4717 matches found
CVE-2019-0241
SAP Work and Inventory Manager AgentrySDK , before 7.0, 7.1 allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service...
CVE-2019-0241
SAP Work and Inventory Manager AgentrySDK , before 7.0, 7.1 allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service...
Code injection
SAP Work and Inventory Manager AgentrySDK , before 7.0, 7.1 allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service...
CVE-2019-0241
The CVE concerns SAP Work and Inventory Manager (Agentry_SDK, before 7.0 and 7.1). The issue is a denial of service: an attacker can cause legitimate users to be unable to access a service by crashing or flooding it. The description does not specify the exact root cause or vulnerable component be...
CVE-2019-0241
SAP Work and Inventory Manager AgentrySDK , before 7.0, 7.1 allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service...
CVE-2018-16879
Ansible Tower before version 3.3.3 does not set a secure channel as it is using the default insecure configuration channel settings for messaging celery workers from RabbitMQ. This could lead in data leak of sensitive information such as passwords as well as denial of service attacks by deleting...
CVE-2018-16879
Ansible Tower before version 3.3.3 does not set a secure channel as it is using the default insecure configuration channel settings for messaging celery workers from RabbitMQ. This could lead in data leak of sensitive information such as passwords as well as denial of service attacks by deleting...
CVE-2018-19233
COMPAREX Miss Marple Enterprise Edition before 2.0 allows local users to execute arbitrary code by reading the user name and encrypted password hard-coded in an Inventory Agent configuration file...
CVE-2018-19233
COMPAREX Miss Marple Enterprise Edition before 2.0 allows local users to execute arbitrary code by reading the user name and encrypted password hard-coded in an Inventory Agent configuration file...
Hardcoded credentials
COMPAREX Miss Marple Enterprise Edition before 2.0 allows local users to execute arbitrary code by reading the user name and encrypted password hard-coded in an Inventory Agent configuration file...
CVE-2018-19233
COMPAREX Miss Marple Enterprise Edition before 2.0 allows local users to execute arbitrary code by reading the user name and encrypted password hard-coded in an Inventory Agent configuration file...
SUSE-SU-2018:4130-1 Security update for ansible
This update for ansible fixes the following issues: Ansible was updated to ansible 2.4.6.0. The full release notes can be found on: https://github.com/ansible/ansible/blob/stable-2.4/CHANGELOG.md Security issues fixed: - CVE-2018-10875: ansible.cfg is read from the current working directory which...
Global IT Asset Inventory: The Foundation for Security and Compliance
Pablo Quiroga, Qualys’ Director of Product Management for IT Asset Management, talks about the new Asset Inventory solution When IT directors and CISOs look at their digitally transformed networks, they encounter many shadows that their legacy enterprise software tools can’t illuminate. These bli...
Intel Integrated Performance Primitives Data Disclosure Vulnerability
Intel Integrated Performance Primitives IPP is a suite of programming tools for working with images, signal processing, and data from Intel Corporation USA. A security vulnerability exists in the password inventory in versions prior to Intel IPP 2019 update1. A local attacker can exploit the...
ansible: Inventory variables are loaded from current working directory when running ad-hoc command that can lead to code execution
In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attacker's control, allowing to run arbitrary code as a result...
Unrestricted file upload
Unrestricted file upload with remote code execution in OCS Inventory NG ocsreports allows a privileged user to gain access to the server via crafted HTTP requests...
CVE-2018-15537
Unrestricted file upload with remote code execution in OCS Inventory NG ocsreports allows a privileged user to gain access to the server via crafted HTTP requests...
CVE-2018-15537
Unrestricted file upload with remote code execution in OCS Inventory NG ocsreports allows a privileged user to gain access to the server via crafted HTTP requests...