CVE-2015-4292

Cisco Prime Central for Hosted Collaboration Solution (PC4HCS) 10.6(2) contains a cross-site scripting (XSS) vulnerability in its management interface caused by insufficient input filtering of user-submitted values. Exploitation would allow a remote attacker to inject arbitrary web script or HTML...

Cisco Prime Central Hosted Collaboration Solution Cross-Site Scripting Vulnerability

A vulnerability in the HTTP web-based management interface of the Cisco Prime Central for Hosted Collaboration Solution PC4HCS could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of the affected system. The vulnerability...

Cisco UCS Central Software Directory Traversal Vulnerability

Cisco UCS Central Software is the United States of America Cisco Cisco, a combination of computing, virtualization and networking in one software platform. A directory traversal vulnerability in Cisco UCS Central Software allows remote attackers to read arbitrary files via a crafted HTTP request...

CVE-2015-4286

The web framework in Cisco UCS Central Software 1.30.99 allows remote attackers to read arbitrary files via a crafted HTTP request, aka Bug ID CSCuu41377...

Command injection

The web framework in Cisco UCS Central Software 1.30.99 allows remote attackers to read arbitrary files via a crafted HTTP request, aka Bug ID CSCuu41377...

CVE-2015-4286

CVE-2015-4286 affects Cisco UCS Central Software (web framework) 1.3(0.99). A directory traversal vulnerability allows an unauthenticated, remote attacker to read arbitrary files by sending a crafted HTTP request. Root cause cited as improper input validation. Impact is exposure of sensitive info...

CVE-2015-4286

The web framework in Cisco UCS Central Software 1.30.99 allows remote attackers to read arbitrary files via a crafted HTTP request, aka Bug ID CSCuu41377...

Cisco UCS Central Software File Access Vulnerability

A vulnerability in the web framework of the Cisco UCS Central Software could allow an unauthenticated, remote attacker to download arbitrary files from a targeted device. The vulnerability is due to improper input validation. An attacker could exploit this vulnerability by sending a crafted HTTP...

SolarWinds N-Able N-Central Information Disclosure Vulnerability

SolarWinds N-Able N-Central is a suite of agent-based enterprise support and management solutions from SolarWinds USA. A information disclosure vulnerability exists in SolarWinds N-Able N-Central versions prior to 9.5.1.4514, which can be exploited to obtain a plaintext domain administrator...

Design/Logic Flaw

The RSM aka RSMWinService service in SolarWinds N-Able N-Central before 9.5.1.4514 uses the same password decryption key across different customers' installations, which makes it easier for remote authenticated users to obtain the cleartext domain-administrator password by locating the encrypted...

CVE-2015-5610

The RSM aka RSMWinService service in SolarWinds N-Able N-Central before 9.5.1.4514 uses the same password decryption key across different customers' installations, which makes it easier for remote authenticated users to obtain the cleartext domain-administrator password by locating the encrypted...

CVE-2015-5610

The RSM aka RSMWinService service in SolarWinds N-Able N-Central before 9.5.1.4514 uses the same password decryption key across different customers' installations, which makes it easier for remote authenticated users to obtain the cleartext domain-administrator password by locating the encrypted...

CVE-2015-5610

SolarWinds N-Able N-Central (RSMWinService) is affected by CVE-2015-5610. The RSM service before version 9.5.1.4514 uses the same password decryption key across different customer installations, enabling remote authenticated users to obtain the plaintext domain-administrator password by locating ...

SAP Enterprise Central Component Privilege Vulnerability

SAP is short for "System Applications and Products", which is the software name of SAP's product, Enterprise Management Solutions. An untrustworthy search path vulnerability exists in SAP ECC, which can be exploited by a local attacker to gain privileges via a Trojan horse...

N-Able RSMWinService contains hard coded security constants allowing decryption of domain administrator password

Overview SolarWinds N-Able N-Central is an agent-based enterprise support and management solution. N-Able N-Central contains several hard-coded encryption constants in the web interface that allow decryption of the password when combined. Description CWE-547: Use of Hard-coded, Security-relevant...

Design/Logic Flaw

Untrusted search path vulnerability in SAP Enterprise Central Component ECC allows local users to gain privileges via a Trojan horse program...

CVE-2015-3621

CVE-2015-3621 describes an untrusted search path vulnerability in SAP Enterprise Central Component (ECC) that enables local privilege escalation via a Trojan horse program. The NVD entry summarizes that untrusted search paths allow local users to gain privileges, with a high severity (CVSS v2 bas...

Symantec Endpoint Protection 12.1.4013 Service Disabling Vulnerability

Exploit for windows platform in category dos / poc Exploit Title: Antivirus Google Dork: intitle: Antivirus Date: 2015-07-07 Exploit Author: John Page hyp3rlinx Website: hyp3rlinx.altervista.org Vendor Homepage: www.symantec.com Software Link: www.symantec.com/endpoint-protection Version:12.1.401...

ManageEngine Desktop Central Detection (HTTP)

HTTP based detection of ManageEngine Desktop Central. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ManageEngine Desktop Central MSP < 9.0.075 Arbitrary Code Execution Vulnerability

ManageEngine Desktop Central MSP is prone to an arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...