Lucene search
+L

843 matches found

Japan Vulnerability Notes
Japan Vulnerability Notes
added 2012/11/29 5:48 a.m.4 views

Hitachi Device Manager Software Denial of Service (DoS) Vulnerability

Overview Hitachi Device Manager Software HDvM contains a denial of service abend vulnerability when receiving a large amount of data at once. If HDvM exits abnormally, users will be able to resume using the software by restarting the HDvM service or daemon. Impact A remote attacker could cause a...

5CVSS6.8AI score
Exploits0References2
NVD
NVD
added 2012/06/19 8:55 p.m.20 views

CVE-2009-0693

Multiple buffer overflows in Wyse Device Manager WDM 4.7.x allow remote attackers to execute arbitrary code via 1 the User-Agent HTTP header to hserver.dll or 2 unspecified input to hagent.exe...

7.5CVSS7.8AI score0.12772EPSS
Exploits0References4
NVD
NVD
added 2012/06/19 8:55 p.m.22 views

CVE-2009-0695

hagent.exe in Wyse Device Manager WDM 4.7.x does not require authentication for commands, which allows remote attackers to obtain management access via a crafted query, as demonstrated by a V52 query that triggers a power-off action...

7.5CVSS6.6AI score0.68887EPSS
Exploits11References5
Prion
Prion
added 2012/06/19 8:55 p.m.16 views

Buffer overflow

Multiple buffer overflows in Wyse Device Manager WDM 4.7.x allow remote attackers to execute arbitrary code via 1 the User-Agent HTTP header to hserver.dll or 2 unspecified input to hagent.exe...

7.5CVSS8.4AI score0.12772EPSS
Exploits0References4Affected Software1
Prion
Prion
added 2012/06/19 8:55 p.m.14 views

Authentication flaw

hagent.exe in Wyse Device Manager WDM 4.7.x does not require authentication for commands, which allows remote attackers to obtain management access via a crafted query, as demonstrated by a V52 query that triggers a power-off action...

7.5CVSS7.2AI score0.68887EPSS
Exploits11References5Affected Software1
CVE
CVE
added 2012/06/19 8:0 p.m.56 views

CVE-2009-0695

Summary of CVE-2009-0695: Wyse Device Manager (WDM) HAgent (hagent.exe) on 4.7.x allows remote commands without authentication, enabling an attacker with network access to obtain management access and trigger actions (e.g., power-off) via crafted queries (e.g., V52). Exploitation is demonstrated ...

7.5CVSS6.7AI score0.68887EPSS
Exploits11References5Affected Software1
CVE
CVE
added 2012/06/19 8:0 p.m.60 views

CVE-2009-0693

CVE-2009-0693 concerns Wyse Device Manager (WDM) 4.7.x, where multiple buffer overflows allow remote code execution. Specifically, the issues involve HServer (hserver.dll) accepting a crafted User-Agent header and HAgent (hagent.exe) receiving unspecified input leading to overflow. The vulnerabil...

7.5CVSS8.1AI score0.12772EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2012/06/19 8:0 p.m.22 views

CVE-2009-0693

Multiple buffer overflows in Wyse Device Manager WDM 4.7.x allow remote attackers to execute arbitrary code via 1 the User-Agent HTTP header to hserver.dll or 2 unspecified input to hagent.exe...

7.8AI score0.12772EPSS
Exploits0References4
Cvelist
Cvelist
added 2012/06/19 8:0 p.m.20 views

CVE-2009-0695

hagent.exe in Wyse Device Manager WDM 4.7.x does not require authentication for commands, which allows remote attackers to obtain management access via a crafted query, as demonstrated by a V52 query that triggers a power-off action...

6.6AI score0.68887EPSS
Exploits11References5
Check Point Advisories
Check Point Advisories
added 2012/04/16 12:0 a.m.6 views

Avaya WinPDM Unite Host Router Service Stack Buffer Overflow

A buffer overflow vulnerability has been reported in Avaya Windows Portable Device Manager WinPDM...

7.4AI score
Exploits0
NVD
NVD
added 2011/11/21 11:55 a.m.17 views

CVE-2011-4498

Cross-site request forgery CSRF vulnerability in the web console in Zenprise Device Manager 6.x through 6.1.8 allows remote attackers to hijack the authentication of administrators for requests that wipe mobile devices...

6.8CVSS7.1AI score0.00563EPSS
Exploits0References2
Prion
Prion
added 2011/11/21 11:55 a.m.15 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the web console in Zenprise Device Manager 6.x through 6.1.8 allows remote attackers to hijack the authentication of administrators for requests that wipe mobile devices...

6.8CVSS7.7AI score0.00563EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2011/11/21 11:0 a.m.45 views

CVE-2011-4498

Zenprise Device Manager 6.x–6.1.8 is affected by a CSRF vulnerability in the web console that lets an attacker hijack administrator authentication to trigger device wipe actions. The CVSS-based data from NVD indicates a network-accessible, low-complexity, no-auth attack with partial confidentiali...

6.8CVSS7.3AI score0.00563EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2011/11/21 11:0 a.m.26 views

CVE-2011-4498

Cross-site request forgery CSRF vulnerability in the web console in Zenprise Device Manager 6.x through 6.1.8 allows remote attackers to hijack the authentication of administrators for requests that wipe mobile devices...

7.1AI score0.00563EPSS
Exploits0References2
CERT
CERT
added 2011/11/18 12:0 a.m.53 views

Zenprise Device Manager CSRF vulnerability

Overview The Zenprise Device Manager software is susceptible to a cross-site request forgery CSRF vulnerability that may result in the compromise of the fleet of mobile devices managed by the product. Description Zenprise Device Manager is a mobile device management MDM software package that can ...

7.5AI score
Exploits0References3
OpenVAS
OpenVAS
added 2011/02/28 12:0 a.m.15 views

MOXA Device Manager MDM Tool Buffer Overflow Vulnerability

This host is installed with MOXA Device Manager and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodmoxadevicemanagerbofvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ MOXA Device Manager MDM Tool Buffer Overflow Vulnerability Authors: Madhuri D Copyright: Copyright ...

9.3CVSS1AI score0.27841EPSS
Exploits4References3
OpenVAS
OpenVAS
added 2011/02/28 12:0 a.m.12 views

MOXA Device Manager MDM Tool Buffer Overflow Vulnerability

MOXA Device Manager is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS6.9AI score0.27841EPSS
Exploits4References4
Tenable Nessus
Tenable Nessus
added 2011/02/21 12:0 a.m.20 views

Moxa Device Manager Tool MDM2_Gateway Response Remote Overflow

Binary data moxamdmtool23.nbin...

9.3CVSS7.3AI score0.27841EPSS
Exploits4References4
NVD
NVD
added 2011/02/18 6:0 p.m.19 views

CVE-2010-4741

Stack-based buffer overflow in MDMUtil.dll in MDMTool.exe in MDM Tool before 2.3 in Moxa Device Manager allows remote MDM Gateways to execute arbitrary code via crafted data in a session on TCP port 54321...

9.3CVSS7.9AI score0.27841EPSS
Exploits4References5
CVE
CVE
added 2011/02/18 5:0 p.m.74 views

CVE-2010-4741

CVE-2010-4741 affects MOXA Device Manager Tool (MDM Tool) MDM Tool before 2.3. It is a stack-based overflow in MDMUtil.dll of MDMTool.exe that enables remote code execution via crafted data in a session on TCP port 54321. Public references corroborate the vulnerability; exploitation is evidenced ...

9.3CVSS8.1AI score0.27841EPSS
Exploits4References5Affected Software2
Rows per page
Query Builder