CVE-2018-15356

CVE-2018-15356 affects Eltex ESP-200 firmware 1.2.0, where an authenticated attacker can execute arbitrary code via command ejection. The vulnerability is documented across multiple feeds (NVD, CNVD, CVE listing, PRION/PT-2018-12990) with an impact of remote code execution authenticated by creden...

CVE-2018-15357

Eltex ESP-200 may disclose password hashes. Affected product: ESP-200 firmware version 1.2.0. Vulnerability: authenticated user with low privileges can extract password hash information for all users (information disclosure). Root cause: information disclosure in firmware 1.2.0 is documented acro...

CVE-2018-15358

An authenticated attacker with low privileges can activate high privileged user and use it to expand attack surface in Eltex ESP-200 firmware version 1.2.0...

CVE-2018-15356

An authenticated attacker can execute arbitrary code using command ejection in Eltex ESP-200 firmware version 1.2.0...

PT-2018-12991 · Eltex · Eltex Esp-200 +1

Name of the Vulnerable Software and Affected Versions: Eltex ESP-200 firmware version 1.2.0 Description: An authenticated attacker with low privileges can extract password hash information for all users. Recommendations: For Eltex ESP-200 firmware version 1.2.0, update to a newer version that...

PT-2018-12992 · Eltex · Eltex Esp-200 +1

Name of the Vulnerable Software and Affected Versions: Eltex ESP-200 firmware version 1.2.0 Description: The issue allows an authenticated attacker with low privileges to activate a high-privileged user, potentially expanding the attack surface. Recommendations: For Eltex ESP-200 firmware version...

CVE-2018-15359: Undefined Security Weakness

An authenticated attacker with low privileges can use insecure sudo configuration to expand attack surface in Eltex ESP-200 firmware version 1.2.0...

CVE-2018-15356: Improper Neutralization of Special Elements used in a Command

An authenticated attacker can execute arbitrary code using command ejection in Eltex ESP-200 firmware version 1.2.0...

PT-2018-12990 · Eltex · Eltex Esp-200 +1

Name of the Vulnerable Software and Affected Versions: Eltex ESP-200 version 1.2.0 Description: The issue allows an authenticated attacker to execute arbitrary code through command ejection. Recommendations: For Eltex ESP-200 version 1.2.0, at the moment, there is no information about a newer...

CVE-2018-15358: Improper Input Validation

An authenticated attacker with low privileges can activate high privileged user and use it to expand attack surface in Eltex ESP-200 firmware version 1.2.0...

CVE-2018-15357: Exposure of Sensitive Information to an Unauthorized Actor

An authenticated attacker with low privileges can extract password hash information for all users in Eltex ESP-200 firmware version 1.2.0...

CVE-2018-15360: Use of Hard-coded Credentials

An attacker without authentication can login with default credentials for privileged users in Eltex ESP-200 firmware version 1.2.0...

Sql injection

SQL injection vulnerability in ConnX ESP HR Management 4.4.0 allows remote attackers to execute arbitrary SQL commands via the ctl00$cphMainContent$txtUserName parameter to frmLogin.aspx...

CVE-2015-4043

SQL injection vulnerability in ConnX ESP HR Management 4.4.0 allows remote attackers to execute arbitrary SQL commands via the ctl00$cphMainContent$txtUserName parameter to frmLogin.aspx...

CVE-2015-4043

SQL injection vulnerability in ConnX ESP HR Management 4.4.0 allows remote attackers to execute arbitrary SQL commands via the ctl00$cphMainContent$txtUserName parameter to frmLogin.aspx...

CVE-2015-4043

CVE-2015-4043 describes a SQL injection in ConnX ESP HR Management 4.4.0. The vulnerability is exploitable remotely via the parameter ctl00$cphMainContent$txtUserName in frmLogin.aspx, allowing execution of arbitrary SQL commands. Affected component: the login page handling on ConnX ESP HR Manage...

PT-2018-4374

Name of the Vulnerable Software and Affected Versions ConnX ESP HR Management version 4.4.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the ctl00$cphMainContent$txtUserName parameter in the /frmLogin.aspx API endpoint...

CVE-2015-4043: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in ConnX ESP HR Management 4.4.0 allows remote attackers to execute arbitrary SQL commands via the ctl00$cphMainContent$txtUserName parameter to frmLogin.aspx...

Security Bulletin: Multiple vulnerabilities in qemu affect PowerKVM

Summary PowerKVM is affected by several vulnerabilities in qemu. These vulnerabilities have been addressed by IBM. Vulnerability Details CVEID: CVE-2016-5338 DESCRIPTION: Qemu, built with the ESP/NCR53C9x controller emulation support, is vulnerable to a denial of service, caused by an out of boun...

Solaris 10 (x86) : 122260-06

SunOS 5.10x86: SunFreeware gnu esp ghosts. Date this patch was last updated by Sun : Jul/02/12 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...