CVE-2018-15356

An authenticated attacker can execute arbitrary code using command ejection in Eltex ESP-200 firmware version 1.2.0...

CVE-2018-15357

Eltex ESP-200 may disclose password hashes. Affected product: ESP-200 firmware version 1.2.0. Vulnerability: authenticated user with low privileges can extract password hash information for all users (information disclosure). Root cause: information disclosure in firmware 1.2.0 is documented acro...

CVE-2018-15358

An authenticated attacker with low privileges can activate high privileged user and use it to expand attack surface in Eltex ESP-200 firmware version 1.2.0...

CVE-2018-15359

The CVE affects Eltex ESP-200 firmware version 1.2.0. An authenticated attacker with low privileges can exploit an insecure sudo configuration to expand the attack surface. The issue is tied to how sudo is configured on the device, enabling elevated access or broader control than intended. Offici...

CVE-2018-15356

CVE-2018-15356 affects Eltex ESP-200 firmware 1.2.0, where an authenticated attacker can execute arbitrary code via command ejection. The vulnerability is documented across multiple feeds (NVD, CNVD, CVE listing, PRION/PT-2018-12990) with an impact of remote code execution authenticated by creden...

CVE-2018-15359

An authenticated attacker with low privileges can use insecure sudo configuration to expand attack surface in Eltex ESP-200 firmware version 1.2.0...

CVE-2018-15360

The CVE-2018-15360 vulnerability affects Eltex ESP-200 devices running firmware version 1.2.0. An unauthenticated attacker can log in using default credentials to obtain privileged access. Root cause: use of default credentials for privileged accounts. Impact: potential full control of the device...

PT-2018-12991 · Eltex · Eltex Esp-200 +1

Name of the Vulnerable Software and Affected Versions: Eltex ESP-200 firmware version 1.2.0 Description: An authenticated attacker with low privileges can extract password hash information for all users. Recommendations: For Eltex ESP-200 firmware version 1.2.0, update to a newer version that...

PT-2018-12990 · Eltex · Eltex Esp-200 +1

Name of the Vulnerable Software and Affected Versions: Eltex ESP-200 version 1.2.0 Description: The issue allows an authenticated attacker to execute arbitrary code through command ejection. Recommendations: For Eltex ESP-200 version 1.2.0, at the moment, there is no information about a newer...

PT-2018-12992 · Eltex · Eltex Esp-200 +1

Name of the Vulnerable Software and Affected Versions: Eltex ESP-200 firmware version 1.2.0 Description: The issue allows an authenticated attacker with low privileges to activate a high-privileged user, potentially expanding the attack surface. Recommendations: For Eltex ESP-200 firmware version...

Sql injection

SQL injection vulnerability in ConnX ESP HR Management 4.4.0 allows remote attackers to execute arbitrary SQL commands via the ctl00$cphMainContent$txtUserName parameter to frmLogin.aspx...

CVE-2015-4043

SQL injection vulnerability in ConnX ESP HR Management 4.4.0 allows remote attackers to execute arbitrary SQL commands via the ctl00$cphMainContent$txtUserName parameter to frmLogin.aspx...

CVE-2015-4043

SQL injection vulnerability in ConnX ESP HR Management 4.4.0 allows remote attackers to execute arbitrary SQL commands via the ctl00$cphMainContent$txtUserName parameter to frmLogin.aspx...

CVE-2015-4043

CVE-2015-4043 describes a SQL injection in ConnX ESP HR Management 4.4.0. The vulnerability is exploitable remotely via the parameter ctl00$cphMainContent$txtUserName in frmLogin.aspx, allowing execution of arbitrary SQL commands. Affected component: the login page handling on ConnX ESP HR Manage...

Security Bulletin: Multiple vulnerabilities in qemu affect PowerKVM

Summary PowerKVM is affected by several vulnerabilities in qemu. These vulnerabilities have been addressed by IBM. Vulnerability Details CVEID: CVE-2016-5338 DESCRIPTION: Qemu, built with the ESP/NCR53C9x controller emulation support, is vulnerable to a denial of service, caused by an out of boun...

Solaris 10 (sparc) : 122259-09

SunOS 5.10: SunFreeware GNU ESP Ghostscript Patch. Date this patch was last updated by Sun : Dec/15/16 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc';...

Solaris 10 (x86) : 122260-06

SunOS 5.10x86: SunFreeware gnu esp ghosts. Date this patch was last updated by Sun : Jul/02/12 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

CVE-2017-14799

A cross site scripting attack in handling the ESP login parameter handling in NetIQ Access Manager before 4.3.3 could be used to inject javascript code into the login page...

Cross site scripting

A cross site scripting attack in handling the ESP login parameter handling in NetIQ Access Manager before 4.3.3 could be used to inject javascript code into the login page...

CVE-2017-14799 XSS Vulnerability with ESP URL

A cross site scripting attack in handling the ESP login parameter handling in NetIQ Access Manager before 4.3.3 could be used to inject javascript code into the login page...