204 matches found
TIBCO tibbr web server component elevation of privilege vulnerability
TIBCO tibbr is a set of enterprise social platform software from TIBCO Software. The software includes features for posting news, making announcements, and sharing online. tibbr web server is one of the web server components. A security vulnerability exists in the tibbr web server component of...
CVE-2017-12337
CVE-2017-12337 affects Cisco Voice Operating System (Voice OS) upgrade mechanisms. A refresh upgrade (RU) or Prime Collaboration Deployment (PCD) migration can leave an engineering flag enabled after completion, potentially allowing an unauthenticated attacker to gain root access with a known pas...
Unauthorized Access Vulnerability in Multiple Cisco Products
Cisco Voice Operating System is a set of voice operating system of the United States Cisco Cisco.Cisco Unified Communications Manager UCM and so on are based on the Cisco Voice Operating System platform products.Cisco Unified Communications Manager UCM is a call processing component of the unifie...
Cisco Voice Operating System-Based Products Unauthorized Access Vulnerability
A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System software platform could allow an unauthenticated, remote attacker to gain unauthorized, elevated access to an affected device. The vulnerability occurs when a refresh upgrade or Prim...
Cisco Application Policy Infrastructure Controller Enterprise Module Unauthorized Access Vulnerability
Cisco Application Policy Infrastructure Controller Enterprise Module APIC-EM is a suite of Cisco applications that provide policy-based automated configuration of end-to-end infrastructure controllers. An unauthorized access vulnerability vulnerability exists in the firewall configuration in Cisc...
CVE-2017-4979
EMC Isilon OneFS 8.0.1.0, OneFS 8.0.0.0 - 8.0.0.2, OneFS 7.2.1.0 - 7.2.1.3, and OneFS 7.2.0.x is affected by an NFS export vulnerability. Under certain conditions, after upgrading a cluster from OneFS 7.1.1.x or earlier, users may have unexpected levels of access to some NFS exports...
Popcorn Time DLL Hijacking Vulnerability
Popcorn Time is an open source movie player that plays HD movies directly from cloud servers via seed files. A DLL hijacking vulnerability exists in Popcorn Time version 5.6, which can be exploited by local attackers to inject code or gain advanced access...
Intellian Satellite TV t-Series and v-Series firmware contains insecure default credentials
Overview Intellian Satellite TV antennas t-Series and v-Series, firmware version 1.07, uses default credentials. Description CWE-255: Credentials Management- CVE-2016-6551Intellian Satellite TV antennas t-Series and v-Series, firmware version 1.07, uses non-random default credentials of: ftp/ftp ...
Symantec Embedded Security: Critical System Protection and Symantec Data Center Security: Server Adv
SUMMARY Symantec Embedded Security: Critical System Protection SES:CSP and Data Center Security: Server Advanced SDCS:SA were susceptible to security issues in the management server and deployed agents which could enable unauthorized elevated access, bypassing security protection on agents,...
Symantec Messaging Gateway Multiple Security Issues
SUMMARY Symantec Messaging Gateway SMG Appliance management console was susceptible to potential recovery of the AD password by any user with at least authorized read access to the appliance. Also, an admin or support user could potentially escalate a lower-privileged access to root on the...
Cogent Real-Time Systems Cogent DataHub Privilege Vulnerability
Cogent Real-Time Systems Cogent DataHub is a suite of real-time data solutions from Cogent Real-Time Systems, a Canadian company, which is part of the SCADA System for Data Acquisition and Supervisory Control and Automation software. A boost vulnerability exists in Cogent Real-Time Systems Cogent...
Symantec Endpoint Protection Multiple Security Issues
SUMMARY Symantec Endpoint Protection SEP was susceptible to a number of security findings that could potentially result in an authorized but less privileged user gaining elevated access to the Management Console. SEP Client security mitigations can potentially be bypassed allowing arbitrary code...
Corel Linux OS 1.0 Dosemu Distribution Configuration Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1030/info A vulnerability exists in the configuration of Dosemu, the DOS emulator, as shipped with Corel Linux 1.0. Dosemu documentation cautions that the system.com binary should not be made available to users, as it...
Print n Share v5.5 iOS - Multiple Web Vulnerabilities
No description provided by source. Document Title: =============== Print n Share v5.5 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1154 Release Date: ============= 2013-12-06 Vulnerability Laboratory ID VL-ID:...
CA20121001-01: Security Notice for CA License
CA20121001-01: Security Notice for CA License Issued: October 01, 2012 CA Technologies Support is alerting customers to two potential risks in CA License also known as CA Licensing. Vulnerabilities exist that can allow a local attacker to execute arbitrary commands or gain elevated access. CA...
Mandriva Update for firefox MDVSA-2011:079 (firefox)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Mandriva Linux Security Advisory : firefox (MDVSA-2011:079)
Chris Evans of the Chrome Security Team reported that the XSLT generate-id function returned a string that revealed a specific valid address of an object on the memory heap. It is possible that in some cases this address would be valuable information that could be used by an attacker while...
SeaMonkey < 2.0.14 Multiple Vulnerabilities
Binary data 5904.prm...
Symantec Altiris Notification Server Agent GUI Local Elevation of Privilege
SUMMARY A non-privileged user can leverage the Symantec Altiris Notification Server Agent Graphical User Interface GUI to gain privileged access to the system. Severity Medium Remote Access adjacent network | No ---|--- Local Access | Yes Authentication Required | Yes Exploit available | No...