2441 matches found
Intel Server Platform Services Firmware Elevation of Privilege Vulnerability
Intel Server Platform Services Firmware is a server platform services program used in the CPU Central Processing Unit. An elevation of privilege vulnerability exists in Intel Server Platform Services Firmware, which could be exploited by a local attacker to submit a special request to illegally...
Philips IntelliSpace Cardiovascular System and Xcelera System Plaintext Storage Vulnerability
The Philips IntelliSpace Cardiovascular and Xcelera systems predecessor to IntelliSpace Cardiovascular are comprehensive cardiac imaging and information management software. The Philips IntelliSpace Cardiovascular System and Xcelera System have a plaintext storage vulnerability where credentials...
Cisco APIC-EM 1.x < 1.5 Unauthorized Access (credentialed check)
According to its self-reported version number, the Cisco Application Policy Infrastructure Controller Enterprise Module APIC-EM application running on the remote host is 1.x prior to 1.5. It is, therefore, affected by a vulnerability within the firewall configuration of the Cisco Application Poli...
CVE-2017-12262
A vulnerability within the firewall configuration of the Cisco Application Policy Infrastructure Controller Enterprise Module APIC-EM could allow an unauthenticated, adjacent attacker to gain privileged access to services only available on the internal network of the device. The vulnerability is...
CVE-2017-12262
A vulnerability within the firewall configuration of the Cisco Application Policy Infrastructure Controller Enterprise Module APIC-EM could allow an unauthenticated, adjacent attacker to gain privileged access to services only available on the internal network of the device. The vulnerability is...
CVE-2017-10099
Vulnerability in the SPARC M7, T7, S7 based Servers component of Oracle Sun Systems Products Suite subcomponent: Firmware. The supported version that is affected is Prior to 9.7.6.b. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where SPARC M7,...
kernel: Integer overflow in ip6_find_1stfragopt() causes infinite loop
An integer overflow vulnerability in ip6find1stfragopt function was found. A local attacker that has privileges of CAPNETRAW to open raw socket can cause an infinite loop inside the ip6find1stfragopt function...
How to Restrict NetScaler Management Interfaces with ACLs
This article describes how to lock down the NetScaler management interfaces with ACLs. Background Customers wanting to run a secure environment should limit access to the NetScaler management interface as a best practice. Ideally, the management interfaces should be on isolated networks physical ...
The vulnerability of the Kernel component of the Solaris operating system, which allows a hacker to gain control over the system
The vulnerability of the Kernel component of the Solaris operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious individual, who has local access, to gain control over the system, with privileged access to the infrastructure where the...
Default credentials
Default access permissions for Persistent Volumes PVs created by the Kubernetes Azure cloud provider in versions 1.6.0 to 1.6.5 are set to "container" which exposes a URI that can be accessed without authentication on the public internet. Access to the URI string requires privileged access to the...
Philips' DoseWise Portal Hardcoding Vulnerability
Philips' DoseWise Portal is a web-based reporting and tracking tool for radiation exposure. A hard-coded vulnerability exists in Philips' DoseWise Portal. An attacker exploiting this vulnerability would first require elevated privileges in order for the attacker to access web application back-end...
Red Hat CloudForms Management Engine Elevation of Privilege Vulnerability
Red Hat CloudForms Management Engine is an IaaS Infrastructure as a Service cloud services solution from Red Hat, Inc. The solution creates and manages private and public clouds and has application lifecycle management capabilities. An elevation of privilege vulnerability exists in the Red Hat...
CVE-2017-9653
An Improper Authorization issue was discovered in OSIsoft PI Integrator for Business Analytics before 2016 R2, PI Integrator for Microsoft Azure before 2016 R2 SP1, and PI Integrator for SAP HANA before 2017. An attacker is able to gain privileged access to the system while unauthorized...
CVE-2017-9653
An Improper Authorization issue was discovered in OSIsoft PI Integrator for Business Analytics before 2016 R2, PI Integrator for Microsoft Azure before 2016 R2 SP1, and PI Integrator for SAP HANA before 2017. An attacker is able to gain privileged access to the system while unauthorized...
CVE-2017-9653
An Improper Authorization issue was discovered in OSIsoft PI Integrator for Business Analytics before 2016 R2, PI Integrator for Microsoft Azure before 2016 R2 SP1, and PI Integrator for SAP HANA before 2017. An attacker is able to gain privileged access to the system while unauthorized...
OSIsoft PI Integrator Unauthorized Access Vulnerability
OSIsoft PI Integrator is a tool for visualizing data for external systems from OSIsoft, USA. An unauthorized access vulnerability exists in OSIsoft PI Integrator. An attacker could exploit this vulnerability to gain privileged access to the system...
CVE-2017-10062
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Oracle Java Web Console. The supported version that is affected is 10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise...
CVE-2017-10210
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...
CVE-2017-10120
Vulnerability in the RDBMS Security component of Oracle Database Server. The supported version that is affected is 12.1.0.2. Difficult to exploit vulnerability allows high privileged attacker having Create Session, Select Any Dictionary privilege with logon to the infrastructure where RDBMS...
