Cisco Unified Operations Manager Multiple Vulnerabilities

No description provided by source. Sense of Security - Security Advisory - SOS-11-006 Release Date. 18-May-2011 Last Update. - Vendor Notification Date. 28-Feb-2011 Product. Cisco Unified Operations Manager Common Services Framework Help Servlet Common Services Device Center CiscoWorks Homepage...

CVE-2011-0345

CVE-2011-0345 is a directory traversal vulnerability in the NMS server of Alcatel-Lucent OmniVista 4760 (affected: OmniVista 4760 NMS versions 5.0.07.05 and 5.1.06.03 ). The issue allows remote attackers to read arbitrary files via directory traversal sequences in HTTP GET requests, specifically ...

CVE-2011-0345: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the NMS server in Alcatel-Lucent OmniVista 4760 R5.1.06.03 and earlier allows remote attackers to read arbitrary files via directory traversal sequences in HTTP GET requests, related to the lang variable...

PT-2011-2284

Name of the Vulnerable Software and Affected Versions Alcatel-Lucent OmniVista 4760 versions R5.1.06.03 and earlier Description A directory traversal issue in the NMS server allows remote attackers to read arbitrary files via directory traversal sequences in HTTP GET requests, related to the lang...

KLA10056 RLF vulnerability in Alcatel-Lucent OmniVista 4760

A directory traversal vulnerability was found in OmniVista. By exploiting this vulnerability malicious users can read local files. This vulnerability can be exploited from the network at a point related to NMS server via specially designed GET request. Original advisories Alcatel bulletin...

DDIVRT-2010-30 Alcatel-Lucent OmniVista 4760 NMS 'lang' Directory Traversal Vulnerability [ CVE-2011-0345 ]

Title: DDIVRT-2010-30 Alcatel-Lucent OmniVista 4760 NMS 'lang' Directory Traversal Vulnerability CVE-2011-0345 Severity: High Date Discovered:10/29/2010 Discovered By: Digital Defense, Inc. Vulnerability Research Team Additional Discovered By: r@b13$ Vulnerability Description: The Alcatel-Lucent...

CVE-2008-6976

Summary of CVE-2008-6976 : MikroTik RouterOS versions 3.x (3.0–3.13) and 2.x (2.0–2.9.51) are vulnerable to an improper input validation vulnerability in SNMP handling that allows remote attackers to modify Network Management System (NMS) settings via a crafted SNMP set request. This can enable u...

CVE-2008-6976

MikroTik RouterOS 3.x through 3.13 and 2.x through 2.9.51 allows remote attackers to modify Network Management System NMS settings via a crafted SNMP set request...

EUVD-2008-6935

MikroTik RouterOS 3.x through 3.13 and 2.x through 2.9.51 allows remote attackers to modify Network Management System NMS settings via a crafted SNMP set request...

CVE-2008-6976: Improper Input Validation

MikroTik RouterOS 3.x through 3.13 and 2.x through 2.9.51 allows remote attackers to modify Network Management System NMS settings via a crafted SNMP set request...

Authentication flaw

A+ PHP Scripts News Management System NMS allows remote attackers to bypass authentication and gain administrator privileges by setting the mobsuser and mobspass cookies to 1...

CVE-2008-6667

The advisory concerns CVE-2008-6667 affecting A+ PHP Scripts News Management System (NMS). Remote attackers can bypass authentication and obtain administrator privileges by setting the mobsuser and mobspass cookies to 1, enabling full admin access. The vulnerability impact is authentication bypas...

CVE-2008-6667

A+ PHP Scripts News Management System NMS allows remote attackers to bypass authentication and gain administrator privileges by setting the mobsuser and mobspass cookies to 1...

CVE-2008-6667: Improper Authentication

A+ PHP Scripts News Management System NMS allows remote attackers to bypass authentication and gain administrator privileges by setting the mobsuser and mobspass cookies to 1...

CVE-2008-4342: Improper Input Validation

NuMedia Soft NMS DVD Burning SDK Activex NMSDVDX.DVDEngineX.1 ActiveX control NMSDVDX.dll 1.013C and earlier, as used in CDBurnerXP 4.2.1.976, BurnAware 2.1.3, Blaze Media Pro 8.02 Special Edition, and possibly other products, allows remote attackers to overwrite and create arbitrary files via...

KLA10097 WLF vulnerability in CDBurnerXP

An unspecified vulnerability was found in CDBurnerXP. By exploiting this vulnerability malicious users can overwrite arbitrary files. This vulnerability can be exploited from the network at a point related to NMS DVD Burning SDK. Original advisories vulnerability description Exploitation Public...

NMS DVD Burning SDK 'NMSDVDX.dll' ActiveX控件任意文件覆盖漏洞

BUGTRAQ ID: 31374 CNCAN ID：CNCAN-2008092609 NMS DVD Burning SDK是一款用于刻录DVD光盘的工具包。 NMS DVD Burning SDK包含的ActiveX控件存在任意文件覆盖问题，远程攻击者可以利用漏洞以登录用户进程权限执行任意程序。 问题是'NMSDVDX.dll' ActiveX控件处理"EnableLog"和"LogMessage"方法存在问题，构建恶意WEB页，诱使用户访问，可覆盖系统文件，执行任意程序。 Numedia Soft Inc. NMSDVDX DVD Burning SDK 1.008 Numedia...

NuMedia Soft NMS DVD Burning SDK Activex (NMSDVDX.dll) Exploit

No description provided by source. !-- 5.06 19/09/2008 ----------------------------------------------------------- -- NuMedia Soft NMS DVD Burning SDK Activex NMSDVDX.dll remote exploit -- by Nine:Situations:Group::bruiser software site: http://www.nugroovz.com/ our site:...

php -- php_variables memory disclosure

The remote host is missing an update to the system as announced in the referenced advisory. VID ad74a1bd-16d2-11d9-bc4a-000c41e2cdad OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

php -- multiple vulnerabilities

The remote host is missing an update to the system as announced in the referenced advisory. VID 7fcf1727-be71-11db-b2ec-000c6ec775d9 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...