2348 matches found
CVE-2021-44154
An issue was discovered in Reprise RLM 14.2. By using an admin account, an attacker can write a payload to /goform/editopt, which will then be triggered when running the diagnostics via /goform/diagnosticsdoit, resulting in a buffer overflow...
Buffer overflow
An issue was discovered in Reprise RLM 14.2. By using an admin account, an attacker can write a payload to /goform/editopt, which will then be triggered when running the diagnostics via /goform/diagnosticsdoit, resulting in a buffer overflow...
CVE-2021-44154
An issue was discovered in Reprise RLM 14.2. By using an admin account, an attacker can write a payload to /goform/editopt, which will then be triggered when running the diagnostics via /goform/diagnosticsdoit, resulting in a buffer overflow...
CVE-2021-44154
The CVE-2021-44154 issue affects Reprise License Manager (RLM) 14.2. An authenticated admin can write a payload to /goform/edit_opt, which is later triggered during diagnostics via /goform/diagnostics_doit, causing a buffer overflow. Some sources indicate inputs longer than 1024 characters trigge...
PT-2021-24051
Name of the Vulnerable Software and Affected Versions: Reprise RLM version 14.2 Description: An issue was discovered in Reprise RLM where an attacker, using an admin account, can write a payload to the "/goform/edit opt" API endpoint. This payload is then triggered when running the diagnostics vi...
Reprise License Manager 14.2 Buffer Overflow
Product: Reprise License Manager 14.2 Vendor: Reprise Software CVE ID: CVE-2021-44154 Vulnerability Title: Authenticated Buffer Overflow Severity: High Authors: Mark Staal Steenberg, Bilal El Ghoul, Gionathan Armando Reale, Andreas Fyhn Andersen, Oliver Lind Nordestgaard Date: 2021-11-25...
DNA testing service data breach impacting 2.1 million users
By Waqas DNA Diagnostics Center DDC has revealed that hackers managed to access highly sensitive and personal data of users including payment card data. This is a post from HackRead.com Read the original post: DNA testing service data breach impacting 2.1 million users...
IBM MQ Information Disclosure Vulnerability (CNVD-2021-92960)
IBM MQ IBM WebSphere MQ is a messaging middleware product from IBM of the United States. The product provides a reliable and proven messaging backbone primarily for service-oriented architectures SOA.IBM MQ has a security vulnerability that could be exploited by an attacker to obtain sensitive...
CVE-2021-39000
IBM MQ Appliance 9.2 CD and 9.2 LTS could allow a local attacker to obtain sensitive information by inclusion of sensitive data within diagnostics. IBM X-Force ID: 213215...
CVE-2021-39000
IBM MQ Appliance 9.2 CD and 9.2 LTS could allow a local attacker to obtain sensitive information by inclusion of sensitive data within diagnostics. IBM X-Force ID: 213215...
Information disclosure
IBM MQ Appliance 9.2 CD and 9.2 LTS could allow a local attacker to obtain sensitive information by inclusion of sensitive data within diagnostics. IBM X-Force ID: 213215...
CVE-2021-39000
IBM MQ Appliance 9.2 CD and 9.2 LTS could allow a local attacker to obtain sensitive information by inclusion of sensitive data within diagnostics. IBM X-Force ID: 213215...
PT-2021-22354
Name of the Vulnerable Software and Affected Versions IBM MQ Appliance versions 9.2 CD and 9.2 LTS Description The issue allows a local attacker to obtain sensitive information due to the inclusion of sensitive data within diagnostics. Recommendations For IBM MQ Appliance versions 9.2 CD and 9.2...
CVE-2021-39000: Exposure of Sensitive Information to an Unauthorized Actor
IBM MQ Appliance 9.2 CD and 9.2 LTS could allow a local attacker to obtain sensitive information by inclusion of sensitive data within diagnostics. IBM X-Force ID: 213215...
CVE-2021-39000
IBM MQ Appliance 9.2 CD and 9.2 LTS could allow a local attacker to obtain sensitive information by inclusion of sensitive data within diagnostics. IBM X-Force ID: 213215...
Security Bulletin: IBM MQ Java/JMS clients can inadvertently display cleartext credentials via diagnostic logs (CVE-2021-38949)
Summary An issue was idenitifed in IBM MQ Java and JMS clients where they could display clear text credentials in diagnostics log files automatically generated during system crashes. Vulnerability Details CVEID: CVE-2021-38949 DESCRIPTION: IBM MQ stores user credentials in plain clear text which...
Lantronix PremierWave 2050 Web Manager Diagnostics: Ping OS command injection vulnerability
Summary An OS command injection vulnerability exists in the Web Manager Diagnostics: Ping functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this...
CVE-2021-1973
A FTM Diag command can allow an arbitrary write into modem OS space in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...
Microsoft Windows Diagnostics Hub Link Following Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Microsoft...