CVE-2016-8980

IBM BigFix Inventory v9.x and IBM License Metric Tool v9.x are affected by CVE-2016-8980 due to an XML External Entity (XXE) processing flaw in XML handling, enabling denial of service and potential information disclosure. The remediation is to upgrade to IBM BigFix Inventory/License Metric Tool ...

MC Inventory Manager SQL Injection

Vulnerability: Admin Login Bypass & SQLi Date: 15.01.2017 Vendor Homepage: http://microcode.ws/ Script Name: MC Inventory Manager Script Buy Now: http://microcode.ws/product/mc-inventory-manager-php-script/3885 Author: Adeghsan Aencan Author Web: http://ihsan.net Mail : ihsanbeygirihsannoktanet...

MC Inventory Manager Script - Multiple Vulnerabilities

MC Inventory Manager Script - Multiple Vulnerabilities Vulnerability: Admin Login Bypass & SQLi Date: 15.01.2017 Vendor Homepage: http://microcode.ws/ Script Name: MC Inventory Manager Script Buy Now: http://microcode.ws/product/mc-inventory-manager-php-script/3885 Author: İhsan Şencan Author Web...

MC Inventory Manager Script - Multiple Vulnerabilities

Vulnerability: Admin Login Bypass & SQLi Date: 15.01.2017 Vendor Homepage: http://microcode.ws/ Script Name: MC Inventory Manager Script Buy Now: http://microcode.ws/product/mc-inventory-manager-php-script/3885 Author: İhsan Şencan Author Web: http://ihsan.net Mail : ihsanbeygirihsannoktanet Admi...

corvettecapital.com XSS vulnerability

Vulnerable URL: http://www.corvettecapital.com/inventory?bodytype=SUV=Passenger' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Che...

IBM License Metric Tool and BigFix Inventory Information Disclosure Vulnerability (CNVD-2017-00327)

The IBM License Metric Tool and BigFix Inventory are both products of IBM Corporation of America. The former is a set of free tools that help IBM Passport Advantage Software Upgrade and Support Services customers determine their Processor Value Unit PVU licensing needs, and the latter is a soluti...

IBM BigFix Inventory Local Information Disclosure Vulnerability

IBM BigFix formerly known as IBM Endpoint Manager, Tivoli Endpoint Manager is a set of system management software from the American company IBM. The software provides remote control, patch management, software distribution, operating system deployment, network access protection and other function...

IBM License Metric Tool and BigFix Inventory XML External Entity Injection Vulnerability

The IBM License Metric Tool and BigFix Inventory are both products of IBM Corporation of America. The former is a set of free tools that help IBM Passport Advantage Software Upgrade and Support Services customers determine their Processor Value Unit PVU licensing needs, and the latter is a soluti...

IBM License Metric Tool and BigFix Inventory Information Disclosure Vulnerability (CNVD-2017-00066)

The IBM License Metric Tool and BigFix Inventory are both products of IBM Corporation of America. The former is a set of free tools that help IBM Passport Advantage Software Upgrade and Support Services customers determine their Processor Value Unit PVU licensing needs, and the latter is a soluti...

IBM License Metric Tool and BigFix Inventory Open Redirect Vulnerability

The IBM License Metric Tool and BigFix Inventory are both products of IBM Corporation of America. The former is a set of free tools that help IBM Passport Advantage Software Upgrade and Support Services customers determine their Processor Value Unit PVU licensing needs, and the latter is a soluti...

IBM License Metric Tool and BigFix Inventory Information Disclosure Vulnerability

The IBM License Metric Tool and BigFix Inventory are both products of IBM Corporation of America. The former is a set of free tools that help IBM Passport Advantage Software Upgrade and Support Services customers determine their Processor Value Unit PVU licensing needs, and the latter is a soluti...

boardmanmotors.com XSS vulnerability

Vulnerable URL: http://www.boardmanmotors.com/inventory?vehicletype=RV...

Sivann ITDB 'examples_support/editable_ajax.php' cross-site scripting vulnerability

Sivann ITDB is a web-based asset inventory management tool for storing information about assets in an office environment. A cross-site scripting vulnerability exists in Sivann ITDB 'examplessupport/editableajax.php'. Because user input is not validated, an attacker could exploit the vulnerability...

Revive Adserver: Reflected XSS on Zones > Invocation Code

"Cricetinae" : This report is similar to my earlier report: 170156. Short Description The Close text parameter in Inventory Zone Invocation Code is vulnerable to Cross-Site Scripting vulnerability. Steps to Reproduce 1. Logon or Work as an agent. 2. Navigate to Inventory Zones Invocation Code...

How to Change Credentials for a Shared Folder in a File to Tape Job

Purpose This article documents how to change credentials used to connect to a UNC path added to a File Backup to Tape job. Solution To add an SMB share to a File Backup to Tape job, the SMB share must be added in the Inventory view under File Shares SMB Shares section. To change which credentials...

HPE Discovery and Dependency Mapping Inventory Arbitrary Command Execution Vulnerability

HPE Discovery and Dependency Mapping Inventory DDMi is a Hewlett Packard Enterprise HPE solution for automating the discovery and logging of client device information to help IT departments manage and control costs and risks. Apache Commons Collections ACC is a U.S. Apache Apache Software...

CVE-2016-4369

HPE Discovery and Dependency Mapping Inventory DDMi 9.30, 9.31, 9.32, 9.32 update 1, 9.32 update 2, and 9.32 update 3 allows remote authenticated users to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library...

[SECURITY] Fedora 22 Update: glpi-0.90.3-1.fc22

GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...

CVE-2016-2202

The Inventory Solution component in the Management Agent in the client in Symantec Altiris IT Management Suite ITMS through 7.6 HF7 allows local users to bypass intended application-blacklist restrictions via unspecified vectors...

CVE-2016-2202

The Inventory Solution component in the Management Agent in the client in Symantec Altiris IT Management Suite ITMS through 7.6 HF7 allows local users to bypass intended application-blacklist restrictions via unspecified vectors...