CVE-2018-15405

A vulnerability in the web interface for specific feature sets of Cisco Integrated Management Controller IMC Supervisor and Cisco UCS Director could allow an authenticated, remote attacker to access sensitive information. The vulnerability is due to an authorization check that does not properly...

CVE-2018-15404

The CVE-2018-15404 issue affects Cisco Integrated Management Controller (IMC) Supervisor and Cisco UCS Director web interfaces. A vulnerability due to insufficient restrictions on resource size/total amount allows an authenticated, remote attacker with valid credentials to send crafted HTTP reque...

CVE-2018-15404 Cisco Integrated Management Controller Supervisor and Cisco UCS Director System Resources Denial of Service Vulnerability

A vulnerability in the web interface of Cisco Integrated Management Controller IMC Supervisor and Cisco UCS Director could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected system. The vulnerability is due to insufficient restrictions on the size or...

CVE-2018-15404: Allocation of Resources Without Limits or Throttling

A vulnerability in the web interface of Cisco Integrated Management Controller IMC Supervisor and Cisco UCS Director could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected system. The vulnerability is due to insufficient restrictions on the size or...

CVE-2018-15405: Improper Authorization

A vulnerability in the web interface for specific feature sets of Cisco Integrated Management Controller IMC Supervisor and Cisco UCS Director could allow an authenticated, remote attacker to access sensitive information. The vulnerability is due to an authorization check that does not properly...

CVE-2018-15615 CMS Supervisor Information Disclosure

A vulnerability in the Supervisor component of Avaya Call Management System allows local administrative user to extract sensitive information from users connecting to a remote CMS host. Affected versions of CMS Supervisor include R17.0.x and R18.0.x...

CVE-2018-15615

The CVE-2018-15615 entry concerns Avaya Call Management System (CMS) Supervisor. The vulnerability is described as an information disclosure where a local administrative user can extract sensitive information from users connecting to a remote CMS host. Affected versions are CMS Supervisor R17.0.x...

CVE-2018-15615

A vulnerability in the Supervisor component of Avaya Call Management System allows local administrative user to extract sensitive information from users connecting to a remote CMS host. Affected versions of CMS Supervisor include R17.0.x and R18.0.x...

Design/Logic Flaw

A vulnerability in the Supervisor component of Avaya Call Management System allows local administrative user to extract sensitive information from users connecting to a remote CMS host. Affected versions of CMS Supervisor include R17.0.x and R18.0.x...

CVE-2018-15615: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in the Supervisor component of Avaya Call Management System allows local administrative user to extract sensitive information from users connecting to a remote CMS host. Affected versions of CMS Supervisor include R17.0.x and R18.0.x...

PLANEX CS-W50HD Hardcoded Credentials Vulnerability (HTTP)

PLANEX CS-W50HD network camera are using hardcoded credentials for the HTTP login. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2017-12574

An issue was discovered on PLANEX CS-W50HD devices with firmware before 030720. A hardcoded credential "supervisor:dangerous" was injected into web authentication database "/.htpasswd" during booting process, which allows attackers to gain unauthorized access and control the device completely; th...

Omron CX-Supervisor Code Execution Vulnerability

Omron CX-Supervisor is a visual machine controller from Omron Japan. A code execution vulnerability exists in Omron CX-Supervisor version 3.4.1.0 and earlier versions, which can be exploited by an attacker to execute code within the context of an application...

Cisco Integrated Management Controller Supervisor Software and UCS Director Software Cross-Site Scripting Vulnerability

Cisco Integrated Management Controller IMC Supervisor Software and UCS Director Software are both products of Cisco Corporation.Cisco Integrated Management Controller IMC Supervisor Software is a set of tools for managing UCS Unified Computing System. Cisco Integrated Management Controller IMC...

CVE-2018-0149: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Integrated Management Controller Supervisor Software and Cisco UCS Director Software could allow an authenticated, remote attacker to conduct a Document Object Model-based DOM-based, stored cross-site scripting XSS attack against a us...

Cisco Integrated Management Controller Supervisor and Cisco UCS Director DOM Stored Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Integrated Management Controller Supervisor Software and Cisco UCS Director Software could allow an authenticated, remote attacker to conduct a Document Object Model-based DOM-based, stored cross-site scripting XSS attack against a us...

Memory corruption

In Schneider Electric Triconex Tricon MP model 3008 firmware versions 10.0-10.4, when a system call is made, registers are stored to a fixed memory location. Modifying the data in this location could allow attackers to gain supervisor-level access and control system states...

CVE-2018-7522

In Schneider Electric Triconex Tricon MP model 3008 firmware versions 10.0-10.4, when a system call is made, registers are stored to a fixed memory location. Modifying the data in this location could allow attackers to gain supervisor-level access and control system states...

CVE-2018-7522

In Schneider Electric Triconex Tricon MP model 3008 firmware versions 10.0-10.4, when a system call is made, registers are stored to a fixed memory location. Modifying the data in this location could allow attackers to gain supervisor-level access and control system states...

CVE-2018-7522

Schneider Electric Triconex Tricon MP Model 3008 (firmware versions 10.0-10.4) is vulnerable to a memory corruption issue where system calls store registers to a fixed memory location . Attackers who can modify the data in this location may gain supervisor-level access and control system states. ...