Lucene search
+L

6532 matches found

securityvulns
securityvulns
•added 2015/09/14 12:00 a.m.•89 views

Webroot SecureAnywhere Mobile Protection - MITM SSL Certificate Vulnerability

Webroot SecureAnywhere Mobile Protection - MITM SSL Certificate Vulnerability -- http://www.info-sec.ca/advisories/Webroot-SecureAnywhere.html Overview "Webroot SecureAnywhere Business – Mobile Protection provides essential security for iPhones and iPads and includes lost device protection that...

0.8AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2015/08/29 10:40 a.m.•23 views

biomedcentral.com XSS vulnerability

Vulnerable URL: http://www.biomedcentral.com/1471-2229/15/210xss%27%22%3E%3Cscript%20src=%22http://otp22.com/M/XSSPOSED%22%3E%3C/script%3E%3Cfragment%20x Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 22:21 GMT Vulnerability type:| XSS...

6.3AI score
SaveExploits0
ICS
ICS
•added 2015/08/27 6:00 a.m.•66 views

Moxa OnCell Central Manager Vulnerabilities

OVERVIEW NCCIC/ICS-CERT received a report from HP’s Zero Day Initiative ZDI concerning hardcoded credentials and authentication bypass vulnerabilities in Moxa’s OnCell Central Manager Software. These vulnerabilities were reported to ZDI by security researcher Andrea Micalizzi. Moxa has released a...

8.3CVSS9.3AI score0.01786EPSS
SaveExploits0References10
The Hacker News
The Hacker News
•added 2015/08/27 1:21 a.m.•23 views

British-born ISIS Hacker Killed in US Drone Strike in Syria

Remember Team Poison? The hackers group that was active in 2012, and was known for gaining access to the former Prime Minister Tony Blair's address book and then publishing information from it. The British hacker who actually obtained the Prime Minister's address book and was jailed for six month...

6.6AI score
SaveExploits0
Saint
Saint
•added 2015/08/26 12:00 a.m.•106 views

Symantec Endpoint Protection Manager authentication bypass

Added: 08/26/2015 CVE: CVE-2015-1486 BID: 76074 Background Symantec Endpoint Protection, by Symantec Corporation, is an antivirus and personal firewall product designed to be centrally managed in corporate environments by the Symantec Endpoint Protection Manager SEPM. Problem Symantec Endpoint...

7.5CVSS7.1AI score0.68339EPSS
SaveExploits9
Saint
Saint
•added 2015/08/26 12:00 a.m.•54 views

Symantec Endpoint Protection Manager authentication bypass

Added: 08/26/2015 CVE: CVE-2015-1486 BID: 76074 Background Symantec Endpoint Protection, by Symantec Corporation, is an antivirus and personal firewall product designed to be centrally managed in corporate environments by the Symantec Endpoint Protection Manager SEPM. Problem Symantec Endpoint...

7.5CVSS7.1AI score0.68339EPSS
SaveExploits9
securityvulns
securityvulns
•added 2015/08/24 12:00 a.m.•72 views

HP Central View applications information leakage

No description provided...

9CVSS0.9AI score0.0205EPSS
SaveExploits0References1Affected Software6
securityvulns
securityvulns
•added 2015/08/24 12:00 a.m.•62 views

[security bulletin] HPSBGN03386 rev.1 - HP Central View Fraud Risk Management, Revenue Leakage Control, Dealer Performance Audit, Credit Risk Control, Roaming Fraud Control, Subscription Fraud Prevention, Remote Disclosure of Information, Local Discl

Note: the current version of the following document is available here: https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04751893 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04751893 Version: 1 HPSBGN03386 rev.1 - HP Central View Fraud Risk Management,...

9CVSS0.5AI score0.0205EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2015/08/18 12:00 a.m.•15 views

The vulnerability of the Cisco UCS Central operating system, allowing a hacker to read arbitrary files

The vulnerability of the Cisco UCS Central operating system’s web framework exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to read arbitrary files using a specially crafted HTTP request...

5CVSS5.6AI score0.01729EPSS
SaveExploits0References2
CNVD
CNVD
•added 2015/08/04 12:00 a.m.•16 views

Cisco Prime Central for Hosted Collaboration Solution Cross-Site Scripting Vulnerability

Cisco Prime Central for Hosted Collaboration Solution PC4HCS is a carrier-grade, scalable service assurance management platform from Cisco. The platform provides secure access to authentication, real-time fault analysis and other functions. A cross-site scripting vulnerability exists in the...

4.3CVSS6.2AI score0.0136EPSS
SaveExploits0References1
NVD
NVD
•added 2015/08/01 1:59 a.m.•27 views

CVE-2015-4292

Cross-site scripting XSS vulnerability in the management interface in Cisco Prime Central for Hosted Collaboration Solution PC4HCS 10.62 allows remote attackers to inject arbitrary web script or HTML via an unspecified value, aka Bug ID CSCuv45818...

4.3CVSS5.8AI score0.0136EPSS
SaveExploits0References2
Prion
Prion
•added 2015/08/01 1:59 a.m.•26 views

Cross site scripting

Cross-site scripting XSS vulnerability in the management interface in Cisco Prime Central for Hosted Collaboration Solution PC4HCS 10.62 allows remote attackers to inject arbitrary web script or HTML via an unspecified value, aka Bug ID CSCuv45818...

4.3CVSS6.2AI score0.0136EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2015/08/01 1:00 a.m.•58 views

CVE-2015-4292

Cisco Prime Central for Hosted Collaboration Solution (PC4HCS) 10.6(2) contains a cross-site scripting (XSS) vulnerability in its management interface caused by insufficient input filtering of user-submitted values. Exploitation would allow a remote attacker to inject arbitrary web script or HTML...

4.3CVSS5.9AI score0.0136EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2015/08/01 12:00 a.m.•3 views

PT-2015-6505

Name of the Vulnerable Software and Affected Versions Cisco Prime Central for Hosted Collaboration Solution PC4HCS version 10.62 Description A cross-site scripting XSS issue exists in the management interface, allowing remote attackers to inject arbitrary web script or HTML via an unspecified...

4.3CVSS0.0136EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/08/01 12:00 a.m.•19 views

CVE-2015-4292: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the management interface in Cisco Prime Central for Hosted Collaboration Solution PC4HCS 10.62 allows remote attackers to inject arbitrary web script or HTML via an unspecified value, aka Bug ID CSCuv45818...

4.3CVSS6AI score0.0136EPSS
SaveExploits0References2
Cisco
Cisco
•added 2015/07/30 8:07 p.m.•50 views

Cisco Prime Central Hosted Collaboration Solution Cross-Site Scripting Vulnerability

A vulnerability in the HTTP web-based management interface of the Cisco Prime Central for Hosted Collaboration Solution PC4HCS could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of the affected system. The vulnerability...

4.3CVSS5.7AI score0.0136EPSS
SaveExploits0References1
CNVD
CNVD
•added 2015/07/30 12:00 a.m.•19 views

Cisco UCS Central Software Directory Traversal Vulnerability

Cisco UCS Central Software is the United States of America Cisco Cisco, a combination of computing, virtualization and networking in one software platform. A directory traversal vulnerability in Cisco UCS Central Software allows remote attackers to read arbitrary files via a crafted HTTP request...

5CVSS6.9AI score0.01729EPSS
SaveExploits0References1
NVD
NVD
•added 2015/07/29 2:59 p.m.•26 views

CVE-2015-4286

The web framework in Cisco UCS Central Software 1.30.99 allows remote attackers to read arbitrary files via a crafted HTTP request, aka Bug ID CSCuu41377...

5CVSS6.6AI score0.01729EPSS
SaveExploits0References2
Prion
Prion
•added 2015/07/29 2:59 p.m.•25 views

Command injection

The web framework in Cisco UCS Central Software 1.30.99 allows remote attackers to read arbitrary files via a crafted HTTP request, aka Bug ID CSCuu41377...

5CVSS7.1AI score0.01729EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2015/07/29 2:00 p.m.•44 views

CVE-2015-4286

The web framework in Cisco UCS Central Software 1.30.99 allows remote attackers to read arbitrary files via a crafted HTTP request, aka Bug ID CSCuu41377...

6.6AI score0.01729EPSS
SaveExploits0References2
Rows per page
Query Builder