9010. This service contains a method that allows uploading a file to an arbitrary path on the machine that is running Track-It!. This can be used to upload a file to the web...

CVE-2016-6599

BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting configuration service ConfigurationService on port 9010. This service contains a method that can be used to retrieve a configuration file that contains the application database name, username and password as well as the...

[Onapsis Security Advisory 2011-001] SAP Management Console Unauthenticated Service Restart

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Onapsis Security Advisory 2011-001: SAP Management Console Unauthenticated Service Restart This advisory can be downloaded in PDF format from http://www.onapsis.com/. By downloading this advisory from the Onapsis Resource Center, you will gain access ...

sc.txt

Two Security Holes in Sun Cluster 2.x echo8 Hole 1 ------- Summary ------- Sun Cluster 2.x Sun Microsystems' commercial high-availability product for Solaris leaks potentially sensitive information to local or remote users. Specifics --------- In a standard Sun Cluster install, there is a service...