7223 matches found
The vulnerability of the Windows operating system, which allows a hacker to increase their privileges
The vulnerability of the kernel control driver in the Windows transaction monitor is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to enhance their privileges through a specially created application...
SUSE-SU-2017:0367-1 Security update for ceph
This update for ceph fixes the following issues: CVE-2016-5009: moncommand with empty prefix could crash monitor bsc987144 Invalid commandd in SOC7 with ceph bsc1008894 Performance fix was missing in SES4 bsc1005179 ceph build problems on ppc64le bsc982141 ceph make build unit test failure...
Novell eDirectory Clickjacking Vulnerability
Novell eDirectory is an identity management infrastructure platform that combines identity management architecture and directory services technology from Novell, USA. The platform provides authentication policies, data backup and recovery services, data disaster recovery and other functions. A...
Moxa Management Protocol Detection
Moxa SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.106693";...
CVE-2016-9168
A missing X-Frame-Options header in the NDS Utility Monitor in NDSD in Novell eDirectory before 9.0.2 could be used by remote attackers for clickjacking...
CVE-2016-9168
A missing X-Frame-Options header in the NDS Utility Monitor in NDSD in Novell eDirectory before 9.0.2 could be used by remote attackers for clickjacking...
Design/Logic Flaw
A missing X-Frame-Options header in the NDS Utility Monitor in NDSD in Novell eDirectory before 9.0.2 could be used by remote attackers for clickjacking...
CVE-2016-9168
CVE-2016-9168 affects Novell eDirectory’s NDSD (NDS Utility Monitor) prior to version 9.0.2, where a missing X-Frame-Options header could enable clickjacking by remote attackers. The vulnerability is documented across multiple feeds (NVD entry and cross-references in CNVD/OpenVAS records) and is ...
CVE-2016-9168
A missing X-Frame-Options header in the NDS Utility Monitor in NDSD in Novell eDirectory before 9.0.2 could be used by remote attackers for clickjacking...
OP5 5.3.5 / 5.4.0 / 5.4.2 / 5.5.0 / 5.5.1 - license.php Remote Command Execution Exploit
Exploit for multiple platform in category web applications This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'OP5 license.php Remote Command Execution', 'Description' = %q This...
CVE-2017-6462
A vulnerability was found in NTP, in the parsing of packets from the /dev/datum device. A malicious device could send crafted messages, causing ntpd to crash. Mitigation Properly monitor your ntpd instances, and auto-restart ntpd without -g if it stops running...
CVE-2016-9165
The CVE-2016-9165 issue affects CA Unified Infrastructure Management (UIM) and CA UIM Snap prior to version 8.5, via the get_sessions servlet. The vulnerability allows remote, unauthenticated attackers to obtain active session IDs, which can be used to hijack sessions and bypass authentication or...
Using Task Scheduler to automate the collection of CDF traces
It gets difficult at times when we need to capture CDF traces for a specific period of time. We have different tools like CDF Control, Scout and CDF Monitor, however it requires manual intervention to start and stop the traces and yet there are chances that the traces might get over-written if yo...
Directory traversal
Directory traversal vulnerability in diag.jsp file in CA Unified Infrastructure Management formerly CA Nimsoft Monitor 8.4 SP1 and earlier and CA Unified Infrastructure Management Snap formerly CA Nimsoft Monitor Snap allows remote attackers to read arbitrary files via unspecified vectors...
CVE-2016-9164
CA Unified Infrastructure Management (UIM) diag.jsp contains a directory traversal vulnerability (CVE-2016-9164) that allows remote, unauthenticated attackers to read arbitrary files. Affected products include UIM 8.4 SP1 and earlier (and CA UIM Snap), with disclosures indicating the issue exists...
CVE-2016-10203
Cross-site scripting XSS vulnerability in Zoneminder 1.30 and earlier allows remote attackers to inject arbitrary web script or HTML via the name when creating a new monitor...
Cross site scripting
Cross-site scripting XSS vulnerability in Zoneminder 1.30 and earlier allows remote attackers to inject arbitrary web script or HTML via the name when creating a new monitor...
CVE-2016-10203
Cross-site scripting XSS vulnerability in Zoneminder 1.30 and earlier allows remote attackers to inject arbitrary web script or HTML via the name when creating a new monitor...