1091 matches found
CVE-2014-5431
Baxter SIGMA Spectrum Infusion System version 6.05 model 35700BAX with wireless battery module WBM version 16 contains a hard-coded password, which provides access to basic biomedical information, limited device settings, and network configuration of the WBM, if connected. The hard-coded password...
CVE-2014-5432
CVE-2014-5432 affects Baxter SIGMA Spectrum Infusion System v6.05 (model 35700BAX) with Wireless Battery Module (WBM) v16. The root cause includes unauthenticated remote SSH access (Port 22) and related credential exposure. Consequences: remote attacker could modify WBM configuration and retrieve...
CVE-2014-5432
Baxter SIGMA Spectrum Infusion System version 6.05 model 35700BAX with wireless battery module WBM version 16 is remotely accessible via Port 22/SSH without authentication. A remote attacker may be able to make unauthorized configuration changes to the WBM, as well as issue commands to access...
CVE-2015-3956
Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Infusion System, version 3.13 and prior accept drug libraries, firmware updates, pump commands, and unauthorized configuration changes from unauthenticated devices on the host...
Input validation
A vulnerability in the filesystem permissions of Cisco NX-OS Software could allow an authenticated, local attacker to access sensitive data that could be used to elevate their privileges to administrator. The vulnerability is due to improper implementation of filesystem permissions. An attacker...
Cisco NX-OS Software Privilege Escalation Vulnerability
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to escalate lower-level privileges to the administrator level. The vulnerability is due to insufficient authorization enforcement. An attacker could exploit this vulnerability by authenticating to the...
CVE-2019-6520
CVE-2019-6520 affects Moxa IKS and EDS industrial switches, caused by improper access control on the server side that allows a read-only user to perform arbitrary configuration changes. Affected products include IKS-G6824A series (Version 5.6 and prior) and EDS-405A/EDS-408A/EDS-510A series (Vers...
CVE-2019-6520
Moxa IKS and EDS does not properly check authority on server side, which results in a read-only user being able to perform arbitrary configuration changes...
CVE-2019-6520
Moxa IKS and EDS does not properly check authority on server side, which results in a read-only user being able to perform arbitrary configuration changes...
Design/Logic Flaw
Moxa IKS and EDS does not properly check authority on server side, which results in a read-only user being able to perform arbitrary configuration changes...
Moxa IKS and EDS Improper Access Control Vulnerability
Moxa IKS and EDS is a series of industrial switches introduced by Moxa. An improper access control vulnerability exists in the Moxa IKS and EDS series. The vulnerability stems from the device failing to properly check permissions on the server side. An attacker could exploit the vulnerability to...
CVE-2018-14666
An improper authorization flaw was found in the Smart Class feature of Foreman. An attacker can use it to change configuration of any host registered in Red Hat Satellite, independent of the organization the host belongs to. This flaw affects all Red Hat Satellite 6 versions...
CVE-2018-14666
An improper authorization flaw was found in the Smart Class feature of Foreman. An attacker can use it to change configuration of any host registered in Red Hat Satellite, independent of the organization the host belongs to. This flaw affects all Red Hat Satellite 6 versions...
CVE-2018-16201
Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier uses hard-coded credentials, which may allow an attacker on the same network segment to login to the administrators settings screen and change the configuration or execute arbitrary OS commands...
WordPress WP GDPR Compliance Plugin Privilege Escalation
The Wordpress GDPR Compliance plugin 'WordPress WP GDPR Compliance Plugin Privilege Escalation', 'Description' = %q The Wordpress GDPR Compliance plugin = v1.4.2 allows unauthenticated users to set wordpress administration options by overwriting values within the database. The vulnerability is...
RICOH Interactive Whiteboard Multiple Vulnerabilities
RICOH Interactive Whiteboard is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
Can we change StoreFront Or Delivery Controller's IP Address After Configuring Thee XenApp/XenDesktop Site?
Can we change StoreFront Or Delivery Controller's IP Address After Configuring the XenApp/XenDesktop Site?...
Provisioning Services :"You must restart your computer to apply these changes" Occurs on Every Target Device but not on the Template VM
After any changes in hardware configuration of template used to create target device , target devices start getting prompt "You must restart your computer to apply these changes" when booting from the same vDisk...
EulerOS 2.0 SP2 : dnsmasq (EulerOS-SA-2018-1285)
According to the versions of the dnsmasq packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A memory exhaustion flaw was found in dnsmasq in the EDNS0 code. An attacker could send crafted DNS packets which would trigger memory...