3095 matches found
Lenovo PowerV Firewall cli Command Execution Vulnerability
Lenovo PowerV Firewall is a firewall product independently developed by NetGuard. A remote command execution vulnerability exists in the Lenovo Power V Firewall due to a default password. Lenovo Power V series management services run on ports 22 and 23 by default, and provide management interface...
OSIsoft PI System Incomplete Model of Endpoint Features Vulnerability
OVERVIEW OSIsoft has identified an incomplete model of endpoint features vulnerability in OSIsoft’s PI System software. OSIsoft has produced new versions to mitigate this vulnerability. AFFECTED PRODUCTS The following PI System software versions are affected: Applications using PI Asset Framework...
Ubiquiti Inc.: IDOR Causing Deletion of any account
The researcher demonstrated how to close other users account, using a IDOR in community.ubnt.com he was able to delete all data in others account using the user id number of the victim. IDOR in Community.ubnt.com :500$ Created two user:-- Attacker with username:--vibhuti123i Victim:-- Johnvictim...
Users experience undesirable behaviour like profile corruption, data loss with Profile Management
Users may Experience Profile corruption, slow logons, data loss or unexpected behaviour if using profiles from differing Windows version as Roaming or UPM profiles...
CVE-2016-4530
OSIsoft PI SQL Data Access Server aka OLE DB 2016 1.5 allows remote authenticated users to cause a denial of service service outage and data loss via a message...
glibc: getaddrinfo() writes DNS queries to random file descriptors under high load
It was discovered that, under certain circumstances, glibc's getaddrinfo function would send DNS queries to random file descriptors. An attacker could potentially use this flaw to send DNS queries to unintended recipients, resulting in information disclosure or data loss due to the application...
Use CouchDB to unauthorized access vulnerability to execute arbitrary system commands-bug warning-the black bar safety net
5 on 1 6, Ali cloud shield defense against the team from external sources informed that the CouchDB database exists for unauthorized access vulnerabilities in the configuration is incorrect. After the test, the cloud shield team was the first to discover the use of the unauthorized access...
FCC takes initiative to Speed Up Mobile Security Updates
In Brief The Smartphone users are fed up with slow security updates, so two United States federal agencies have launched an official inquiry to know how manufacturers and carriers deal with mobile phone security updates and what they are doing to roll out patches as quickly as possible. The...
EMC RSA Data Loss Prevention Clickjacking Vulnerability
EMC RSA Data Loss Prevention monitors network traffic and protects against data loss. A clickjacking vulnerability exists in EMC RSA Data Loss Prevention versions prior to 9.6 SP2 P5, which could allow a remote attacker to execute a clickjacking attack via constructed web site elements...
EMC RSA Data Loss Prevention Security Restriction Bypass Vulnerability
EMC RSA Data Loss Prevention monitors network traffic and protects against data loss. A security restriction bypass vulnerability exists in EMC RSA Data Loss Prevention versions prior to 9.6 SP2 P5. A remote attacker could exploit this vulnerability to bypass target object access restrictions via...
CVE-2016-0895
EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote attackers to conduct clickjacking attacks via web-site elements with crafted transparency or opacity...
CVE-2016-0894
EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote authenticated users to bypass intended object access restrictions via a modified parameter...
CVE-2016-0894
EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote authenticated users to bypass intended object access restrictions via a modified parameter...
CVE-2016-0893
EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote authenticated users to obtain sensitive information by reading error messages...
Code injection
EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote attackers to conduct clickjacking attacks via web-site elements with crafted transparency or opacity...
Cross site scripting
Cross-site scripting XSS vulnerability in EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Design/Logic Flaw
EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote authenticated users to obtain sensitive information by reading error messages...
Design/Logic Flaw
EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote authenticated users to bypass intended object access restrictions via a modified parameter...