CVE-2015-8148: Exposure of Sensitive Information to an Unauthorized Actor

The LDAP service in Symantec Encryption Management Server SEMS 3.3.2 before MP12 allows remote attackers to obtain sensitive information about administrator accounts via a modified request...

CVE-2015-8151: Improper Neutralization of Special Elements used in an OS Command

Symantec Encryption Management Server SEMS 3.3.2 before MP12 allows remote authenticated users to execute arbitrary OS commands by leveraging console administrator access...

PT-2016-3859

Name of the Vulnerable Software and Affected Versions Symantec Encryption Management Server SEMS version 3.3.2 before MP12 Description The issue concerns the LDAP service, which can be exploited by remote attackers to cause a denial of service. This is achieved through crafted requests that lead ...

CVE-2015-8149: Improper Restriction of Operations within the Bounds of a Memory Buffer

The LDAP service in Symantec Encryption Management Server SEMS 3.3.2 before MP12 allows remote attackers to cause a denial of service heap memory corruption and service outage via crafted requests...

PT-2016-3860

Name of the Vulnerable Software and Affected Versions Symantec Encryption Management Server SEMS version 3.3.2 before MP12 Description The issue allows local users to obtain root access by modifying a batch file. Recommendations For Symantec Encryption Management Server SEMS version 3.3.2, apply...

CVE-2015-8150: Undefined Security Weakness

Symantec Encryption Management Server SEMS 3.3.2 before MP12 allows local users to obtain root access by modifying a batch file...

PT-2016-3861

Name of the Vulnerable Software and Affected Versions Symantec Encryption Management Server SEMS version 3.3.2 before MP12 Description The issue allows remote authenticated users to execute arbitrary OS commands by leveraging console administrator access. Recommendations For Symantec Encryption...

PT-2016-3858

Name of the Vulnerable Software and Affected Versions Symantec Encryption Management Server SEMS version 3.3.2 before MP12 Description The issue allows remote attackers to obtain sensitive information about administrator accounts via a modified request to the LDAP service. Recommendations For...

IBM WebSphere Management Server Apache Commons

Added: 02/03/2016 CVE: CVE-2015-7450 Background IBM WebSphere Management console 7.x and 8.5.0 - 8.5.5.7 are packaged with a vulnerable version of the Apache Commons package. Problem Apache Commons Collections could allow a remote attacker to execute arbitrary code on the system, caused by the...

IBM WebSphere Management Server Apache Commons

Added: 02/03/2016 CVE: CVE-2015-7450 Background IBM WebSphere Management console 7.x and 8.5.0 - 8.5.5.7 are packaged with a vulnerable version of the Apache Commons package. Problem Apache Commons Collections could allow a remote attacker to execute arbitrary code on the system, caused by the...

Symantec Endpoint Protection 12.1.4013 Service Disabling Vulnerability

Exploit for windows platform in category dos / poc Exploit Title: Antivirus Google Dork: intitle: Antivirus Date: 2015-07-07 Exploit Author: John Page hyp3rlinx Website: hyp3rlinx.altervista.org Vendor Homepage: www.symantec.com Software Link: www.symantec.com/endpoint-protection Version:12.1.401...

Symantec Encryption Management Server Local Command Injection Vulnerability

Symantec Encryption Management Server is prone to a local command-injection vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE ...

Cisco TelePresence Server Detection

The remote host is running Cisco TelePresence Server, which is a management engine for other Cisco TelePresence equipment. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid83772; scriptversion"1.6"; scriptsetattributeattribute:"pluginmodificationdate",...

The vulnerability of the Red Hat Enterprise Linux operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ipa-server-2.2.0 package for the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploitation of this vulnerability can be carried out...

Symantec Encryption Management Server < 3.3.2 MP7 Multiple Vulnerabilities

The version of Symantec Encryption Management Server listening on the remote host is prior to version 3.3.2 MP7. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in the handling of specially formatted PGP keys to the integrated key management server. This allows a remote...

CVE-2014-7288

Symantec Encryption Management Server (and PGP Universal Server) prior to 3.3.2 MP7 is affected by CVE-2014-7288. The issue allows an authenticated administrator to execute arbitrary shell commands via a crafted database-backup restore command. OpenVAS identifies it as a local command-injection v...

CVE-2014-7288

Symantec PGP Universal Server and Encryption Management Server before 3.3.2 MP7 allow remote authenticated administrators to execute arbitrary shell commands via a crafted command line in a database-backup restore action...

Symantec Encryption Management Server < 3.2.0 MP6 - Remote Command Injection Exploit

Symantec Encryption Management Server versions prior to 3.2.0 MP6 suffers from a remote command injection vulnerability. Title: Symantec Encryption Management Server - Remote Command Injection Vendor: Symantec Affected Product: Symantec Encryption Gateway Affected Versions: 3.2.0 MP6 Product...

CVE-2014-7288: Undefined Security Weakness

Symantec PGP Universal Server and Encryption Management Server before 3.3.2 MP7 allow remote authenticated administrators to execute arbitrary shell commands via a crafted command line in a database-backup restore action...

PT-2015-3922

Name of the Vulnerable Software and Affected Versions Symantec PGP Universal Server and Encryption Management Server versions prior to 3.3.2 MP7 Description The issue allows remote attackers to trigger unintended content in outbound e-mail messages via a crafted key UID value in an inbound e-mail...