18971 matches found
PT-2024-12677 · Ibm · Ibm Storage Scale
Name of the Vulnerable Software and Affected Versions: IBM Storage Scale versions 5.1.0.0 through 5.1.9.2 Description: The issue allows an authenticated user to steal or manipulate an active session to gain access to the system. Recommendations: For versions 5.1.0.0 through 5.1.9.2, update to a...
PT-2024-25703 · Ipmi · Ipmi
Name of the Vulnerable Software and Affected Versions: IPMI affected versions not specified Description: The issue concerns implementations of IPMI Authenticated sessions that do not provide enough randomness, making them susceptible to session hijacking. An attacker can exploit this by using...
IPMI 安全漏洞
IPMI is an IPMI open source specification for a computer interface. It provides the ability to monitor and control the operational status of the system's central processor, firmware, and operating system. A security vulnerability exists in IPMI that stems from an inability to provide enough...
BMC software fails to validate IPMI session.
Overview The Intelligent Platform Management Interface IPMI implementations in multiple manufacturer's Baseboard Management Controller BMC software are vulnerable to IPMI session hijacking. An attacker with access to the BMC network with IPMI enabled can abuse the lack of session integrity to...
CVE-2023-51710
EMS SQL Manager 3.6.2 build 55333 for Oracle allows DLL hijacking: a user can trigger the execution of arbitrary code every time the product is executed...
CVE-2024-1579
Incorrect Usage of Seeds in Pseudo-Random Number Generator PRNG vulnerability in Secomea GateManager Webserver modules allows Session Hijacking.This issue affects GateManager: before 11.2.624071020...
CVE-2024-1579 Insufficient seeding of random number generator
Incorrect Usage of Seeds in Pseudo-Random Number Generator PRNG vulnerability in Secomea GateManager Webserver modules allows Session Hijacking.This issue affects GateManager: before 11.2.624071020...
CVE-2024-1579 Insufficient seeding of random number generator
Incorrect Usage of Seeds in Pseudo-Random Number Generator PRNG vulnerability in Secomea GateManager Webserver modules allows Session Hijacking.This issue affects GateManager: before 11.2.624071020...
CVE-2024-1579
The CVE concerns Secomea GateManager, specifically the Webserver modules, with an underlying flaw in the PRNG seeding. The root cause is Incorrect Usage of Seeds in the PRNG, which can lead to session hijacking. Affected/version info: GateManager before 11.2.624071020. Documented impact indicates...
Doctor Appointment Management System 1.0 Cross Site Scripting
Application Name: Doctor Appointment Management System Software Link: Download Link Vendor Homepage: Vendor Homepage BuG: XsS BUGAuthor: SoSPiro Version: 1.0 CVE: CVE-2024-4293 Vulnerable code section: - http://localhost/Doctor-Appointment-SystemPHP/dams/doctor/appointment-bwdates.php - Lines 57-...
PT-2024-18147 · Secomea · Secomea Gatemanager
Name of the Vulnerable Software and Affected Versions: Secomea GateManager versions prior to 11.2.624071020 Description: The issue is related to the incorrect usage of seeds in the Pseudo-Random Number Generator PRNG in the Secomea GateManager's Webserver modules, allowing session hijacking...
CVE-2023-51710
EMS SQL Manager 3.6.2 (build 55333) for Oracle is affected by a DLL hijacking vulnerability that can allow a local user to execute arbitrary code on product startup. Root cause: DLL hijack during launch. Impact per sources: arbitrary code execution with LOW confidentiality/integrity/availability ...
Oracle EMS SQL Manager 安全漏洞
Oracle EMS SQL Manager is a database management tool from Oracle Corporation USA. A security vulnerability exists in Oracle EMS SQL Manager version 3.6.2 that originates from allowing DLL hijacking, which allows users to trigger arbitrary code execution...
PT-2024-14254 · Unknown · Ems Sql Manager
Name of the Vulnerable Software and Affected Versions: EMS SQL Manager version 3.6.2 build 55333 for Oracle Description: The issue allows DLL hijacking, enabling a user to trigger the execution of arbitrary code every time the product is executed. Recommendations: For EMS SQL Manager version 3.6....
CVE-2023-51710
EMS SQL Manager 3.6.2 build 55333 for Oracle allows DLL hijacking: a user can trigger the execution of arbitrary code every time the product is executed...
CVE-2023-51710
EMS SQL Manager 3.6.2 build 55333 for Oracle allows DLL hijacking: a user can trigger the execution of arbitrary code every time the product is executed...
RHEL 6 / 7 : rh-ruby22-ruby (RHSA-2018:0583)
The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:0583 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system...
RHEL 6 / 7 : rh-ruby23-ruby (RHSA-2018:0585)
The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:0585 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system...
RHEL 6 / 7 : rh-ruby24-ruby (RHSA-2017:3485)
The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:3485 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system...
