Lucene search
+L

2328 matches found

CNVD
CNVD
added 2015/08/04 12:0 a.m.6 views

Symantec Endpoint Protection Manager SQL Injection Vulnerability

Symantec Endpoint Protection Manager SEPM is a suite of enterprise-grade virus protection software from Symantec USA. The software protects against malicious attacks such as viruses, worms, and Trojan horses. SEPM 12.1-RU6-MP1 A SQL injection vulnerability exists in the management console of...

6CVSS8.4AI score0.0162EPSS
SaveExploits1References1
CNVD
CNVD
added 2015/08/04 12:0 a.m.76 views

Symantec Endpoint Protection Manager Arbitrary File Write Vulnerability

Symantec Endpoint Protection Manager SEPM is a suite of enterprise-grade virus protection software from Symantec USA. The software protects against malicious attacks such as viruses, worms, and Trojan horses. SEPM 12.1-RU6-MP1 A security vulnerability exists in the management console of previous...

5.5CVSS7.2AI score0.47331EPSS
SaveExploits5References1
CNVD
CNVD
added 2015/08/04 12:0 a.m.7 views

Symantec Endpoint Protection Manager Privilege Gain Vulnerability

Symantec Endpoint Protection Manager SEPM is a suite of enterprise-grade virus protection software from Symantec USA. The software protects against malicious attacks such as viruses, worms, and Trojan horses. SEPM 12.1-RU6-MP1 A security vulnerability exists in the management console of previous...

8.5CVSS7.2AI score0.24638EPSS
SaveExploits5References1
NVD
NVD
added 2015/08/01 1:59 a.m.38 views

CVE-2015-1488

An unspecified action handler in the management console in Symantec Endpoint Protection Manager SEPM 12.1 before 12.1-RU6-MP1 allows remote authenticated users to read arbitrary files via unknown vectors...

4CVSS5.9AI score0.01813EPSS
SaveExploits1References3
Prion
Prion
added 2015/08/01 1:59 a.m.14 views

Design/Logic Flaw

The management console in Symantec Endpoint Protection Manager SEPM 12.1 before 12.1-RU6-MP1 allows remote authenticated users to gain privileges via unspecified vectors...

8.5CVSS6.8AI score0.24638EPSS
SaveExploits5References4Affected Software1
Cvelist
Cvelist
added 2015/08/01 1:0 a.m.21 views

CVE-2015-1491

SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager SEPM 12.1 before 12.1-RU6-MP1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

7.7AI score0.0162EPSS
SaveExploits1References3
CVE
CVE
added 2015/08/01 1:0 a.m.67 views

CVE-2015-1490

Symantec Endpoint Protection Manager (SEPM) 12.1 prior to 12.1-RU6-MP1 is affected by CVE-2015-1490, a directory traversal vulnerability in the SEPM management console. An authenticated remote attacker can read arbitrary files via a relative pathname in a client installation package due to improp...

5.5CVSS6.2AI score0.02375EPSS
SaveExploits1References3Affected Software1
OpenVAS
OpenVAS
added 2015/07/02 12:0 a.m.18 views

Wedge Networks wedgeOS Management Console Detection (HTTP)

HTTP based detection of the Wedge Networks wedgeOS Management Console. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

7.3AI score
SaveExploits0
CNVD
CNVD
added 2015/06/30 12:0 a.m.8 views

Symantec Data Loss Prevention Enforce Server Cross-Site Scripting Vulnerability

Symantec Data Loss Prevention DLP is a data leakage protection solution from Symantec Symantec. The program provides data leakage protection management and reporting and other functions. A cross-site scripting vulnerability exists in the management console in Enforce Server in Symantec DLP versio...

4.3CVSS6.2AI score0.01984EPSS
SaveExploits0References1
CNVD
CNVD
added 2015/06/23 12:0 a.m.4 views

Symantec Endpoint Protection Management Console SQL Injection Vulnerability

Symantec Endpoint Protection is a protection software developed to enhance enterprise virus protection and advanced threat defense. Symantec Endpoint Protection management console fails to properly validate user input and administrators with low privileges can perform SQL injection attacks with...

6.5CVSS7.9AI score0.01724EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2015/05/20 12:0 a.m.19 views

BullGuard Antivirus Authentication Bypass Vulnerability

BullGuard Antivirus is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.6AI score
SaveExploits0References1
CNVD
CNVD
added 2015/05/14 12:0 a.m.4 views

Microsoft Management Console Denial of Service Vulnerability

Microsoft Windows is a popular operating system. A security vulnerability in the Microsoft Windows Management Console's handling of the special '.msc' file allows an attacker to exploit the vulnerability to trick users into loading the file for a denial-of-service attack...

1.9CVSS6.7AI score0.01685EPSS
SaveExploits0References1
Check Point Advisories
Check Point Advisories
added 2015/05/12 12:0 a.m.14 views

Microsoft Management Console File Format Denial of Service (MS15-054; CVE-2015-1681)

A denial of service vulnerability has been reported in Microsoft Management Console. The vulnerability exists when Windows attempts to access a specially crafted .msc file to retrieve the icon information, and then fails to properly validate a destination buffer. A remote attacker can exploit thi...

1.9CVSS6AI score0.01685EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2015/05/12 12:0 a.m.48 views

MS15-054: Vulnerability in Microsoft Management Console File Format Could Allow Denial of Service (3051768)

The remote Windows host is affected by a flaw due to a failure to properly validate a destination buffer when retrieving icon information from a specially crafted Microsoft Management Console .msc file. An unauthenticated, remote attacker, by tricking a victim into opening a malicious .msc file,...

1.9CVSS5.8AI score0.01685EPSS
SaveExploits0References3
Microsoft KB
Microsoft KB
added 2015/05/12 12:0 a.m.41 views

MS15-054: Vulnerability in Microsoft Management Console file format could allow denial of service: May 12, 2015

None None...

6.1AI score
SaveExploits0
CNVD
CNVD
added 2015/05/11 12:0 a.m.3 views

BullGuard Multiple Product Management Console Password Restriction Local Bypass Vulnerability

BullGuard is a cybersecurity company with several products. A security vulnerability in the management console of multiple BullGuard products allows a local attacker to exploit the vulnerability to bypass password protection, and change settings or obtain configuration passwords...

6.7AI score
SaveExploits0References1
securityvulns
securityvulns
added 2015/04/16 12:0 a.m.139 views

[SYSS-2015-014] Panda Global Protection 2015 - Authentication Bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-014 Product: Panda Global Protection 2015 Vendor: Panda Security Affected Versions: 15.1.0 Tested Versions: 15.1.0 Vulnerability Type: Authentication Bypass Using an Alternate Path or Channel CWE-288 Risk Level: Medium Solutio...

0.2AI score
SaveExploits0
CNVD
CNVD
added 2015/04/02 12:0 a.m.22 views

SAP NetWeaver SAP Management Console Sensitive Information Access Vulnerability

SAP NetWeaver is the technology foundation for SAP Business Suite solutions, SAP xApps portfolio applications, partner solutions, and customized applications. A security vulnerability in the administration console in SAP NetWeaver allows remote attackers to exploit the vulnerability to obtain...

5CVSS6.6AI score0.02378EPSS
SaveExploits0References1
NVD
NVD
added 2015/04/01 2:59 p.m.32 views

CVE-2015-2817

The SAP Management Console in SAP NetWeaver 7.40 allows remote attackers to obtain sensitive information via the ReadProfile parameters, aka SAP Security Note 2091768...

5CVSS6.1AI score0.02378EPSS
SaveExploits0References5
Prion
Prion
added 2015/04/01 2:59 p.m.24 views

Design/Logic Flaw

The SAP Management Console in SAP NetWeaver 7.40 allows remote attackers to obtain sensitive information via the ReadProfile parameters, aka SAP Security Note 2091768...

5CVSS6.6AI score0.02378EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder