CVE-2014-0769

Vulnerability CVE-2014-0769 affects Festo CECX-X-C1 and CECX-X-M1 controllers (CoDeSys/SoftMotion). The issue is improper authentication (CWE-287): unauthenticated access to TCP ports 4000 (debug) and 4001 (log) allows remote attackers to modify configuration or delete log entries. Public advisor...

CVE-2013-7363: Undefined Security Weakness

Unspecified vulnerability in the Diagnostics SMD agent in SAP Solution Manager allows remote attackers to obtain sensitive information, modify the configuration of applications, and install or remove applications via vectors involving the P4 protocol...

PT-2014-3394

Name of the Vulnerable Software and Affected Versions SAP Solution Manager affected versions not specified Description The issue allows remote attackers to obtain sensitive information, modify application configurations, and install or remove applications. This is achieved through vectors involvi...

Important: 389-ds-base

Issue Overview: It was discovered that the 389 Directory Server did not properly handle certain SASL-based authentication mechanisms. A user able to authenticate to the directory using these SASL mechanisms could connect as any other directory user, including the administrative Directory Manager...

PT-2014-2917

Name of the Vulnerable Software and Affected Versions Secunia CSI Agent versions 6.0.0.15017 and earlier, 6.0.1.1007 and earlier, 7.0.0.21 and earlier Description The issue allows local users to modify the configuration of the CSI Agent by changing the permissions of the /etc/csia config.xml file...

Authentication flaw

SAP Network Interface Router SAProuter 39.3 SP4 allows remote attackers to bypass authentication and modify the configuration via unspecified vectors...

CVE-2013-7093

CVE-2013-7093 affects SAP Network Interface Router (SAProuter) 39.3 SP4. The vulnerability allows remote attackers to bypass authentication and modify the SAProuter configuration via unspecified vectors. This is noted as a network-based issue with attack complexity low and no authentication requi...

CVE-2013-7093: Improper Authentication

SAP Network Interface Router SAProuter 39.3 SP4 allows remote attackers to bypass authentication and modify the configuration via unspecified vectors...

UBUNTU-CVE-2013-6172

steps/utils/savepref.inc in Roundcube webmail before 0.8.7 and 0.9.x before 0.9.5 allows remote attackers to modify configuration settings via the session parameter, which can be leveraged to read arbitrary files, conduct SQL injection attacks, and execute arbitrary code...

Multiple Vulnerabilities in Cisco Wireless LAN Controllers (cisco-sa-20090727-wlc)

The remote Cisco Wireless LAN Controller WLC is affected by one or more of the following vulnerabilities: - Malformed HTTP or HTTPS authentication response Denial of Service CVE-2009-1164 - SSH connections Denial of Service CVE-2009-1165 - Crafted HTTP or HTTPS request Denial of Service...

CVE-2013-5096: Undefined Security Weakness

Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly implement role-based access control, which allows remote authenticated users to modify the configuration by leveraging the read-only privilege, aka PR 863804...

Default credentials

Cisco TelePresence System Software 1.10.1 and earlier on 500, 13X0, 1X00, 30X0, and 3X00 devices, and 6.0.3 and earlier on TX 9X00 devices, has a default password for the pwrecovery account, which makes it easier for remote attackers to modify the configuration or perform arbitrary actions via...

CVE-2013-3454

Cisco TelePresence System Software 1.10.1 and earlier on 500, 13X0, 1X00, 30X0, and 3X00 devices, and 6.0.3 and earlier on TX 9X00 devices, has a default password for the pwrecovery account, which makes it easier for remote attackers to modify the configuration or perform arbitrary actions via...

PT-2013-4406

Name of the Vulnerable Software and Affected Versions Cisco TelePresence System Software versions 1.10.1 and earlier on 500, 13X0, 1X00, 30X0, and 3X00 devices Cisco TelePresence System Software version 6.0.3 and earlier on TX 9X00 devices Description The issue allows remote attackers to modify t...

CVE-2013-3454: Undefined Security Weakness

Cisco TelePresence System Software 1.10.1 and earlier on 500, 13X0, 1X00, 30X0, and 3X00 devices, and 6.0.3 and earlier on TX 9X00 devices, has a default password for the pwrecovery account, which makes it easier for remote attackers to modify the configuration or perform arbitrary actions via...

Cisco Wireless Control System SQL Injection (cisco-sa-20100811-wcs) (credentialed check)

According to its self-reported version, the version of Cisco Wireless Control System installed on the remote host is 6.0.x before 6.0.196.0. Such versions have a SQL injection vulnerability. A remote, authenticated attacker could exploit this to modify the configuration of WCS or any wireless...

PT-2013-5249

Name of the Vulnerable Software and Affected Versions Google Glass versions prior to XE6 Description The issue allows physically proximate attackers to modify the configuration or redirect users to arbitrary web sites via a crafted QR code symbol. This can be demonstrated by selecting a Wi-Fi...

CVE-2013-4872: Undefined Security Weakness

Google Glass before XE6 does not properly restrict the processing of QR codes, which allows physically proximate attackers to modify the configuration or redirect users to arbitrary web sites via a crafted symbol, as demonstrated by selecting a Wi-Fi access point in order to conduct a...

CVE-2013-4613: Undefined Security Weakness

The default configuration of the administrative interface on the Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX922 printers does not require authentication, which allows remote attackers to modify the configuration by visiting the Advanced page. NOTE: the vendor has...

PT-2013-5095

Name of the Vulnerable Software and Affected Versions Canon MG3100 Canon MG5300 Canon MG6100 Canon MP495 Canon MX340 Canon MX870 Canon MX890 Canon MX920 Canon MX922 Description The default configuration of the administrative interface on the affected printers does not require authentication,...