Design/Logic Flaw

Web Viewer 1.0.0.193 on Samsung SRN-1670D devices allows attackers to bypass filesystem encryption via XOR calculations...

CVE-2015-8279

Web Viewer 1.0.0.193 on Samsung SRN-1670D devices allows remote attackers to read arbitrary files via a request to an unspecified PHP script...

CVE-2015-8281

Web Viewer 1.0.0.193 on Samsung SRN-1670D devices allows attackers to bypass filesystem encryption via XOR calculations...

CVE-2015-8281

CVE-2015-8281 affects Samsung SRN-1670D Web Viewer 1.0.0.193. The root cause is a weak, custom encryption scheme based on XOR operations, enabling a remote attacker to bypass filesystem encryption and access arbitrary files (unauthenticated, per the NVD CVSSv3/7.8 base). Connected sources also in...

CVE-2015-8280

CVE-2015-8280 affects Samsung SRN-1670D Web Viewer 1.0.0.193. The issue is information disclosure: remote attackers can discover credentials by reading detailed error messages, per NVD entry. Other sources (CERT/CC) indicate no practical solution known and note the model is no longer supported; n...

CVE-2015-8280

Web Viewer 1.0.0.193 on Samsung SRN-1670D devices allows remote attackers to discover credentials by reading detailed error messages...

CVE-2015-8279

CVE-2015-8279 affects Samsung SRN-1670D Web Viewer 1.0.0.193, enabling remote arbitrary file read via an unspecified PHP script. Connected records link this to credential exposure through cslog_export.php?path=/root/php_modules/lighttpd/sbin/userpw, and to later modules describing chained access ...

Debian: Security Advisory (DSA-3137-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-3586

Samsung Web Viewer for Samsung DVR devices allows remote attackers to bypass authentication via an arbitrary SessionID value in a cookie...

Authentication flaw

Samsung Web Viewer for Samsung DVR devices allows remote attackers to bypass authentication via an arbitrary SessionID value in a cookie...

Information disclosure

Samsung Web Viewer for Samsung DVR devices stores credentials in cleartext, which allows context-dependent attackers to obtain sensitive information via vectors involving 1 direct access to a file or 2 the user-setup web page...

Samsung Web Viewer for Samsung DVR allows authentication bypass and password disclosure

Overview Samsung Web Viewer for Samsung DVR contains multiple vulnerabilities including: Cleartext Storage in a File or on Disk CWE-313 and Authentication Bypass by Assumed-Immutable Data CWE-302. Description CWE-313: Cleartext Storage in a File or on Disk - CVE-2013-3585Web Viewer for Samsung DV...

PT-2013-61: Disclosure of sensitive information in Web Viewer for Samsung DVR

The specialists of the Positive Research center have detected "Disclosure of sensitive information" vulnerability associated with Absence of Password Hashing in Web Viewer for Samsung DVR. Users credentials logins and passwords are stored in plaintext at pages, not hashed or encrypted. This...

CVE-2011-1719

Multiple stack-based buffer overflows in the Web Viewer ActiveX controls in CA Output Management Web Viewer 11.0 and 11.5 allow remote attackers to execute arbitrary code via 1 a long SRC property value to the PPSViewer ActiveX control in PPSView.ocx before 1.0.0.7 or 2 a long Title property valu...

CVE-2011-1719

Multiple stack-based buffer overflows in the Web Viewer ActiveX controls in CA Output Management Web Viewer 11.0 and 11.5 allow remote attackers to execute arbitrary code via 1 a long SRC property value to the PPSViewer ActiveX control in PPSView.ocx before 1.0.0.7 or 2 a long Title property valu...

Stack overflow

Multiple stack-based buffer overflows in the Web Viewer ActiveX controls in CA Output Management Web Viewer 11.0 and 11.5 allow remote attackers to execute arbitrary code via 1 a long SRC property value to the PPSViewer ActiveX control in PPSView.ocx before 1.0.0.7 or 2 a long Title property valu...

CVE-2011-1719

CVE-2011-1719 involves multiple stack-based buffer overflows in the CA Output Management Web Viewer ActiveX controls (PPSView.ocx and UOMWV_HelperActiveX.ocx). The root cause is boundary/overflow errors in the ActiveX components used by the Web Viewer (versions 11.0 and 11.5). The flaws permit re...

CVE-2011-1719

Multiple stack-based buffer overflows in the Web Viewer ActiveX controls in CA Output Management Web Viewer 11.0 and 11.5 allow remote attackers to execute arbitrary code via 1 a long SRC property value to the PPSViewer ActiveX control in PPSView.ocx before 1.0.0.7 or 2 a long Title property valu...

Anonymous launches Anonleaks.ru to expose HBGary 27,000 Emails, Data available soon !

Anonymous launches Anonleaks.ru to expose HBGary 50000 Emails, data available soon ! Anonymous plans to release 27,000 emails from the server of Greg Hoglund, chief executive of the software security firm HBGary. It has posted 50,000 emails of Aaron Barr from the CEO of its sister organization, H...

CVE-2004-0204

CVE-2004-0204 describes a directory traversal in Crystal Reports and Crystal Enterprise Web viewers redistributed with Microsoft Visual Studio .NET 2003, Outlook 2003 with Business Contact Manager, and Microsoft Business Solutions CRM 1.2. The vulnerability arises from improper validation of HTTP...