50 matches found
openGauss: Configuring the Upper Limit of Failed Login Attempts
You are advised to set the upper limit of failed login attempts to protect passwords from brute-force attacks. After the parameter failedloginattempts is set, an account will be automatically locked if the number of its failed login attempts exceeds the parameter value. Copyright C 2020 Greenbone...
VMware Fusion 11.x < 11.5.7 Privilege Escalation (VMSA-2020-0020)
The version of VMware Fusion installed on the remote macOS or Mac OS X host is 11.x. It is, therefore, affected by a privilege escalation vulnerability due to the way it allows configuring the system wide path. An authenticated, local attacker with normal user privileges can exploit this issue to...
Huawei Data Communication: Configuring Rate Limiting for ARP Packets (Deprecated)
This VT has been deprecated and replaced by the following VT: - SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei Data Communication: Configuring Rate Limit for ARP Miss Messages
After rate limit for ARP Miss messages is configured, the device counts the number of ARP Miss messages. If the number of ARP Miss messages exceeds the threshold, the device does not process the excess ARP Miss messages. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be...
DHCP Server 2.5.2 - Denial of Service (PoC)
Exploit Title: DHCP Server 2.5.2 - Denial of Service PoC Discovery by: Victor Mondragón Discovery Date: 2019-04-16 Vendor Homepage: http://www.dhcpserver.de/cms/ Software Link: http://www.dhcpserver.de/cms/wp-content/plugins/download-attachments Tested Version: 2.5.2 Tested on: Windows 7 x32...
Allied Telesis AT-RG634A ADSL Broadband Router - Web Shell
Allied Telesis AT-RG634A ADSL Broadband Router - Web Shell Title: Allied Telesis AT-RG634A ADSL Broadband router hidden administrative unauthenticated webshell. Vulnerability Information: - CVE: CVE-2014-1982 - Type of Vulnerability: - CWE-78 : OS Command Injection - CWE-306 : Missing...
Design/Logic Flaw
Apache Struts 2.3.1.2 and earlier, 2.3.19-2.3.23, provides interfaces that do not properly restrict access to collections such as the session and request collections, which might allow remote attackers to modify run-time data values via a crafted parameter to an application that implements an...
CVE-2008-6710
Unspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1.x before CM 3.1.4 SP2 and 4.0.x before 4.0.3 SP1 allows remote authenticated administrators to gain root privileges via unknown vectors related to "configuring data viewing or restoring credentials."...
CVE-2008-6710
Unspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1.x before CM 3.1.4 SP2 and 4.0.x before 4.0.3 SP1 allows remote authenticated administrators to gain root privileges via unknown vectors related to "configuring data viewing or restoring credentials."...
