4737 matches found
PT-2018-17653 · Ca · Ca Spectrum
Name of the Vulnerable Software and Affected Versions: CA Spectrum versions prior to 10.01.02.PTF 10.1.239 CA Spectrum version 10.2.x prior to 10.2.3 Description: The issue allows remote attackers to cause a denial of service via unspecified vectors. Recommendations: For CA Spectrum versions prio...
CVE-2018-6589: Improper Input Validation
CA Spectrum 10.1 prior to 10.01.02.PTF10.1.239 and 10.2.x prior to 10.2.3 allows remote attackers to cause a denial of service via unspecified vectors...
SA165: NTP Vulnerabilities February 2018
SUMMARY Symantec Network Protection products using affected versions of the NTP reference implementation from ntp.org are susceptible to multiple vulnerabilities. A remote attacker can exploit these vulnerabilities to execute arbitrary code, modify the target's system time, prevent the target fro...
Denial Of Service (DoS)
libkrb5.so is vulnerable to denial of service DoS through buffer overflow attacks. The vulnerability exists in the getmatchingdata function of krb5 that includes certauth plugin, and subsequently allowing both the CA certificate and the user's certificate to have long subjects, causing a denial o...
CVE-2018-8954
CA Workload Control Center before r11.4 SP6 allows remote attackers to execute arbitrary code via a crafted HTTP request...
Cross site request forgery (csrf)
CA Workload Control Center before r11.4 SP6 allows remote attackers to execute arbitrary code via a crafted HTTP request...
CVE-2018-8953
CA Workload Automation AE before r11.3.6 SP7 allows remote attackers to a perform SQL injection via a crafted HTTP request...
CVE-2018-8953
CA Workload Automation AE before r11.3.6 SP7 allows remote attackers to a perform SQL injection via a crafted HTTP request...
CVE-2018-8954
CA Workload Control Center before r11.4 SP6 allows remote attackers to execute arbitrary code via a crafted HTTP request...
CVE-2018-8954
CA Workload Control Center before r11.4 SP6 allows remote attackers to execute arbitrary code via a crafted HTTP request...
Sql injection
CA Workload Automation AE before r11.3.6 SP7 allows remote attackers to a perform SQL injection via a crafted HTTP request...
CVE-2018-8953
CA Workload Automation AE before r11.3.6 SP7 allows remote attackers to a perform SQL injection via a crafted HTTP request...
CVE-2018-8954
CA Workload Control Center (GUI for CA Workload Automation AE) is affected prior to r11.4 SP6. A remote attacker can execute arbitrary code via a specially crafted HTTP request, as described across multiple sources (CNVD/CVELIST/NVD entries). Root cause is an arbitrary code execution flaw in the ...
CVE-2018-8953
CA Workload Automation AE is vulnerable to SQL injection via a crafted HTTP request when running versions prior to r11.3.6 SP7. The issue is documented by the CVE-2018-8953 entry and corroborated by multiple connected sources (NVD/CNVD references), which indicate remote attacker access without us...
CVE-2018-8954
CA Workload Control Center before r11.4 SP6 allows remote attackers to execute arbitrary code via a crafted HTTP request...
CVE-2018-8954: Improper Input Validation
CA Workload Control Center before r11.4 SP6 allows remote attackers to execute arbitrary code via a crafted HTTP request...
PT-2018-18737
Name of the Vulnerable Software and Affected Versions CA Workload Control Center versions prior to r11.4 SP6 Description The issue allows remote attackers to execute arbitrary code via a crafted HTTP request. Recommendations For CA Workload Control Center versions prior to r11.4 SP6, update to...
PT-2018-18736
Name of the Vulnerable Software and Affected Versions CA Workload Automation AE versions prior to r11.3.6 SP7 Description The issue allows remote attackers to perform SQL injection via a crafted HTTP request. Recommendations For versions prior to r11.3.6 SP7, update to version r11.3.6 SP7 or late...
CVE-2018-8953: Improper Neutralization of Special Elements used in an SQL Command
CA Workload Automation AE before r11.3.6 SP7 allows remote attackers to a perform SQL injection via a crafted HTTP request...