EUVD-2017-11423

Malware in sbrugna...

EUVD-2017-11424

Malware in sbrugna...

Hammock AssetView for MacOS SQL Injection Vulnerability

Hammock AssetView for MacOS is a MacOS-based IT asset and network topology management system from Hammock Japan. The system manages various IT asset information and network topology information, and collects inventory information at regular intervals. A SQL injection vulnerability exists in Hammo...

CVE-2017-2240

Directory traversal vulnerability in AssetView for MacOS Ver.9.2.0 and earlier versions allows remote attackers to read arbitrary files via "File Transfer Web Service"...

CVE-2017-2240

Directory traversal vulnerability in AssetView for MacOS Ver.9.2.0 and earlier versions allows remote attackers to read arbitrary files via "File Transfer Web Service"...

CVE-2017-2241

SQL injection vulnerability in the AssetView for MacOS Ver.9.2.0 and earlier versions allows remote attackers to execute arbitrary SQL commands via "File Transfer Web Service"...

Directory traversal

Directory traversal vulnerability in AssetView for MacOS Ver.9.2.0 and earlier versions allows remote attackers to read arbitrary files via "File Transfer Web Service"...

Sql injection

SQL injection vulnerability in the AssetView for MacOS Ver.9.2.0 and earlier versions allows remote attackers to execute arbitrary SQL commands via "File Transfer Web Service"...

CVE-2017-2240: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in AssetView for MacOS Ver.9.2.0 and earlier versions allows remote attackers to read arbitrary files via "File Transfer Web Service"...

CVE-2017-2241: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the AssetView for MacOS Ver.9.2.0 and earlier versions allows remote attackers to execute arbitrary SQL commands via "File Transfer Web Service"...

CVE-2017-2240

Directory traversal vulnerability in AssetView for MacOS Ver.9.2.0 and earlier versions allows remote attackers to read arbitrary files via "File Transfer Web Service"...

CVE-2017-2241

SQL injection vulnerability in the AssetView for MacOS Ver.9.2.0 and earlier versions allows remote attackers to execute arbitrary SQL commands via "File Transfer Web Service"...

PT-2017-15288

Name of the Vulnerable Software and Affected Versions AssetView for MacOS versions 9.2.0 and earlier Description A directory traversal issue in the "File Transfer Web Service" of AssetView for MacOS allows remote attackers to read arbitrary files. Recommendations For versions 9.2.0 and earlier,...

PT-2017-15289

Name of the Vulnerable Software and Affected Versions AssetView for MacOS versions 9.2.0 and earlier Description A SQL injection issue in the "File Transfer Web Service" allows remote attackers to execute arbitrary SQL commands. Recommendations For versions 9.2.0 and earlier, update to a version...