253 matches found
[SECURITY] Fedora 32 Update: nrpe-4.0.2-2.fc32
Nrpe is a system daemon that will execute various Nagios plugins locally on behalf of a remote monitoring host that uses the checknrpe plugin. Various plugins that can be executed by the daemon are available at: http://sourceforge.net/projects/nagiosplug This package provides the core agent...
DLL Hijacking Vulnerability in Weinview EasyWatch
EasyWatch is a tool for debugging or remote monitoring. Weinview EasyWatch suffers from a DLL hijacking vulnerability that can be exploited by attackers to execute malicious code...
Advantech DiagAnywhere Server Buffer Overflow Vulnerability
Advantech DiagAnywhere Server is a Windows-based remote monitoring software from Advantech, Taiwan, China. The software is mainly used for remote monitoring Advantech TPC, APAX, UNO and ADAM. A buffer overflow vulnerability exists in Advantech DiagAnywhere Server. The vulnerability stems from a...
Nuclear Satcoms
The Fukushima Daiichi nuclear incident in 2011 has led to safety changes that may have an interesting knock-on effect on reactor security. Loss of telemetry during the flooding, as a result of the subsequent loss of power, made assessment of the incident hard to manage. Critical data about the...
Glances - An Eye On Your System. A Top/Htop Alternative For GNU/Linux, BSD, Mac OS And Windows Operating Systems
Glances is a cross-platform monitoring tool which aims to present a large amount of monitoring information through a curses or Web based interface. The information dynamically adapts depending on the size of the user interface. It can also work in client/server mode. Remote monitoring could be do...
The vulnerability of the Advantech WebAccess remote monitoring software arises from buffer overflows in the stack, allowing a hacker to execute arbitrary code.
The vulnerability of Advantech WebAccess remote monitoring software arises due to buffer overflow in the stack. Exploiting this vulnerability allows a malicious actor operating remotely to execute arbitrary code...
The vulnerability of the Advantech WebAccess remote monitoring software lies in the insecure management of privileges. This allows a perpetrator to elevate their privileges and gain access to files.
The vulnerability of Advantech WebAccess remote monitoring software relates to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges and gain access to files...
Advantech WISE-PaaS/RMM Unauthorized Access Vulnerability
Advantech WISE-PaaS/RMM is a remote monitoring and management platform for IoT devices. An unauthorized access vulnerability exists in Advantech WISE-PaaS/RMM, which can be exploited by an attacker to submit a special request for unauthorized access to a device...
Advantech WISE-PaaS/RMM XML External Entity Injection Vulnerability
Advantech WISE-PaaS/RMM is an IoT device remote monitoring and management platform. An XML External Entity Injection XXE vulnerability exists in Advantech WISE-PaaS/RMM 3.3.29 and earlier versions. An attacker can exploit this vulnerability to obtain sensitive data...
Advantech WISE-PaaS/RMM SQL Injection Vulnerability
Advantech WISE-PaaS/RMM is an IoT device remote monitoring and management platform. A SQL injection vulnerability exists in Advantech WISE-PaaS/RMM 3.3.29 and earlier versions. The vulnerability stems from a lack of validation of user-supplied input. An attacker can exploit the vulnerability to...
Advantech WISE-PaaS/RMM Path Traversal Vulnerability
Advantech WISE-PaaS/RMM is an IoT device remote monitoring and management platform. A path traversal vulnerability exists in Advantech WISE-PaaS/RMM 3.3.29 and earlier versions. The vulnerability stems from failure to properly validate a user-supplied path before using it for file operations. An...
Advantech WISE-PaaS/RMM
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Advantech Equipment: WISE-PaaS/RMM Vulnerabilities: Path Traversal, Missing Authorization, Improper Restriction of XML External Entity Reference, SQL Injection 2. RISK EVALUATION Successful...
The numerous vulnerabilities of the Webvrpcs software, a remote monitoring solution from Advantech, allow a intruder to execute arbitrary code.
The multiple vulnerabilities of the Webvrpcs software for remote monitoring by Advantech WebAccess are related to deficiencies in the validation of input data before it is copied into a fixed-length buffer. Exploiting these vulnerabilities could allow a malicious actor to execute arbitrary code...
The numerous vulnerabilities of the Webvrpcs software, a remote monitoring solution from Advantech, allow a intruder to execute arbitrary code.
The multiple vulnerabilities of the Webvrpcs software for remote monitoring from Advantech WebAccess are related to the lack of checking for the value of the pointer before it is assigned. Exploiting these vulnerabilities could allow a malicious actor to execute arbitrary code remotely...
The numerous vulnerabilities of the Webvrpcs software, a remote monitoring solution from Advantech, allow a intruder to execute arbitrary code.
The multiple vulnerabilities of the Webvrpcs software for remote monitoring by Advantech WebAccess are related to insufficient validation of input data. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code by writing data beyond the boundaries of the allocated buffe...
The numerous vulnerabilities of the Webvrpcs software, a remote monitoring solution from Advantech, allow a intruder to execute arbitrary code.
The multiple vulnerabilities of the Webvrpcs software for remote monitoring from Advantech WebAccess are related to deficiencies in the validation of input data before copying them into a dynamically allocated fixed-length buffer. Exploiting these vulnerabilities could allow a malicious actor to...
CVE-2018-7820
A Credentials Management CWE-255 vulnerability exists in the APC UPS Network Management Card 2 AOS v6.5.6, which could cause Remote Monitoring Credentials to be viewed in plaintext when Remote Monitoring is enabled, and then disabled...
CVE-2018-7820
A Credentials Management CWE-255 vulnerability exists in the APC UPS Network Management Card 2 AOS v6.5.6, which could cause Remote Monitoring Credentials to be viewed in plaintext when Remote Monitoring is enabled, and then disabled...
Code injection
A Credentials Management CWE-255 vulnerability exists in the APC UPS Network Management Card 2 AOS v6.5.6, which could cause Remote Monitoring Credentials to be viewed in plaintext when Remote Monitoring is enabled, and then disabled...
CVE-2018-7820
The CVE-2018-7820 entry concerns the APC UPS Network Management Card 2 AOS v6.5.6. The vulnerability is a Credentials Management issue (CWE-255) where Remote Monitoring credentials could be viewed in plaintext when Remote Monitoring is enabled and then disabled. No in-document exploit details or ...