Advantech WebAccess/NMS getSyslogUiList SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech WebAccess/NMS. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the processi...

Information disclosure

Lutron Quantum BACnet Integration 2.0 firmware 3.2.243 doesn't check for correct user authentication before showing the /deviceIP information, which leads to internal network information disclosure...

Barracuda Spam Firewall <= 3.3.03.053 Remote Code Execution (extra)

No description provided by source. Title: Barracuda Arbitrary File Disclosure + Command Execution Severity: High Sensitive Information Disclosure Date: 01 August 2006 Version Affected: Barracuda Spam Firewall version 3.3.01.001 to 3.3.03.053 Discovered by: Greg Sinclair Credits: Matthew Hall...