2778 matches found
CVE-2011-0364
The Management Console webagent.exe in Cisco Security Agent 5.1, 5.2, and 6.0 before 6.0.2.145 allows remote attackers to create arbitrary files and execute arbitrary code via unspecified parameters in a crafted stupload request...
SAP Management Console security vulnerabilities
Information leakage, DoS...
CVE-2010-0115
Symantec Web Gateway 4.5 (before 4.5.0.376) contains a SQL injection in login.php’s USERNAME parameter in the GUI management console. The vulnerability allows remote attackers to inject arbitrary SQL into backend queries, potentially affecting data confidentiality, integrity, and availability. So...
CVE-2010-0115: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in login.php in the GUI management console in Symantec Web Gateway 4.5 before 4.5.0.376 allows remote attackers to execute arbitrary SQL commands via the USERNAME parameter...
HP Power Manager formLogin buffer overflow
Added: 12/28/2010 CVE: CVE-2010-4113 OSVDB: 69969 Background HP Power Manager is a web-based application that enables administrators to manage an HP UPS from a browser-based management console. Problem A buffer overflow vulnerability in the Administration interface allows remote attackers to...
HP Systems Insight Control Detection
HP Systems Insight Control implements infrastructure management and has the ability to deploy, migrate, monitor, control, and optimize IT infrastructure through a management console. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid50539; scriptversion"1.7";...
Artica Detection
Artica, a web-based management console for Postfix, is installed on the remote system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid50323; scriptversion"1.7"; scriptcvsdate"Date: 2019/11/25"; scriptnameenglish:"Artica Detection"; scriptsummaryenglish:"Looks for...
Cross-site Request Forgery Vulnerability in Oracle iPlanet Web Server
Overview Oracle iPlanet Web Server formerly Sun Java System Web Server contains a cross-site request forgery vulnerability. Oracle iPlanet Web Server formerly Sun Java System Web Server is a web server. Oracle iPlanet Web Server contains a cross-site request forgery vulnerability. Yoshihiro...
JVN#50133036: Cross-site Request Forgery Vulnerability in Oracle iPlanet Web Server
Oracle iPlanet Web Server formerly Sun Java System Web Server is a web server. Oracle iPlanet Web Server contains a cross-site request forgery vulnerability. Impact If a user views a malicious page while logged into the Oracle iPlanet Web Server management console, an arbitrary instance may be...
CVE-2010-3544
Unspecified vulnerability in the Oracle iPlanet Web Server Sun Java System Web Server component in Oracle Sun Products Suite 7.0 allows remote attackers to affect integrity and availability via unknown vectors related to Administration. NOTE: the previous information was obtained from the October...
CVE-2010-3544
CVE-2010-3544 is a CSRF vulnerability in Oracle iPlanet Web Server (Sun Java System Web Server) prior to 7.0U9 that allows an attacker to stop a server instance via the management console when a user views a malicious page while authenticated. The issue is documented across multiple sources (JVN/...
HP Data Protector Express DtbClsLogin Stack Buffer Overflow (CVE-2010-3007)
HP OpenView Storage Data Protector is a cross-platform backup solution for Windows, Unix and Linux operating systems. The management console of the Data Protector environment provides quick access to track all Data Protector Express objects, including jobs, media, and scheduling rotation schemes....
SAP Management Console DoS
Multiple DoS conditions...
CVE-2010-2384
Unspecified vulnerability in Oracle Solaris 9 and 10 allows local users to affect confidentiality and integrity via unknown vectors related to Solaris Management Console...
CVE-2010-2376
Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows local users to affect confidentiality and integrity via unknown vectors related to Solaris Management Console...
Design/Logic Flaw
Unspecified vulnerability in Oracle Solaris 9 and 10 allows local users to affect confidentiality and integrity via unknown vectors related to Solaris Management Console...
Design/Logic Flaw
Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows local users to affect confidentiality and integrity via unknown vectors related to Solaris Management Console...
CVE-2010-2376
CVE-2010-2376 affects Oracle Solaris 8, 9, and 10 via the Solaris Management Console. The vulnerability is local and impacts confidentiality and integrity, with details indicating an unspecified vector. Oracle’s July 2010 CPU advisory includes a patch for Solaris/Management Console in the Solaris...
CVE-2010-2376
Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows local users to affect confidentiality and integrity via unknown vectors related to Solaris Management Console...
CVE-2010-2384
CVE-2010-2384 affects Oracle Solaris 9/10. The Solaris wbem service, when enabled, runs SUNWrmui_reg.sh and can be abused by an unprivileged local user via unsafe handling of temporary files in /tmp, potentially impacting confidentiality and integrity. A full disclosure and patching guidance desc...