CVE-2017-15548

An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition NVE 9.0.x, 9.1.x, 9.2.x; and EMC Integrated Data Protection Appliance 2.0. A remote unauthenticated malicious user can potentially bypass application authentication and gain unauthorized...

CVE-2017-15549

An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition NVE 9.0.x, 9.1.x, 9.2.x; and EMC Integrated Data Protection Appliance 2.0. A remote authenticated malicious user with low privileges could potentially upload arbitrary maliciously crafted...

CVE-2017-15548

CVE-2017-15548 affects EMC/VDP solutions: vSphere Data Protection (VDP) on VMware appliances 5.x, 6.0.x, 6.1.x with an authentication bypass vulnerability that could allow a remote unauthenticated attacker to gain unauthorized root access. Related issues CVE-2017-15549 (arbitrary file upload) and...

PT-2018-5915

Name of the Vulnerable Software and Affected Versions: EMC Avamar Server versions 7.1.x through 7.5.0 EMC NetWorker Virtual Edition NVE versions 9.0.x through 9.2.x EMC Integrated Data Protection Appliance version 2.0 Description: A remote authenticated malicious user with low privileges could...

CVE-2017-15549: Unrestricted Upload of File with Dangerous Type

An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition NVE 9.0.x, 9.1.x, 9.2.x; and EMC Integrated Data Protection Appliance 2.0. A remote authenticated malicious user with low privileges could potentially upload arbitrary maliciously crafted...

CVE-2017-15548: Improper Authentication

An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition NVE 9.0.x, 9.1.x, 9.2.x; and EMC Integrated Data Protection Appliance 2.0. A remote unauthenticated malicious user can potentially bypass application authentication and gain unauthorized...

CVE-2017-15550: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition NVE 9.0.x, 9.1.x, 9.2.x; and EMC Integrated Data Protection Appliance 2.0. A remote authenticated malicious user with low privileges could access arbitrary files on the server file system...

PT-2018-5916

Name of the Vulnerable Software and Affected Versions: EMC Avamar Server versions 7.1.x through 7.5.0 EMC NetWorker Virtual Edition NVE versions 9.0.x through 9.2.x EMC Integrated Data Protection Appliance version 2.0 Description: A remote authenticated malicious user with low privileges could...

Security Bulletin: NVIDIA SHIELD TV Security Updates for CPU Speculative Side Channel Vulnerabilities

NVIDIA SHIELD TV Response to CPU Speculative Side Channel Vulnerabilities - CVE-2017-5753, CVE-2017-5715, CVE-2017-5754 Bulletin Summary NVIDIA is providing an initial security update to mitigate aspects of Google Project Zero's January 3, 2018, publication of novel information disclosure attacks...

PT-2018-1031

Name of the Vulnerable Software and Affected Versions EMC Avamar Server versions 7.1.x through 7.5.0 EMC NetWorker Virtual Edition NVE versions 9.0.x through 9.2.x EMC Integrated Data Protection Appliance version 2.0 Description The issue is related to weaknesses in the authentication procedure o...

PT-2017-19305

Name of the Vulnerable Software and Affected Versions Siemens 7KT PAC1200 data manager versions prior to V2.03 Description A vulnerability has been identified in the integrated web server of the affected devices, which could allow an unauthenticated remote attacker to perform administrative...

Cross-site Scripting Vulnerability in JP1/Service Support and JP1/Integrated Management - Service Support

Overview A cross-site scripting vulnerability was found in JP1/Service Support and JP1/Integrated Management - Service Support. Impact Remote users can exploit this vulnerability to execute malicious scripts. Solution Please refer to the 'Vendor Information' section for the official countermeasur...

Developers Targeted in ‘ParseDroid’ PoC Attack

Researchers have developed a proof of concept attack that could impact the millions of users of integrated development environments such as Intellij, Eclipse and Android Studio. Attacks can also be carried out against servers hosting development environments in the cloud. The attack vector was...

IP-Biter - The Hacker-friendly E-Mail Tracking Framework

IP-Biter is an open source, easy to deploy, tracking framework that generate high configurables and uniques tracking images and links to embed in e-mails, sites or chat systems and visualize, in an hacker-friendly dashboard, high detailed reports of the tracked users who visualize the image or op...

PT-2017-12676

Name of the Vulnerable Software and Affected Versions Siemens SICAM RTUs SM-2556 COM Modules with the firmware variants ENOS00, ERAC00, ETA2, ETLS00, MODi00, and DNPi00 Description The issue concerns the integrated web server of the affected devices, which could allow Cross-Site Scripting XSS...

integrated.com XSS vulnerability

Open Bug Bounty ID: OBB-369466 Description| Value ---|--- Affected Website:| integrated.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Unspecified Vulnerability in Oracle Sun Systems Products Suite Oracle Integrated Lights Out Manager Component (CNVD-2017-31865)

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation.Oracle Integrated Lights Out Manager ILOM is one of the server management tools. An unspecified vulnerability exists in the Folios subcomponent of the Oracle ILOM component in Oracle Sun Systems Products...

Unspecified Vulnerability in Oracle Sun Systems Products Suite Oracle Integrated Lights Out Manager (CNVD-2017-31862)

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation.Oracle Integrated Lights Out Manager ILOM is one of the server management tools. An unspecified vulnerability exists in the System Management subcomponent of the Oracle ILOM component of the Oracle Sun...

CVE-2017-9947

A vulnerability has been identified in Siemens APOGEE PXC and TALON TC BACnet Automation Controllers in all versions V3.5. A directory traversal vulnerability could allow a remote attacker with network access to the integrated web server 80/tcp and 443/tcp to obtain information on the structure o...

CVE-2017-10265

Vulnerability in the Oracle Integrated Lights Out Manager ILOM component of Oracle Sun Systems Products Suite subcomponent: System Management. The supported version that is affected is Prior to 3.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...