2133 matches found
CVE-2016-2935
CVE-2016-2935 affects IBM BigFix Remote Control broker prior to 9.1.3, where an unauthenticated remote actor can cause a denial-of-service by sending an invalid HTTP request. This is corroborated by multiple sources in the connected documents (NVD/NESSUS/CNVD), which list the affected product and...
CVE-2016-2963
IBM BigFix Remote Control is affected by a CSRF vulnerability (CVE-2016-2963) affecting versions up to 9.1.3 (earlier listings also cite 9.1.2 and older). The issue allows an attacker to hijack the authenticated user’s session by issuing requests that insert XSS sequences, enabling cross-site req...
CVE-2016-2932
IBM BigFix Remote Control before 9.1.3 is affected by an XML injection vulnerability (CVE-2016-2932) due to an unspecified flaw that allows an unauthenticated, remote attacker to inject arbitrary XML content. Public documents do not provide exploitation details; one source suggests upgrading to 9...
CVE-2016-2950
CVE-2016-2950 affects IBM BigFix Remote Control prior to 9.1.3. The vulnerability is a SQL injection flaw that allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. IBM BigFix Remote Control versions before 9.1.3 are vulnerable; upgrading to 9.1.3 or applyin...
CVE-2016-2952
IBM BigFix Remote Control is affected by CVE-2016-2952. Versions before 9.1.3 do not enable HSTS, enabling information disclosure via HTTP and allowing remote attackers to obtain sensitive data. The CNVD/NVD entries corroborate an information‑disclosure impact due to missing HSTS. Root cause: HST...
CVE-2016-2931
IBM BigFix Remote Control is affected by CVE-2016-2931: versions before 9.1.3 allow unauthenticated remote attackers to obtain sensitive cleartext information by sniffing network traffic. Affected product: IBM BigFix Remote Control prior to 9.1.3. Root cause: information disclosure through networ...
CVE-2016-2949
IBM BigFix Remote Control prior to version 9.1.3 has an information disclosure flaw that allows a local attacker to obtain sensitive data by reading cached web pages from another user’s session. Some sources cite affected versions as up to 9.1.2 (CNVD) or generally before 9.1.3 (NVD). The root ca...
CVE-2016-2934
IBM BigFix Remote Control is affected by CVE-2016-2934: an XSS vulnerability in versions before 9.1.3 that allows an unauthenticated attacker to inject arbitrary web script/HTML via unspecified vectors in the web interface. Remediation: upgrade to 9.1.3 or later to mitigate.
CVE-2016-2936
IBM BigFix Remote Control (before 9.1.3) stores passwords in clear text, enabling local users to obtain sensitive credentials. Affected versions include 9.1.2 and earlier. Root cause: cleartext password storage. Impact: information disclosure to local attackers. Remediation: upgrade to version 9....
CVE-2016-2944
IBM BigFix Remote Control before 9.1.3 is affected by an authentication flaw: it does not properly restrict failed login attempts, enabling brute-force access by a remote attacker. Connected sources confirm this vulnerability exists in versions up to 9.1.2 and describe the root cause as insuffici...
Silk TV Remote - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities
HackApp vulnerability scanner discovered that application Silk TV Remote published at the 'play' market has multiple vulnerabilities...
IBM BigFix Remote Control Information Disclosure Vulnerability
IBM BigFix Remote Control is a set of remote control systems from IBM in the United States. A security vulnerability exists in IBM BigFix Remote Control versions prior to 9.1.3, which stems from the program's failure to properly restrict the set of available encryption algorithms. A remote attack...
IBM BigFix Remote Control Information Disclosure Vulnerability (CNVD-2016-11744)
IBM BigFix Remote Control is a set of remote control systems from IBM in the United States. A security vulnerability exists in IBM BigFix Remote Control versions prior to 9.1.3 that stems from the program's use of a weak default password policy. A remote attacker could exploit the vulnerability t...
IBM BigFix Remote Control Information Disclosure Vulnerability (CNVD-2016-11693)
IBM BigFix Remote Control is a set of remote control systems from IBM in the United States. A security vulnerability exists in IBM BigFix Remote Control versions prior to 9.1.3. A remote attacker could exploit the vulnerability by reading error logs to obtain sensitive information...
IBM BigFix Remote Control < 9.1.3 Multiple Vulnerabilities
IBM BigFix Remote Control is prone to multiple vulnerabilities. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free softwar...
HCL / IBM BigFix Remote Control Detection (HTTP)
HTTP based detection of HCL / IBM BigFix Remote Control. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...
CVE-2016-2929
IBM BigFix Remote Control before 9.1.3 does not properly restrict password choices, which makes it easier for remote attackers to obtain access via a brute-force approach...
CVE-2016-2929
IBM BigFix Remote Control before 9.1.3 does not properly restrict password choices, which makes it easier for remote attackers to obtain access via a brute-force approach...