2082 matches found
CVE-2015-2135
HP Intelligent Provisioning versions 1.00–1.62(a), 2.00, and 2.10 are affected by CVE-2015-2135, a remote code execution/unauthorized access vulnerability. The HP Security Bulletin notes a vulnerability in HP Intelligent Provisioning that could allow remote code execution and unauthorized access,...
CVE-2015-2135
Unspecified vulnerability in HP Intelligent Provisioning 1.00 through 1.62a, 2.00, and 2.10 allows remote attackers to execute arbitrary code via unknown vectors...
CVE-2015-5770
MobileInstallation in Apple iOS before 8.4.1 does not ensure the uniqueness of universal provisioning profile bundle IDs, which allows attackers to replace arbitrary extensions via a crafted enterprise app...
Information disclosure
MobileInstallation in Apple iOS before 8.4.1 does not ensure the uniqueness of universal provisioning profile bundle IDs, which allows attackers to replace arbitrary extensions via a crafted enterprise app...
CVE-2015-5770
MobileInstallation in Apple iOS before 8.4.1 does not ensure the uniqueness of universal provisioning profile bundle IDs, which allows attackers to replace arbitrary extensions via a crafted enterprise app...
Cisco Mobility Services Engine Control And Provisioning Feature Information Disclosure Vulnerability
Cisco Mobility Services Engine MSE is a platform Mobility Services Engine that provides Wi-Fi services from Cisco. The platform collects, stores and manages data from wireless clients, Cisco access points and controllers. A security vulnerability exists in the Control And Provisioning feature of...
CVE-2015-4263
The Control and Provisioning functionality in Cisco Mobility Services Engine MSE 10.00.1 allows remote authenticated users to obtain sensitive information by reading log files, aka Bug ID CSCut36851...
CVE-2014-3653
Cross-site scripting XSS vulnerability in the template preview function in Foreman before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via a crafted provisioning template...
Cross site scripting
Cross-site scripting XSS vulnerability in the template preview function in Foreman before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via a crafted provisioning template...
CVE-2014-3653
Cross-site scripting XSS vulnerability in the template preview function in Foreman before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via a crafted provisioning template...
CVE-2015-3725
MobileInstallation in Apple iOS before 8.4 does not ensure the uniqueness of Watch bundle IDs, which allows attackers to cause a denial of service ID collision and Watch launch outage via a crafted universal provisioning profile app...
CVE-2015-3722
Application Store in Apple iOS before 8.4 does not ensure the uniqueness of bundle IDs, which allows attackers to cause a denial of service ID collision and launch outage via a crafted universal provisioning profile app...
Code injection
Application Store in Apple iOS before 8.4 does not ensure the uniqueness of bundle IDs, which allows attackers to cause a denial of service ID collision and launch outage via a crafted universal provisioning profile app...
Code injection
MobileInstallation in Apple iOS before 8.4 does not ensure the uniqueness of Watch bundle IDs, which allows attackers to cause a denial of service ID collision and Watch launch outage via a crafted universal provisioning profile app...
CVE-2015-3722
CVE-2015-3722 concerns Apple iOS before 8.4 where the universal provisioning profile install logic did not ensure bundle ID uniqueness, enabling an attacker to trigger a collision that could prevent apps from launching (denial of service). The connected sources note that Apple addressed this in i...
CVE-2015-3725
MobileInstallation in Apple iOS before 8.4 does not ensure the uniqueness of Watch bundle IDs, which allows attackers to cause a denial of service ID collision and Watch launch outage via a crafted universal provisioning profile app...
Apple Patches Dozens of Flaws in iOS 8.4, OS X 10.10.4
Apple has released new versions of iOS and OS X, both of which include a significant number of security patches, several for bugs that can lead to remote code execution and other serious issues. Version 8.4 of iOS contains fixes for more than 30 security vulnerabilities, including bugs in the iOS...
EMC Unified Infrastructure Manager/Provisioning authentication bypass
Authentication bypass if LDAP authentication is used...
Cisco NX-OS DHCP POAP Command Injection Vulnerability
The remote Cisco device is running a version of NX-OS software that is affected by a command injection vulnerability due to the PowerOn Auto Provisioning POAP feature not properly validating the DHCP options returned by POAP. An attacker on an adjacent network, using crafted DHCP packets, can...