Lucene search
K

114 matches found

0day.today
0day.today
added 2015/09/08 12:0 a.m.18 views

Cisco Sourcefire User Agent 2.2 - Insecure File Permissions

Exploit for windows platform in category local exploits / Cisco Sourcefire User Agent Insecure File Permissions Vulnerability Vendor: Cisco Product webpage: http://www.cisco.com Affected versions: Cisco SF User Agent 2.2 Fixed versions: Cisco SF User Agent 2.2-25 Date: 08/09/2015 Credits: Glafkos...

6.8AI score
Exploits0
exploitpack
exploitpack
added 2015/09/08 12:0 a.m.13 views

Cisco Sourcefire User Agent 2.2 - Insecure File Permissions

Cisco Sourcefire User Agent 2.2 - Insecure File Permissions / Cisco Sourcefire User Agent Insecure File Permissions Vulnerability Vendor: Cisco Product webpage: http://www.cisco.com Affected versions: Cisco SF User Agent 2.2 Fixed versions: Cisco SF User Agent 2.2-25 Date: 08/09/2015 Credits:...

7.4AI score
Exploits0
Exploit DB
Exploit DB
added 2015/09/08 12:0 a.m.34 views

Cisco Sourcefire User Agent 2.2 - Insecure File Permissions

/ Cisco Sourcefire User Agent Insecure File Permissions Vulnerability Vendor: Cisco Product webpage: http://www.cisco.com Affected versions: Cisco SF User Agent 2.2 Fixed versions: Cisco SF User Agent 2.2-25 Date: 08/09/2015 Credits: Glafkos Charalambous CVE: Not assigned by Cisco BugId: CSCut448...

7.4AI score
Exploits0
CVE
CVE
added 2015/06/08 2:0 p.m.49 views

CVE-2015-2998

SysAid Help Desk (before version 15.2) is affected by CVE-2015-2998 due to a hardcoded encryption key used to encrypt sensitive data. The vulnerability allows remote attackers to obtain sensitive information by decrypting the database password stored in WEB-INF/conf/serverConf.xml, as demonstrate...

5CVSS6.6AI score0.62156EPSS
Exploits7References5Affected Software1
Cvelist
Cvelist
added 2015/06/08 2:0 p.m.20 views

CVE-2015-2998

SysAid Help Desk before 15.2 uses a hardcoded encryption key, which makes it easier for remote attackers to obtain sensitive information, as demonstrated by decrypting the database password in WEB-INF/conf/serverConf.xml...

6.4AI score0.62156EPSS
Exploits7References5
Tenable Nessus
Tenable Nessus
added 2015/03/01 12:0 a.m.23 views

Siemens SIMATIC WinCC (TIA Portal) 13 < 13 SP1 Multiple Vulnerabilities (SSA-543623)

Binary data scadasiemenstiawinccmultiplevulnerabilitiesSSA-543623.nbin...

6.8AI score
Exploits0References4
Cvelist
Cvelist
added 2015/02/02 4:0 p.m.16 views

CVE-2015-1453

The qm class in Fortinet FortiClient 5.2.3.091 for Android uses a hardcoded encryption key of FoRtInEt!AnDrOiD, which makes it easier for attackers to obtain passwords and possibly other sensitive data by leveraging the key to decrypt data in the Shared Preferences...

6.4AI score0.00156EPSS
Exploits1References3
CVE
CVE
added 2015/02/02 4:0 p.m.39 views

CVE-2015-1453

CVE-2015-1453 affects Fortinet FortiClient for Android 5.2.3.091, where the qm class uses a hardcoded encryption key (FoRtInEt!AnDrOiD). This enables an attacker to decrypt data stored in Shared Preferences and potentially obtain passwords or other sensitive data. The available sources describe t...

5CVSS6.5AI score0.00156EPSS
Exploits1References3Affected Software1
securityvulns
securityvulns
added 2013/07/19 12:0 a.m.30 views

Cisco Unified Communications Manager multiple security vulnerabilities

Hardcoded encryption key, code execution, privilege escation, SQL injection...

8.5CVSS3AI score0.09197EPSS
Exploits0Affected Software2
securityvulns
securityvulns
added 2012/12/03 12:0 a.m.28 views

EMC Smarts Network Configuration Manager security vulnerabilities

Hardcoded ecnryption key, default unauthenticated connections...

9.3CVSS2.3AI score0.00578EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2012/11/27 9:55 p.m.19 views

CVE-2012-4615

EMC Smarts Network Configuration Manager NCM before 9.1 uses a hardcoded encryption key for the storage of credentials, which allows local users to obtain sensitive information via unspecified vectors...

2.1CVSS5.8AI score0.0004EPSS
Exploits0References6
CVE
CVE
added 2012/11/27 9:0 p.m.63 views

CVE-2012-4615

EMC Smarts Network Configuration Manager (NCM) prior to version 9.1 is affected by CVE-2012-4615 due to a hard-coded encryption key used to store credentials, enabling local users to obtain sensitive information via unspecified vectors. The related security advisory(ESA-2012-057) notes this and r...

2.1CVSS5.9AI score0.0004EPSS
Exploits0References6Affected Software1
Cvelist
Cvelist
added 2012/11/27 9:0 p.m.24 views

CVE-2012-4615

EMC Smarts Network Configuration Manager NCM before 9.1 uses a hardcoded encryption key for the storage of credentials, which allows local users to obtain sensitive information via unspecified vectors...

5.8AI score0.0004EPSS
Exploits0References6
Exploit DB
Exploit DB
added 2010/03/20 12:0 a.m.44 views

ZKSoftware Biometric Attendence Managnmnet Hardware[MIPS] 2 - Improper Authentication

Exploit Title: ZKSoftware Biometric Attendence managnmnet HardwareMIPS Improper Authentication. Date: 20-3-2010 Author: FB1H2S Software Link: http://www.esslindia.com/install/eTimeTrack.zip Version: V2 Tested on: category: Remote Code : Advisory ZKSoftware Biometric Attendence management...

7.4AI score
Exploits0
Rows per page
Query Builder