Huawei SEQ Analyst XXE Injection

Document Title: ============ Huawei SEQ Analyst - XML External Entity Injection XXE Release Date: =========== 15 Apr 2015 CVE-ID: ======= CVE-2015-2346 Product & Service Introduction: ======================= SEQ Analyst is a platform for business quality monitoring and management by individual us...

das_watchdog 'XAUTHORITY' environment variable handles buffer overflow vulnerabilities

daswatchdog is a generic monitor on Linux operating systems. A buffer overflow vulnerability exists in daswatchdog when handling the XAUTHORITY environment variable. An attacker could exploit this vulnerability to execute arbitrary code in the context of an affected application...

Ericsson Drutt Mobile Service Delivery Platform Directory Traversal Vulnerability

Ericsson Drutt Mobile Service Delivery Platform MSDP is a business support system from Ericsson, Sweden, that supports Service Delivery Platforms SDPs for on-site and off-portal services. A directory traversal vulnerability exists in Instance Monitor in Ericsson Drutt MSDP. A remote attacker coul...

CVE-2015-2166

Directory traversal vulnerability in the Instance Monitor in Ericsson Drutt Mobile Service Delivery Platform MSDP 4, 5, and 6 allows remote attackers to read arbitrary files via a ..%2f dot dot encoded slash in the default URI...

CVE-2015-2166

Ericsson Drutt Mobile Service Delivery Platform (MSDP) has a Local File Inclusion vulnerability in the Instance Monitor affecting versions 4–6. The flaw lets remote attackers read arbitrary files via a dot-dot-encoded slash (..%2f) in the default URI, enabling information disclosure. Root cause i...

SolarWinds Server and Application Monitor loadExtensionFactory Stack Buffer Overflow (CVE-2015-1500)

A stack buffer overflow vulnerability exists in SolarWinds Server and Application Monitor. The vulnerability is due to insufficient validation in loadExtensionFactory method of a 'factory' object. A remote unauthenticated attacker can exploit the vulnerability by enticing a target user to visit a...

SolarWinds Server and Application Monitor loadExtensionFactory Code Execution (CVE-2015-1501)

A code execution vulnerability exists in SolarWind Server and Application Monitor. A remote unauthenticated attacker can exploit the vulnerability by enticing a target user to visit a malicious website. Successful exploitation could allow arbitrary code execution within security context of the...

SOL16317 - OpenSSL vulnerability CVE-2015-0286

Vulnerability Recommended Actions If the previous table lists a version in the Versions known to be not vulnerable column, you can eliminate this vulnerability by upgrading to the listed version. If the listed version is older than the version you are currently running, or if the table does not...

Scientific Linux Security Update : GNOME Shell on SL7.x x86_64 (20150305)

It was found that the GNOME shell did not disable the Print Screen key when the screen was locked. This could allow an attacker with physical access to a system with a locked screen to crash the screen-locking application by creating a large amount of screenshots. CVE-2014-7300 This update also...

IT-Grundschutz M4.018: Administrative und technische Absicherung des Zugangs zum Monitor- und Single-User-Modus

IT-Grundschutz M4.018: Administrative und technische Absicherung des Zugangs zum Monitor- und Single-User-Modus. Stand: 14. Ergaenzungslieferung 14. EL. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

IT-Grundschutz M4.018: Administrative und technische Absicherung des Zugangs zum Monitor- und Single-User-Modus

IT-Grundschutz M4.018: Administrative und technische Absicherung des Zugangs zum Monitor- und Single-User-Modus. Stand: 14. Ergänzungslieferung 14. EL. OpenVAS Vulnerability Test $Id: GSHBM4018.nasl 7883 2017-11-23 11:22:59Z emoss $ IT-Grundschutz, 14. EL, Maßnahme 4.018 Authors: Thomas Rotter...

CVE-2015-2264

Multiple untrusted search path vulnerabilities in 1 EQATEC.Analytics.Monitor.Win32vc100.dll and 2 EQATEC.Analytics.Monitor.Win32vc100-x64.dll in Telerik Analytics Monitor Library before 3.2.125 allow local users to gain privileges via a Trojan horse a csunsapi.dll, b swift.dll, c nfhwcrhk.dll, or...

Directory traversal

Multiple untrusted search path vulnerabilities in 1 EQATEC.Analytics.Monitor.Win32vc100.dll and 2 EQATEC.Analytics.Monitor.Win32vc100-x64.dll in Telerik Analytics Monitor Library before 3.2.125 allow local users to gain privileges via a Trojan horse a csunsapi.dll, b swift.dll, c nfhwcrhk.dll, or...

CVE-2015-2264

Multiple untrusted search path vulnerabilities in 1 EQATEC.Analytics.Monitor.Win32vc100.dll and 2 EQATEC.Analytics.Monitor.Win32vc100-x64.dll in Telerik Analytics Monitor Library before 3.2.125 allow local users to gain privileges via a Trojan horse a csunsapi.dll, b swift.dll, c nfhwcrhk.dll, or...

CVE-2015-2264

CVE-2015-2264 involves untrusted search path vulnerabilities in Telerik Analytics Monitor Library (EQATEC.Analytics.Monitor.Win32_vc100.dll and Win32_vc100-x64.dll) used by Elipse E3. The root cause is loading Trojan horse DLLs (csunsapi.dll, swift.dll, nfhwcrhk.dll, or surewarehook.dll) from an ...

Drupal Campaign Monitor Module Cross-Site Request Forgery Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Campaign Monitor is one of the modules that integrates with the Campaign Monitor API to enable subscription to Drupal site management lists. A cross-site request forgery vulnerability...

Sql injection

Multiple SQL injection vulnerabilities in the Manage Accounts page in the AccountManagement.asmx service in the Solarwinds Orion Platform 2015.1, as used in Network Performance Monitor NPM before 11.5, NetFlow Traffic Analyzer NTA before 4.1, Network Configuration Manager NCM before 7.3.2, IP...

CVE-2014-9566

Multiple SQL injection vulnerabilities in the Manage Accounts page in the AccountManagement.asmx service in the Solarwinds Orion Platform 2015.1, as used in Network Performance Monitor NPM before 11.5, NetFlow Traffic Analyzer NTA before 4.1, Network Configuration Manager NCM before 7.3.2, IP...

Download Monitor <= 1.6.3 - Authenticated Directory Listing

Directory listing vulnerability that can lead to information disclosure. Authenticated users can list sever side files and directories...

SolarWinds Web Performance Monitor (WPM) Detection (HTTP)

HTTP based detection of SolarWinds Web Performance Monitor WPM. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...