Security Advisory - Improper Resource Management Vulnerability in Some Huawei Products

There is an improper resource management vulnerability in some AR series products. Due to the improper implementation of ACL mechanism, a remote attacker may send TCP messages to the management interface of the affected device to exploit this vulnerability. Successful exploit could exhaust the...

Denial Of Service (DoS) Through Stack Buffer Underflow

libarchive.so is vulnerable to denial of service DoS. The vulnerability exists due to a possible stack buffer underflow issue when parsing the ar header...

CVE-2015-9257

BMC Remedy Action Request AR System 9.0 before 9.0.00 Service Pack 2 hot fix 1 has persistent XSS...

CVE-2015-9257

CVE-2015-9257 affects BMC Remedy Action Request (AR) System 9.0 prior to 9.0.00 Service Pack 2 hot fix 1. A persistent XSS vulnerability exists in Remedy AR System; impact is web UI based. To remediate, apply 9.0.00 SP2 hot fix 1 (or equivalent patched release) per linked disclosures. No exploita...

CVE-2015-9257

BMC Remedy Action Request AR System 9.0 before 9.0.00 Service Pack 2 hot fix 1 has persistent XSS...

BMC Remedy AR System Elevation of Privilege Vulnerability

The BMC Remedy AR System is a mobile digital enterprise management platform for IT departments from BMC Software. A security vulnerability exists in BMC Remedy AR System versions prior to 9.1 SP3. When Remedy AR Authentication is turned on, an attacker can exploit the vulnerability to gain...

BMC Remedy AR System Cross-Site Request Forgery Vulnerability

BMC Remedy AR System is a mobile digital enterprise management platform for IT departments from BMC Software, Inc. and Remedy Mid Tier is one of the middleware components. A cross-site request forgery vulnerability exists in Remedy Mid Tier in BMC Remedy AR System version 9.1. A remote attacker c...

Cross site request forgery (csrf)

Remedy Mid Tier in BMC Remedy AR System 9.1 allows XSS via the ATTKey parameter in an arsys/servlet/AttachServlet request...

CVE-2017-18228

Remedy Mid Tier in BMC Remedy AR System 9.1 allows XSS via the ATTKey parameter in an arsys/servlet/AttachServlet request...

CVE-2017-18228

CVE-2017-18228 : Remedy Mid Tier in BMC Remedy AR System 9.1 is vulnerable to a stored/reflected XSS through the ATTKey parameter in an arsys/servlet/AttachServlet request. The connected records confirm the vulnerable component and parameter; no explicit remediation or patch details are provided ...

CVE-2017-18228

Remedy Mid Tier in BMC Remedy AR System 9.1 allows XSS via the ATTKey parameter in an arsys/servlet/AttachServlet request...

Authentication flaw

BMC Remedy AR System before 9.1 SP3, when Remedy AR Authentication is enabled, allows attackers to obtain administrative access...

CVE-2017-18223

BMC Remedy AR System before 9.1 SP3, when Remedy AR Authentication is enabled, allows attackers to obtain administrative access...

CVE-2017-18223

BMC Remedy AR System before 9.1 SP3, when Remedy AR Authentication is enabled, allows attackers to obtain administrative access...

CVE-2017-18223

CVE-2017-18223 refers to BMC Remedy AR System versions prior to 9.1 SP3, where, when Remedy AR Authentication is enabled, an attacker can obtain administrative access. The NVD entry describes a network-exposed elevation of privilege with partial confidentiality, integrity, and availability impact...

CVE-2017-18223

BMC Remedy AR System before 9.1 SP3, when Remedy AR Authentication is enabled, allows attackers to obtain administrative access...

aru-berlin.de XSS vulnerability

Open Bug Bounty ID: OBB-575939 Description| Value ---|--- Affected Website:| aru-berlin.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-17291

Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20,...

CVE-2017-17301

Huawei AR120-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, AR1200 V200R005C20, V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, AR1200-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20,...

CVE-2017-17297

Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20,...