6662 matches found
CVE-2021-0204
A sensitive information disclosure vulnerability in delta-export configuration utility dexp of Juniper Networks Junos OS may allow a locally authenticated shell user the ability to create and read database files generated by the dexp utility, including password hashes of local users. Since dexp i...
Information disclosure
A sensitive information disclosure vulnerability in delta-export configuration utility dexp of Juniper Networks Junos OS may allow a locally authenticated shell user the ability to create and read database files generated by the dexp utility, including password hashes of local users. Since dexp i...
K55 - Linux X86_64 Process Injection Utility | Manipulate Processes With Customized Payloads
pronounced: "kay fifty-five" The K55 payload injection tool is used for injecting x8664 shellcode payloads into running processes. The utility was developed using modern C++11 techniques as well as some traditional C linux functions like ptrace. The shellcode spawned in the target process is 27...
PT-2021-2118 · Juniper Networks · Junos
Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 15.1R7-S8 Juniper Networks Junos OS 15.1X49 versions prior to 15.1X49-D230 Juniper Networks Junos OS 17.3 versions prior to 17.3R3-S9 Juniper Networks Junos OS 17.4 versions prior to 17.4R2-S12,...
CVE-2020-29478
CA Service Catalog 17.2 and 17.3 contain a vulnerability in the default configuration of the Setup Utility that may allow a remote attacker to cause a denial of service condition...
CVE-2020-29478
CA Service Catalog 17.2 and 17.3 contain a vulnerability in the default configuration of the Setup Utility that may allow a remote attacker to cause a denial of service condition...
Design/Logic Flaw
CA Service Catalog 17.2 and 17.3 contain a vulnerability in the default configuration of the Setup Utility that may allow a remote attacker to cause a denial of service condition...
CVE-2020-29478
CA Service Catalog 17.2 and 17.3 contain a vulnerability in the default configuration of the Setup Utility that may allow a remote attacker to cause a denial of service condition...
CVE-2020-13540
An exploitable local privilege elevation vulnerability exists in the file system permissions of the Win-911 Enterprise V4.20.13 install directory via WIN-911 Account Change Utility. Depending on the vector chosen, an attacker can overwrite various executables which could lead to escalation of the...
CVE-2020-13540
An exploitable local privilege elevation vulnerability exists in the file system permissions of the Win-911 Enterprise V4.20.13 install directory via WIN-911 Account Change Utility. Depending on the vector chosen, an attacker can overwrite various executables which could lead to escalation of the...
CVE-2020-13540
An exploitable local privilege elevation vulnerability exists in the file system permissions of the Win-911 Enterprise V4.20.13 install directory via WIN-911 Account Change Utility. Depending on the vector chosen, an attacker can overwrite various executables which could lead to escalation of the...
CVE-2020-28052
A flaw was found in bouncycastle. The OpenBSDBCrypt.checkPassword utility method compared incorrect data when checking the password allowing incorrect passwords to indicate they were matching with previously hashed ones that were different. The highest threat from this vulnerability is to data...
PT-2021-9622 · Unknown · Win-911 Enterprise
Name of the Vulnerable Software and Affected Versions: Win-911 Enterprise version 4.20.13 Description: A local privilege elevation issue exists due to file system permissions in the install directory, specifically via the WIN-911 Account Change Utility. This allows an attacker to overwrite...
CVE-2020-13540: Incorrect Default Permissions
An exploitable local privilege elevation vulnerability exists in the file system permissions of the Win-911 Enterprise V4.20.13 install directory via WIN-911 Account Change Utility. Depending on the vector chosen, an attacker can overwrite various executables which could lead to escalation of the...
CVE-2020-29478: Empty Password in Configuration File
CA Service Catalog 17.2 and 17.3 contain a vulnerability in the default configuration of the Setup Utility that may allow a remote attacker to cause a denial of service condition...
PT-2021-11672
Name of the Vulnerable Software and Affected Versions: CA Service Catalog versions 17.2 through 17.3 Description: The issue is related to a vulnerability in the default configuration of the Setup Utility, which may allow a remote attacker to cause a denial of service condition. Recommendations: F...
CVE-2020-27719
On BIG-IP 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.3, a cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Configuration utility...
CVE-2020-27719
On BIG-IP 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.3, a cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Configuration utility...
Cross site scripting
On BIG-IP 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.3, a cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Configuration utility...
PT-2020-16781
Name of the Vulnerable Software and Affected Versions BIG-IP versions 14.1.0 through 14.1.3 BIG-IP versions 15.1.0 through 15.1.0.5 BIG-IP versions 16.0.0 through 16.0.0.1 Description A cross-site scripting XSS issue exists in an undisclosed page of the BIG-IP Configuration utility. This allows f...