Lucene search
+L

844 matches found

NVD
NVD
added 2020/02/14 4:15 p.m.24 views

CVE-2018-21032

A vulnerability in Hitachi Command Suite prior to 8.7.1-00 and Hitachi Automation Director prior to 8.5.0-00 allow authenticated remote users to expose technical information through error messages. Hitachi Command Suite includes Hitachi Device Manager and Hitachi Compute Systems Manager...

4.3CVSS4.5AI score0.00872EPSS
Exploits0References2
Cvelist
Cvelist
added 2020/02/14 3:51 p.m.26 views

CVE-2018-21032

A vulnerability in Hitachi Command Suite prior to 8.7.1-00 and Hitachi Automation Director prior to 8.5.0-00 allow authenticated remote users to expose technical information through error messages. Hitachi Command Suite includes Hitachi Device Manager and Hitachi Compute Systems Manager...

4.3CVSS4.6AI score0.00872EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2020/01/27 12:0 a.m.8 views

The vulnerability of the HP Device Manager software for managing thin clients, related to code errors, allows an attacker to escalate their privileges, execute arbitrary code, or disclose sensitive information.

The vulnerability of the HP Device Manager software for managing thin clients is related to code errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges, execute arbitrary code, or disclose sensitive information...

8.1CVSS5.7AI score
Exploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2019/12/13 12:0 a.m.86 views

Cisco Industrial Ethernet Switches Device Manager CSRF (cisco-sa-20180418-iess)

According to its self-reported version, Cisco IOS on Cisco Industrial Ethernet IE Switches is affected by a cross-site request forgery CSRF vulnerability due to insufficient CSRF protection by the device manager web interface. An unauthenticated, remote attacker can exploit this, by persuading a...

8.8CVSS8.2AI score0.00936EPSS
Exploits0References3
Hewlett-Packard
Hewlett-Packard
added 2019/11/26 12:0 a.m.73 views

HPSBGN03644 rev. 1 - HP Device Manager VNC Session Remote Unauthorized Access

Potential Security Impact Remote Unauthorized Access Source: HP, HP Product Security Response Team PSRT VULNERABILITY SUMMARY HP has identified an issue affecting VNC session security within HP Device Manager that could potentially be leveraged to create unauthorized connections. RESOLUTION HP is...

2.3AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:0 a.m.7 views

The vulnerability of the Junos OS router series in connection with authentication process errors allows attackers to gain access to the Junos Device Manager application and exercise full control over the system.

The vulnerability of the Junos OS router of the NFX Series is related to errors in the authentication process. Exploiting this vulnerability can allow an attacker to gain access to the Junos Device Manager JDM and gain full control over the system...

7.8CVSS5.5AI score0.00379EPSS
Exploits0References2Affected Software1
CNVD
CNVD
added 2019/10/10 12:0 a.m.4 views

Juniper Networks Junos OS License Issue Vulnerability (CNVD-2020-13540)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. An authorization issue vulnerability exists in Juniper Networks Junos OS versions prior to 18.2R1 and prior to 18.2X75-D5,...

7.8CVSS6.9AI score0.00379EPSS
Exploits0References1
OSV
OSV
added 2019/10/09 8:15 p.m.5 views

CVE-2019-0057

An improper authorization weakness in Juniper Networks Junos OS allows a local authenticated attacker to bypass regular security controls to access the Junos Device Manager JDM application and take control of the system. This issue affects: Juniper Networks Junos OS versions prior to 18.2R1,...

7.8CVSS5.8AI score0.00379EPSS
Exploits0References1
NVD
NVD
added 2019/09/25 6:15 p.m.28 views

CVE-2019-6653

There is a Stored Cross Site Scripting vulnerability in the undisclosed page of a BIG-IQ 6.0.0-6.1.0 or 5.2.0-5.4.0 system. The attack can be stored by users granted the Device Manager and Administrator roles...

5.4CVSS5.3AI score0.00631EPSS
Exploits0References2
OSV
OSV
added 2019/09/25 6:15 p.m.7 views

CVE-2019-6653

There is a Stored Cross Site Scripting vulnerability in the undisclosed page of a BIG-IQ 6.0.0-6.1.0 or 5.2.0-5.4.0 system. The attack can be stored by users granted the Device Manager and Administrator roles...

5.4CVSS6AI score0.00631EPSS
Exploits0References2
Prion
Prion
added 2019/09/25 6:15 p.m.19 views

Cross site scripting

There is a Stored Cross Site Scripting vulnerability in the undisclosed page of a BIG-IQ 6.0.0-6.1.0 or 5.2.0-5.4.0 system. The attack can be stored by users granted the Device Manager and Administrator roles...

3.5CVSS5.3AI score0.00631EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2019/09/25 6:0 p.m.54 views

CVE-2019-6653

CVE-2019-6653 corresponds to a Stored Cross-Site Scripting vulnerability in F5 BIG-IQ Centralized Management. Connected documents confirm impact on BIG-IQ 5.2.0–5.4.0 and 6.0.0–6.1.0, with the flaw exploitable by users holding Device Manager or Administrator roles and potentially enabling access ...

5.4CVSS5.2AI score0.00631EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2019/09/25 6:0 p.m.31 views

CVE-2019-6653

There is a Stored Cross Site Scripting vulnerability in the undisclosed page of a BIG-IQ 6.0.0-6.1.0 or 5.2.0-5.4.0 system. The attack can be stored by users granted the Device Manager and Administrator roles...

5.4AI score0.00631EPSS
Exploits0References2
Citrix
Citrix
added 2019/08/14 12:0 a.m.8 views

How to Set up App Lock Policy (Blacklisted Apps) Using XenMobile Device Manager

This article explains how to restrict applications using XenMobile Device Manager. You can create a policy in XenMobile to define a list of apps that are allowed to run on a device, or a list of apps that are blocked from running on a device. Please refer to Citrix documentation: Tuning XenMobile...

7AI score
Exploits0
Microsoft CVE
Microsoft CVE
added 2019/08/13 7:0 a.m.87 views

Encryption Key Negotiation of Bluetooth Vulnerability

Executive Summary Microsoft is aware of the Bluetooth BR/EDR basic rate/enhanced data rate, known as "Bluetooth Classic" key negotiation vulnerability that exists at the hardware specification level of any BR/EDR Bluetooth device. An attacker could potentially be able to negotiate the offered key...

9.3CVSS9AI score0.02691EPSS
Exploits2
OSV
OSV
added 2019/08/09 6:15 p.m.4 views

CVE-2019-5408

Command View Advanced Edition CVAE products contain a vulnerability that could expose configuration information of hosts and storage systems that are managed by Device Manager server. This problem is due to a vulnerability in Device Manager GUI. The following products are affected. DevMgr version...

6.5CVSS6.6AI score0.01557EPSS
Exploits0References1
NVD
NVD
added 2019/08/09 6:15 p.m.12 views

CVE-2019-5408

Command View Advanced Edition CVAE products contain a vulnerability that could expose configuration information of hosts and storage systems that are managed by Device Manager server. This problem is due to a vulnerability in Device Manager GUI. The following products are affected. DevMgr version...

6.5CVSS6.4AI score0.01557EPSS
Exploits0References1
Prion
Prion
added 2019/08/09 6:15 p.m.20 views

Design/Logic Flaw

Command View Advanced Edition CVAE products contain a vulnerability that could expose configuration information of hosts and storage systems that are managed by Device Manager server. This problem is due to a vulnerability in Device Manager GUI. The following products are affected. DevMgr version...

6.4CVSS6.4AI score0.01557EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2019/08/09 5:49 p.m.75 views

CVE-2019-5408

CVE-2019-5408 affects HPE CVAE (Command View Advanced Edition) products, enabling an information disclosure of hosts/storage configuration via the Device Manager GUI. Affected stack: DevMgr 7.0.0-00 up to

6.5CVSS6.4AI score0.01557EPSS
Exploits0References1Affected Software3
Cvelist
Cvelist
added 2019/08/09 5:49 p.m.18 views

CVE-2019-5408

Command View Advanced Edition CVAE products contain a vulnerability that could expose configuration information of hosts and storage systems that are managed by Device Manager server. This problem is due to a vulnerability in Device Manager GUI. The following products are affected. DevMgr version...

6.5AI score0.01557EPSS
Exploits0References1
Rows per page
Query Builder