IBM RLKS Administration and Reporting Tool Information Disclosure Vulnerability

IBM RLKS Rational License Key Server is a license key server from IBM, USA.Administration and Reporting Tool is one of the license key management and reporting tools. An information disclosure vulnerability exists in IBM RLKS Administration and Reporting Tool version 8.1.4 and versions 8.1.4.2...

Critical alerts : "Out of licenses for .... " is displayed on the License Administration Console

The following critical alert is displayed on the Dashboard of the License Administration Console. "Out of licenses for ." e.g. "Out of licenses for Citrix XenDesktop Enterprise|User/Device 2019.04.19."...

OurPHP backend has an arbitrary file upload vulnerability

OurPHP 傲派建站系统 is a website content management system developed using PHP language, the developer is Harbin Weicheng Technology Co. The upload file management module under the "Global/Interface" module in the administration background of OurPHP has the function of uploading hidden files. Since the...

CVE-2015-6551

Veritas NetBackup 7.x through 7.5.0.7 and 7.6.0.x through 7.6.0.4 and NetBackup Appliance through 2.5.4 and 2.6.0.x through 2.6.0.4 do not use TLS for administration-console traffic to the NBU server, which allows remote attackers to obtain sensitive information by sniffing the network for...

Code injection

Veritas NetBackup 7.x through 7.5.0.7 and 7.6.0.x through 7.6.0.4 and NetBackup Appliance through 2.5.4 and 2.6.0.x through 2.6.0.4 do not use TLS for administration-console traffic to the NBU server, which allows remote attackers to obtain sensitive information by sniffing the network for...

CVE-2015-6551

Veritas NetBackup 7.x through 7.5.0.7 and 7.6.0.x through 7.6.0.4, and NetBackup Appliance through 2.5.4 and 2.6.0.x through 2.6.0.4, expose an information-disclosure vulnerability due to not using TLS for administration-console traffic to the NBU server. This allows a remote attacker to sniff ke...

CVE-2015-6551

Veritas NetBackup 7.x through 7.5.0.7 and 7.6.0.x through 7.6.0.4 and NetBackup Appliance through 2.5.4 and 2.6.0.x through 2.6.0.4 do not use TLS for administration-console traffic to the NBU server, which allows remote attackers to obtain sensitive information by sniffing the network for...

PT-2016-3719

Name of the Vulnerable Software and Affected Versions Veritas NetBackup versions 7.x through 7.5.0.7 Veritas NetBackup versions 7.6.0.x through 7.6.0.4 Veritas NetBackup Appliance versions 2.5.4 and earlier Veritas NetBackup Appliance versions 2.6.0.x through 2.6.0.4 Description The issue allows...

[SECURITY] Fedora 22 Update: perl-5.20.3-330.fc22

Perl is a high-level programming language with roots in C, sed, awk and she ll scripting. Perl is good at handling processes and files, and is especially good at handling text. Perl's hallmarks are practicality and efficiency. While it is used to do a lot of different things, Perl's most common...

DotNetNuke 07.04.00 - Administration Authentication Bypass

Exploit for asp platform in category web applications Exploit Title: DotNetNuke 07.04.00 Administration Authentication Bypass Date: 06-05-2016 Exploit Author: Marios Nicolaides Vendor Homepage: http://www.dnnsoftware.com/ Software Link: https://dotnetnuke.codeplex.com/releases/view/611324 Version...

DotNetNuke 07.04.00 - Administration Authentication Bypass

DotNetNuke 07.04.00 - Administration Authentication Bypass Exploit Title: DotNetNuke 07.04.00 Administration Authentication Bypass Date: 06-05-2016 Exploit Author: Marios Nicolaides Vendor Homepage: http://www.dnnsoftware.com/ Software Link: https://dotnetnuke.codeplex.com/releases/view/611324...

Apache ActiveMQ Clickjacking Vulnerability (May 2016)

Apache ActiveMQ is prone to a clickjacking vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:activemq";...

[SECURITY] Fedora 22 Update: glpi-0.90.3-1.fc22

GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...

[SECURITY] Fedora 23 Update: glpi-0.90.3-1.fc23

GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...

EMC ViPR SRM Cross-Site Request Forgery Vulnerability (NVD-C-2016-22474)

EMC ViPR SRM is storage resource management software. A cross-site request forgery vulnerability exists in multiple administration pages of EMC ViPR SRM, which can be exploited by an attacker to execute unauthorized requests as an administrator...

CVE-2016-3943

Panda Endpoint Administration Agent before 7.50.00, as used in Panda Security for Business products for Windows, uses a weak ACL for the Panda Security/WaAgent directory and sub-directories, which allows local users to gain SYSTEM privileges by modifying an executable module...

CVE-2016-3943: Incorrect Default Permissions

Panda Endpoint Administration Agent before 7.50.00, as used in Panda Security for Business products for Windows, uses a weak ACL for the Panda Security/WaAgent directory and sub-directories, which allows local users to gain SYSTEM privileges by modifying an executable module...

PT-2016-5768

Name of the Vulnerable Software and Affected Versions Panda Endpoint Administration Agent versions prior to 7.50.00 Description The issue allows local users to gain SYSTEM privileges by modifying an executable module due to a weak ACL for the Panda Security/WaAgent directory and sub-directories...

[SECURITY] Fedora 24 Update: glpi-0.90.3-1.fc24

GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...

CVE-2015-7999

Multiple SQL injection vulnerabilities in the Administration Web UI servlets in Citrix Command Center before 5.1 Build 36.7 and 5.2 before Build 44.11 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors...