EMC Data Domain OS Command Injection Vulnerability

EMC Data Domain OS DD OS is a deduplication operating system from EMC. A command injection vulnerability exists in EMC DD OS. An attacker could exploit this vulnerability to compromise an affected system...

The vulnerability of the Android operating system, which allows a hacker to gain access to data

The vulnerability in the initial loader of the Android operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a local attacker to access data beyond their authorized access level. This issue is considered “high” because it could be used to...

CVE-2016-2987

An undisclosed vulnerability in CLM applications may result in some administrative deployment parameters being shown to an attacker...

CVE-2016-2987

An undisclosed vulnerability in CLM applications may result in some administrative deployment parameters being shown to an attacker...

nfsen -- remote command execution

Peter Haag reports: A remote attacker with access to the web interface to execute arbitrary commands on the host operating system...

CVE-2016-6668

The Atlassian Hipchat Integration Plugin for Bitbucket Server 6.26.0 before 6.27.5, 6.28.0 before 7.3.7, and 7.4.0 before 7.8.17; Confluence HipChat plugin 6.26.0 before 7.8.17; and HipChat for JIRA plugin 6.26.0 before 7.8.17 allows remote attackers to obtain the secret key for communicating wit...

IBM Kenexa LMS on Cloud SQL Injection Vulnerability (CNVD-2017-00563)

IBM Kenexa LMS on Cloud is a configurable, enterprise-grade social learning management system LMS from IBM that integrates social networking, collaboration, and knowledge sharing capabilities. The system provides interactive features and supports users to evaluate learning content and share their...

The vulnerability of the control device in the electrical energy sector, SICAM PAS, allows a intruder to access the database.

The vulnerability of the telecontrol device in the electric energy sector, SICAM PAS, is related to the storage of passwords in a recoverable format. Exploiting this vulnerability allows a malicious actor, who operates locally and has completed the authentication process, to restore user password...

Splunk Enterprise Information Disclosure Vulnerability

Splunk is a suite of data collection and analysis software. The software is primarily used to collect, index, and analyze machine-generated data, including data generated by all IT systems and infrastructures.Splunk Enterprise is an Enterprise Edition. Splunk Enterprise has an information...

Moxa MiiNePort Information Disclosure Vulnerability (CNVD-2016-12353)

Moxa MiiNePort is an embedded device networking module from Moxa designed for manufacturers to connect serial devices to a network connection. An information disclosure vulnerability exists in Moxa MiiNePort, which arises from the program's failure to encrypt configuration data in a file. An...

Default Password 'htinit' for 'htinit' Account (SSH)

The remote device is using known default credentials. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Media Base Memory Corruption Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. A memory corruption vulnerability exists when the Windows media base fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could install programs; view,...

Unify OpenScape Xpressions Information Disclosure Vulnerability

OpenScape includes collaboration, mobility, video and other tools based on an open architecture with carrier-grade stability and reliability; at the same time, it is a "cloud-ready" solution that makes it easy to host a variety of applications, simplify business processes and reduce enterprise...

Deal Flow Network 7.0 Cross Site Scripting

======================================================================== | Title : Deal Flow Network v7.0 xss vulnerability | Author : indoushka | email : [email protected] | Tested on : windows 8.1 FranASSais V.Pro | Version : v7.0 | Vendor : http://www.datavore.com/software | Dork : n/a...

SAP HANA Information Disclosure Vulnerability (CNVD-2016-08066)

SAP HANA is a real-time data analytics platform. SAP HANA has an information disclosure vulnerability. Allowing an attacker can exploit the vulnerability to gain access to sensitive information...

CVE-2016-1280

CVE-2016-1280 affects Juniper Junos OS: remote attackers can bypass certificate validation by presenting a self-signed cert whose issuer name matches a valid Junos CA, impacting certificates used for IKE/IPsec. Affected Junos versions span many 12.x–16.1 releases (e.g., before specific revisions ...

DEXIS Imaging Suite 10 contains hard-coded credentials

Overview DEXIS is a dental x-ray imaging software that manages patient records. DEXIS Imaging Suite 10 contains several hard-coded credentials allowing administrative or root access to the patient database. Description CWE-798: Use of Hard-coded Credentials - CVE-2016-6532 DEXIS Imaging Suite 10...

SAP NetWeaver AS ABAP Directory Traversal Vulnerability

SAP Netweaver AS ABAP is an application server that runs in NetWeaver and is based on the ABAP high-level programming language. A directory traversal vulnerability exists in SAP NetWeaver AS ABAP. A failure of the program to properly filter user-supplied input allows a remote attacker to use a...

Perixx Computer PERIDUO-710W Insufficient Protections

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2016-045 Product: PERIDUO-710W Manufacturer: Perixx Computer GmbH Affected Versions: Part No. KG-1027 Tested Versions: Part No. KG-1027 Vulnerability Type: Insufficient Protection of Code Firmware and Data Cryptographic Key Risk...

The vulnerability of the ABB PCM600 control and configuration device allows a intruder to gain access to user passwords.

The vulnerability of the ABB PCM600 control and configuration device lies in the use of reversible encryption for passwords stored in the ACTConfig configuration file. Exploiting this vulnerability could allow an attacker acting locally to gain access to user passwords...