PT-2014-4582

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC S7-1500 CPU PLC devices versions prior to 1.5.0 Description A cross-site scripting XSS issue exists in the integrated web server, allowing remote attackers to inject arbitrary web script or HTML. This could potentially lead to...

PT-2014-4584

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC S7-1500 CPU PLC devices versions prior to 1.5.0 Description The issue concerns an open redirect vulnerability in the integrated web server. This vulnerability allows remote attackers to redirect users to arbitrary web sites,...

JP1/Integrated Management - Service Support vulnerable to cross-site scripting

Overview JP1/Integrated Management - Service Support has a cross-site scripting vulnerability, which occurs when receiving a request that contains malicious scripts when being used with JP1/Integrated Management - View. Impact An attacker can exploit this vulnerability to execute malicious script...

Hitachi JP1/Integrated Management跨站脚本漏洞

Hitachi JP1/Integrated Management是实时监控服务器管理系统并且提交故障解决方案的综合管理系统。 由于某些关于查看的未明输入在返回用户钱未能正确过滤，攻击者可以利用漏洞在受影响站点上下文的用户浏览器中执行任意HTML 和脚本代码。 0 Hitachi JP1/Integrated Management IM 厂商补丁： Hitachi ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

HP Integrated Lights-Out (iLO) Default Credentials

The remote HP Integrated Lights-Out iLO install uses a default set of credentials 'Admin' / 'Admin' or 'Oper' / 'Oper' to control access to its management interface. With this information, an attacker can gain access to the application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Nortel Meridian Integrated RAN Default Admin Credentials

The remote device is a Nortel Meridian Integrated RAN MIRAN that uses a set of known, default credentials 'admin' / 'admin000'. Knowing these, an attacker able to connect to the service can gain complete control of the device. Nortel MIRAN is a system card that provides multi-tasking voice...

PT-2014-1218

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC WinCC OA versions prior to 3.12 P002 January Description The issue is related to the integrated web server in Siemens SIMATIC WinCC OA, which allows remote attackers to execute arbitrary code via crafted packets sent to TCP por...

MuPDF xps_parse_color()栈缓冲区溢出漏洞

No description provided by source. ============================================================= 0day - MuPDF Stack-based Buffer Overflow in xpsparsecolor ============================================================= Date of discovery: 2013-01-26 Software Links: http://www.mupdf.com/ ;...

PT-2014-2732

Name of the Vulnerable Software and Affected Versions Integrated Management Module IMM 2 versions 1.00 through 2.00 Description The issue allows remote attackers to defeat cryptographic protection mechanisms via a brute-force attack against SSL or TLS traffic, due to the support of SSL cipher...

CVE-2013-4030: Undefined Security Weakness

Integrated Management Module IMM 2 1.00 through 2.00 on IBM System X and Flex System servers supports SSL cipher suites with short keys, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack against 1 SSL or 2 TLS traffic...

[Websecurify] Web Security Testing Runtime

A Complete Suite Of Web Security Tools The Suite provides a complete and functional marketplace of highly integrated web application security tools. You will find that different areas are covered by various domain-specific solutions. The Suite consists of automated scanners, fuzzers, utilities an...

CVE-2013-6925

The integrated HTTPS server in Siemens RuggedCom ROS before 3.12.2 allows remote attackers to hijack web sessions by predicting a session id value...

iLO 3 < 1.65 / iLO 4 < 1.32 Multiple Vulnerabilities

Description not available %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid71494; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate", value:"2021/01/19"; scriptcveid"CVE-2013-4842",...

IPMI Cipher Suite 0 (Cipher Zero) Authentication Bypass Vulnerability (IPMI Protocol)

Intelligent Platform Management Interface IPMI services are prone to an authentication bypass vulnerability through the use of cipher suite 0 aka cipher zero. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

HP Integrated Lights-Out security vulnerabilities

Crossite scripting, information leakage...

CVE-2013-4842

Cross-site scripting XSS vulnerability in HP Integrated Lights-Out 4 iLO4 with firmware before 1.32 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-4843

Unspecified vulnerability in HP Integrated Lights-Out 4 iLO4 with firmware before 1.32 allows remote authenticated users to obtain sensitive information via unknown vectors...

CVE-2013-4842

HP Integrated Lights-Out (iLO4) firmware prior to 1.32 is affected by CVE-2013-4842, a cross-site scripting (XSS) vulnerability that can allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. The issue affects HP iLO4 web interface and is identified in multiple vul...

CVE-2013-4843

HP Integrated Lights-Out 4 (iLO4) vulnerability CVE-2013-4843 affects firmware before 1.32. Remote authenticated users may disclose sensitive information via unknown vectors over the network; impact is information disclosure with no confidentiality/integrity changes stated. HP's security bulletin...

CVE-2013-4842: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HP Integrated Lights-Out 4 iLO4 with firmware before 1.32 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...