HP Integrated Lights-Out (iLO) Default Credentials

The remote HP Integrated Lights-Out iLO install uses a default set of credentials 'Admin' / 'Admin' or 'Oper' / 'Oper' to control access to its management interface. With this information, an attacker can gain access to the application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Nortel Meridian Integrated RAN Default Admin Credentials

The remote device is a Nortel Meridian Integrated RAN MIRAN that uses a set of known, default credentials 'admin' / 'admin000'. Knowing these, an attacker able to connect to the service can gain complete control of the device. Nortel MIRAN is a system card that provides multi-tasking voice...

CVE-2013-4030: Undefined Security Weakness

Integrated Management Module IMM 2 1.00 through 2.00 on IBM System X and Flex System servers supports SSL cipher suites with short keys, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack against 1 SSL or 2 TLS traffic...

MuPDF xps_parse_color()栈缓冲区溢出漏洞

No description provided by source. ============================================================= 0day - MuPDF Stack-based Buffer Overflow in xpsparsecolor ============================================================= Date of discovery: 2013-01-26 Software Links: http://www.mupdf.com/ ;...

[Websecurify] Web Security Testing Runtime

A Complete Suite Of Web Security Tools The Suite provides a complete and functional marketplace of highly integrated web application security tools. You will find that different areas are covered by various domain-specific solutions. The Suite consists of automated scanners, fuzzers, utilities an...

CVE-2013-6925

The integrated HTTPS server in Siemens RuggedCom ROS before 3.12.2 allows remote attackers to hijack web sessions by predicting a session id value...

iLO 3 < 1.65 / iLO 4 < 1.32 Multiple Vulnerabilities

Description not available %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid71494; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate", value:"2021/01/19"; scriptcveid"CVE-2013-4842",...

IPMI Cipher Suite 0 (Cipher Zero) Authentication Bypass Vulnerability (IPMI Protocol)

Intelligent Platform Management Interface IPMI services are prone to an authentication bypass vulnerability through the use of cipher suite 0 aka cipher zero. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

HP Integrated Lights-Out security vulnerabilities

Crossite scripting, information leakage...

CVE-2013-4843

HP Integrated Lights-Out 4 (iLO4) vulnerability CVE-2013-4843 affects firmware before 1.32. Remote authenticated users may disclose sensitive information via unknown vectors over the network; impact is information disclosure with no confidentiality/integrity changes stated. HP's security bulletin...

CVE-2013-4842

Cross-site scripting XSS vulnerability in HP Integrated Lights-Out 4 iLO4 with firmware before 1.32 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-4843

Unspecified vulnerability in HP Integrated Lights-Out 4 iLO4 with firmware before 1.32 allows remote authenticated users to obtain sensitive information via unknown vectors...

CVE-2013-4842

HP Integrated Lights-Out (iLO4) firmware prior to 1.32 is affected by CVE-2013-4842, a cross-site scripting (XSS) vulnerability that can allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. The issue affects HP iLO4 web interface and is identified in multiple vul...

CVE-2013-4843: Undefined Security Weakness

Unspecified vulnerability in HP Integrated Lights-Out 4 iLO4 with firmware before 1.32 allows remote authenticated users to obtain sensitive information via unknown vectors...

CVE-2013-4842: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HP Integrated Lights-Out 4 iLO4 with firmware before 1.32 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2013-5238 · Hewlett Packard · Hp Integrated Lights-Out 3 +2

Name of the Vulnerable Software and Affected Versions: HP Integrated Lights-Out 4 iLO4 versions prior to 1.32 HP Integrated Lights-Out 3 and 4 iLO3, iLO4 affected versions not specified Description: A Cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. T...

PT-2013-5239 · Hewlett Packard · Hpe Integrated Lights-Out 4 +2

Name of the Vulnerable Software and Affected Versions: HP Integrated Lights-Out 4 iLO4 versions prior to 1.32 HP Integrated Lights-Out 3 iLO3 affected versions not specified Description: The issue allows remote authenticated users to obtain sensitive information via unknown vectors. It could also...

CVE-2013-5781

CVE-2013-5781 affects Oracle PARC Enterprise T4 Servers running Sun System Firmware prior to 8.3.0.b. Local users can impact confidentiality, integrity, and availability via vectors related to Sun System Firmware/Integrated Lights Out Manager (ILOM). The description and related sources consistent...

CVE-2013-5781

Unspecified vulnerability in Oracle PARC Enterprise T4 Servers running Sun System Firmware before 8.3.0.b allows local users to affect confidentiality, integrity, and availability via vectors related to Sun System Firmware/Integrated Lights Out Manager ILOM...

CVE-2013-5781: Undefined Security Weakness

Unspecified vulnerability in Oracle PARC Enterprise T4 Servers running Sun System Firmware before 8.3.0.b allows local users to affect confidentiality, integrity, and availability via vectors related to Sun System Firmware/Integrated Lights Out Manager ILOM...