253 matches found
PT-2024-7377 · Unknown · Edonline Ems
Name of the Vulnerable Software and Affected Versions: EdOnline EMS affected versions not specified Description: The issue is related to the lack of data cleaning and validation in the Login field of the authentication window, which can be exploited by a remote attacker to disclose protected...
ems-ce.com Cross Site Scripting vulnerability OBB-3949824
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CLSA-2024-1718973513 Fix of 21 CVEs
CVE-url: https://ubuntu.com/security/CVE-2024-26777 - fbdev: sis: Error out if pixclock equals zero CVE-url: https://ubuntu.com/security/CVE-2021-47542 - net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic83xxaddrings CVE-url: https://ubuntu.com/security/CVE-2021-47518 - nfc: fix...
SUSE CVE-2021-47521
In the Linux kernel, the following vulnerability has been resolved: can: sja1000: fix use after free in emspcmciaaddcard If the last channel is not available then "dev" is freed. Fortunately, we can just use "pdev-irq" instead. Also we should check if at least one channel was set up...
PT-2024-24227 · Tibco · Tibco Hawk
Name of the Vulnerable Software and Affected Versions: TIBCO Hawk versions 6.2.0 through 6.2.3 Description: The issue allows a user's Enterprise Message Service EMS password to be exposed outside of the hawkagent.cfg and hawkevent.cfg config files due to an install-type password disclosure...
TIBCO Security Advisory: May 14, 2024 - TIBCO Hawk - CVE-2024-3182
TIBCO Hawk install-time password disclosure vulnerability Original release date: May 14, 2024 Last revised: --- CVE-2024-3182 Source: TIBCO Software Inc. Products Affected TIBCO Hawk versions 6.2.0, 6.2.1, 6.2.2 and 6.2.3. Component Affected: TIBCO Hawk Universal Installer including the Silent...
Oracle EMS SQL Manager 安全漏洞
Oracle EMS SQL Manager is a database management tool from Oracle Corporation USA. A security vulnerability exists in Oracle EMS SQL Manager version 3.6.2 that originates from allowing DLL hijacking, which allows users to trigger arbitrary code execution...
PT-2024-14254 · Unknown · Ems Sql Manager
Name of the Vulnerable Software and Affected Versions: EMS SQL Manager version 3.6.2 build 55333 for Oracle Description: The issue allows DLL hijacking, enabling a user to trigger the execution of arbitrary code every time the product is executed. Recommendations: For EMS SQL Manager version 3.6....
CVE-2023-51710
EMS SQL Manager 3.6.2 build 55333 for Oracle allows DLL hijacking: a user can trigger the execution of arbitrary code every time the product is executed...
CVE-2023-51710
EMS SQL Manager 3.6.2 build 55333 for Oracle allows DLL hijacking: a user can trigger the execution of arbitrary code every time the product is executed...
FortiNet FortiClient EMS 7.2.2 / 7.0.10 SQL Injection / Remote Code Execution Exploit
A remote SQL injection vulnerability exists in FortiNet FortiClient EMS Endpoint Management Server versions 7.2.0 through 7.2.2 and 7.0.1 through 7.0.10. FortiClient EMS serves as an endpoint management solution tailored for enterprises, offering a centralized platform for overseeing enrolled...
FortiNet FortiClient Endpoint Management Server FCTID SQLi to RCE
An SQLi injection vulnerability exists in FortiNet FortiClient EMS Endpoint Management Server. FortiClient EMS serves as an endpoint management solution tailored for enterprises, offering a centralized platform for overseeing enrolled endpoints. The SQLi is vulnerability is due to user controller...
FortiClient EMS Vulnerability Exploited in Connect:fun Campaign
...
ems-gk.ru Cross Site Scripting vulnerability OBB-3912068
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Fortinet FortiClient EMS SQL Injection Vulnerability
Fortinet FortiClient EMS contains a SQL injection vulnerability that allows an unauthenticated attacker to execute commands as SYSTEM via specifically crafted requests...
Exploit for SQL Injection in Fortinet Forticlient_Enterprise_Management_Server
CVE-2023-48788 Fortinet FortiClient EMS SQL Injection Vulnerab...
Vulnerabilities fixed in Fortinet FortiManager, FortiAnalyzer and FortiClient-EMS
Vulnerabilities have been fixed in Fortinet FortiManager, FortiAnalyzer and FortiClient-EMS. The vulnerabilities allow a malicious party to conduct attacks that result in the following categories of damage: SQL Injection; Manipulation of data; Remote code execution User Rights; Circumvention of...
Fortinet FortiClient EMS Installed (Windows)
Binary data fortinetforticlientemswininstalled.nbin...
Fortinet FortiClient EMS 7.0.x < 7.0.11 / 7.2.x < 7.2.3 (FG-IR-24-007)
The version of Fortinet FortiClient EMS installed on the remote host is prior to 7.0.11 or 7.2.3. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-007 advisory. - A improper neutralization of special elements used in an sql command 'sql injection' in Fortinet...