134 matches found
The vulnerability in the web interface of Cisco Firepower Management Center’s software management interface allows a perpetrator to gain unauthorized access to confidential configuration information.
The vulnerability of the Cisco Firepower Management Center’s software network management interface is related to errors in the encryption of confidential information stored in the graphical interface configuration console. Exploiting this vulnerability can allow an attacker to gain unauthorized...
ArcGIS Server Manager Stored Cross-Site Scripting Vulnerability
ArcGIS Server is the back-end server software component of ArcGIS Enterprise.ArcGIS Server Manager is an application that is installed with ArcGIS Server and provides an intuitive and convenient interface for managing the server. A stored cross-site scripting vulnerability exists in ArcGIS Server...
Adobe Creative Cloud Desktop Application Uncontrolled Search Path Element Vulnerability
Adobe Creative Cloud Desktop Application is the management software for various Creative Cloud applications and services. An uncontrolled search path element vulnerability exists in Adobe Creative Cloud Desktop Application 2.4 and earlier versions. An attacker can exploit this vulnerability to...
Lenovo Pcmanager Code Issue Vulnerability
Lenovo Pcmanager is a software from Lenovo, China, that provides comprehensive management of Pc devices. A code issue vulnerability exists in Lenovo PCManager prior to version 3.0.400.3252, which stems from an incorrect programmatic call to an advanced local procedure that can be exploited by an...
Sonatype Nexus Repository Manager Cross-Site Scripting Vulnerability (CNVD-2021-35619)
Sonatype Nexus Repository Manager NXRM is a repository manager from Sonatype, Inc. that is used to manage, store, and distribute software, among other things. A cross-site scripting vulnerability exists in Nexus Repository Manager version 3.x prior to 3.30.1, which can be exploited by an attacker...
NOKIA NetAct 18A 代码问题漏洞
NOKIA NetAct 18A is an application system from Nokia Finland. It provides best-in-class applications to enable seamless day-to-day network operations, including configuration management, monitoring and software management. A security vulnerability exists in Nokia NetAct 18A, which can be exploite...
Cisco Smart Software Manager Satellite SQL Injection Vulnerability
Cisco Smart Software Manager Satellite is a Cisco component for Cisco product license management. A SQL injection vulnerability exists in the Web management interface of Cisco Smart Software Manager Satellite 5.1.0 and earlier versions. The vulnerability stems from the web management interface no...
The vulnerability of Cisco Firepower Management Center’s software management system allows a intruder to trigger a service failure.
The vulnerability of Cisco Firepower Management Center’s software management system is related to errors in the certificate validation process. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
App Layering Recipe: How to deploy Microsoft SCCM in a layer
...
Out of licenses error on License Administration Console
An Out of licenses alert message is received on the License Administration Console LAC...
_GCafé 3.0 - 'gbClienService' Unquoted Service Path
Exploit Title: GCafé 3.0 - 'gbClienService' Unquoted Service Path Google Dork: N/A Date: 2019-11-09 Exploit Author: Doan Nguyen 4ll4u Vendor Homepage: https://gcafe.vn/ Software Link: https://gcafe.vn/post/view?slug=gcafe-3.0 Version: v3.0 Tested on: Windows 7, Win 10, WinXP CVE : N/A Description...
Zoho Applications Manager Plugin CVE-2019-15104 SQL Injection Vulnerability
Description Zoho Applications Manager Plugin is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. An attacker may leverage this issue to compromise the application, access or modify data, or exploit latent...
CVE-2019-1889 Cisco Application Policy Infrastructure Controller REST API Privilege Escalation Vulnerability
A vulnerability in the REST API for software device management in Cisco Application Policy Infrastructure Controller APIC Software could allow an authenticated, remote attacker to escalate privileges to root on an affected device. The vulnerability is due to incomplete validation and error checki...
Cisco Application Policy Infrastructure Controller REST API Privilege Escalation Vulnerability
A vulnerability in the REST API for software device management in Cisco Application Policy Infrastructure Controller APIC Software could allow an authenticated, remote attacker to escalate privileges to root on an affected device. The vulnerability is due to incomplete validation and error checki...
eNdonesia Portal 8.7 - Multiple Vulnerabilities
eNdonesia Portal 8.7 - Multiple Vulnerabilities =========================================================================================== Exploit Title: eNdonesia Portal 'banners.php' SQL Inj. Dork: N/A Date: 19-03-2019 Exploit Author: Mehmet EMIROGLU Vendor Homepage: http://www.endonesia.org/...
SQL Injection Vulnerability in Aite Lawyer Software Management Platform
Aite Lawyer Software Management Platform is a platform for lawyers' business management and law firm informatization. SQL injection vulnerability exists in Aite Lawyer Software Management Platform...
Recommendation on installing SCCM Client on Citrix Virtual Desktop Master Image
Recommendations on installing of SCCM client on VDI master image...
Microsoft Windows: Service: Windows Remote Management (WS-Management)
This test checks the setting for policy OpenVAS Vulnerability Test $Id: winremotemanagement.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Windows Remote Management WS-Management WinRM Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net Thi...
Web Service Security Assessment Tool: WSSAT
WSSAT is an open source web service security scanning tool which provides a dynamic environment to add, update or delete vulnerabilities by just editing its configuration files. This tool accepts WSDL address list as input file and for each service, it performs both static and dynamic tests again...