76 matches found
The vulnerability in Siemens SIMATIC and OpenPCS 7 industrial equipment, related to insufficient verification of input data, allows a intruder to trigger a service failure.
The vulnerability in Siemens SIMATIC and OpenPCS 7 industrial equipment exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to trigger a maintenance failure by sending a specially crafted request through the remote control service of...
CVE-2014-3820
Cross-site scripting XSS vulnerability in the SSL VPN/UAC web server in the Juniper Junos Pulse Secure Access Service SSL VPN devices with IVE OS 7.1 before 7.1r16, 7.4 before 7.4r3, and 8.0 before 8.0r1 and the Juniper Junos Pulse Access Control Service devices with UAC OS 4.1 before 4.1r8, 4.4...
3.3/4.0/4.2 MERCUR Mailserver Control-Service Buffer Overflow
No description provided by source. source: http://www.securityfocus.com/bid/5261/info MERCUR Mailserver is prone to a remotely exploitable buffer overflow condition. The condition is due to insufficient bounds checking in the Control-Service component, which listens on TCP port 32000 by default. ...
avm fritz!dsl igd control service 2.2.29 - Directory Traversal information disclosure vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22093/info The AVM Fritz!DSL IGD Control Service is prone to a remote information-disclosure vulnerability because the application fails to properly sanitize user-supplied input. Exploiting this issue allows remote,...
CVE-2014-3812
The CVE-2014-3812 issue affects Juniper Junos Pulse Secure Access Service (SSL VPN) IVE OS (<7.4r5) and 8.x (<8.0r1) and Junos Pulse Access Control Service (UAC) (<4.4r5) / 5.x (
CVE-2014-3812
The Juniper Junos Pulse Secure Access Service SSL VPN devices with IVE OS before 7.4r5 and 8.x before 8.0r1 and Junos Pulse Access Control Service UAC before 4.4r5 and 5.x before 5.0r1 enable cipher suites with weak encryption algorithms, which make it easier for remote attackers to obtain...
CVE-2013-5650
Junos Pulse Secure Access Service IVE 7.1 before 7.1r5, 7.2 before 7.2r10, 7.3 before 7.3r6, and 7.4 before 7.4r3 and Junos Pulse Access Control Service UAC 4.1 before 4.1r8.1, 4.2 before 4.2r5, 4.3 before 4.3r6 and 4.4 before 4.4r3, when a hardware SSL acceleration card is enabled, allows remote...
Design/Logic Flaw
Junos Pulse Secure Access Service IVE 7.1 before 7.1r5, 7.2 before 7.2r10, 7.3 before 7.3r6, and 7.4 before 7.4r3 and Junos Pulse Access Control Service UAC 4.1 before 4.1r8.1, 4.2 before 4.2r5, 4.3 before 4.3r6 and 4.4 before 4.4r3, when a hardware SSL acceleration card is enabled, allows remote...
Design/Logic Flaw
Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS 7.0r2 through 7.0r8 and 7.1r1 through 7.1r5 and Junos Pulse Access Control Service aka UAC with UAC OS 4.1r1 through 4.1r5 include a test Certification Authority CA certificate in the Trusted Server CAs list, which makes it easier...
CVE-2011-5058
The CmbWebserver.dll module of the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to create arbitrary directories under the web root by specifying a non-existent directory using \ backslash characters in an HTTP GET request...
Cross site request forgery (csrf)
The CmbWebserver.dll module of the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to create arbitrary directories under the web root by specifying a non-existent directory using \ backslash characters in an HTTP GET request...
Codesys CmpWebServer Multiple Vulnerabilities
Codesys is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PsExec Service Installed
The PsExec service, a tool that allows remote control of the system, is installed on the remote Windows host. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid53916; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/02/01";...
CA XOsoft Control Service entry_point.aspx Remote Code Execution
Added: 06/07/2010 CVE: CVE-2010-1223 BID: 39238 OSVDB: 63611 Background CA XOsoft is storage and recovery management software that includes applications for combined business continuity and disaster recovery. The CA XOsoft product family includes CA XOsoft Replication, CA XOsoft High Availability...
CA XOsoft Control Service entry_point.aspx Remote Code Execution
Added: 06/07/2010 CVE: CVE-2010-1223 BID: 39238 OSVDB: 63611 Background CA XOsoft is storage and recovery management software that includes applications for combined business continuity and disaster recovery. The CA XOsoft product family includes CA XOsoft Replication, CA XOsoft High Availability...
CA XOsoft Control Service entry_point.aspx Remote Code Execution
Added: 06/07/2010 CVE: CVE-2010-1223 BID: 39238 OSVDB: 63611 Background CA XOsoft is storage and recovery management software that includes applications for combined business continuity and disaster recovery. The CA XOsoft product family includes CA XOsoft Replication, CA XOsoft High Availability...
DSquare Exploit Pack: D2SEC_CAXOSOFT
Name| d2seccaxosoft ---|--- CVE| CVE-2010-1223 Exploit Pack| D2ExploitPack Description| CA XOsoft Control Service entrypoint.aspx Remote Stack Overflow Vulnerability Notes|...
EMC Replication Manager Client Control Service Remove Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the EMC Replication Manager Client. Authentication is not required to exploit this vulnerability. The specific flaw exists within the irccd.exe process which listens by default on a TCP port around...
HDHomeRun Control Service Detection
The remote service implements HDHomeRun's control service. HDHomeRun is a device for streaming digital TV signals over a network, and its control service provides a way for software to manage the device, not only programs it streams but also its firmware. %NASLMINLEVEL 70300 C Tenable Network...