5559 matches found
CVE-2015-7818
The administration-panel web service in IBM System Networking Switch Center SNSC before 7.3.1.5 and Lenovo Switch Center before 8.1.2.0 allows local users to execute arbitrary JSP code with SYSTEM privileges by using the Apache Axis AdminService deployment method to install a .jsp file...
CVE-2015-7820
CVE-2015-7820 is a race-condition vulnerability in IBM System Networking Switch Center (SNSC) and Lenovo Switch Center that, on affected releases, can let a remote attacker obtain privileged-account access and then abuse ZipDownload.jsp to read arbitrary files. The issue affects SNSC prior to 7.3...
Lenovo Switch Center Local Lift Vulnerability
Lenovo Switch Center formerly known as IBM System Networking Switch Center is a suite of applications used by Lenovo in China to remotely monitor and manage Ethernet converged switches. A local lift vulnerability exists in IBM System Networking Switch Center versions 7.1.3.4 and earlier and Lenov...
Lenovo Switch Center Remote Privilege Vulnerability
Lenovo Switch Center formerly known as IBM System Networking Switch Center is a suite of applications used by Lenovo in China to remotely monitor and manage Ethernet converged switches. A remote elevation vulnerability exists in IBM System Networking Switch Center version 7.1.3.4 and earlier and...
IBM System Networking Switch Center DB Service Remote Elevation of Privilege Vulnerability
This vulnerability allows remote attackers to disclose information on vulnerable installations of IBM System Networking Switch Center. Authentication is not required to exploit this vulnerability. The specific flaw exists within the IBM SNSC DB Service, that listens by default on port 40999. This...
IBM System Networking Switch Center ZipDownload.jsp Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose information on vulnerable installations of IBM System Networking Switch Center. Authentication is not required to exploit this vulnerability. The specific flaws exist within the IBM SNSC Web Service, which listens by default on ports 40080 HT...
IBM System Networking Switch Center Local Privilege Escalation Vulnerability
This vulnerability allows local unprivileged attackers to execute arbitrary code on vulnerable installations of IBM System Networking Switch Center. Authentication is not required to exploit this vulnerability. The specific flaw exists within the IBM SNSC Web Service, which listens by default on...
GE Multilink Switch Vulnerabilities (Update A)
OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-15-013-04 GE MultiLink Switch Vulnerabilities that was published January 13, 2015, on the NCCIC/ICS-CERT web site. --------- Begin Update A Part 1 of 3 -------- Eireann Leverett of IOActive has identified three...
Siemens Scalance X200 IRT交换机固件SNMPv3功能安全漏洞
No description provided by source...
FreeSWITCH Heap Buffer Overflow Vulnerability
FreeSWITCH is a free, open source communications software developed by American software developer Anthony Minessale. A heap buffer overflow vulnerability exists in the 'parsestring' function in the libs/esl/src/esljson.c file in FreeSWITCH versions 1.4.21 and earlier, and version 1.6.0. A remote...
Siemens Scalance W-700 系列设备SSL证书欺骗漏洞
Siemens Scalance W-700系列内置SSL证书欺骗漏洞 CNVD-ID CNVD-2013-11278 CVE-ID: CVE-2013-4651 在关于担保的管理 web 界面和命令行管理界面中的身份验证旁路硬编码的 SSL 证书的西门子 Scalance W7xx IEEE 802.11a/b/g 产品系列。Siemens Scalance W-700 Series是西门子开发的工业无线交换机设备。 Siemens Scalance W-700系列设备设备内置的SSL证书，不能通过管理接口来更换该证书，允许攻击者通过中间人攻击获取敏感信息。 如下固件版本...
Debian DLA-316-1 : eglibc security update
Several vulnerabilities have been discovered in eglibc that may lead to a privilege escalation or denial of service. Glibc pointer guarding weakness A weakness in the dynamic loader prior has been found. The issue is that the LDPOINTERGUARD in the environment is not sanitized allowing local...
UBUNTU-CVE-2015-1781
Buffer overflow in the gethostbynamer and other unspecified NSS functions in the GNU C Library aka glibc or libc6 before 2.22 allows context-dependent attackers to cause a denial of service crash or execute arbitrary code via a crafted DNS response, which triggers a call with a misaligned buffer...
'The Hacker News' Weekly Roundup — 14 Most Popular Stories
To make the last week’s top cyber security threats and challenges available to you in one shot, we are once again here with our weekly round up. Last week, we came across lots of cyber security threats like the XCodeGhost malware in Apple’s App Store and lockscreen bypass bug in iOS 9 and iOS 9.0...
DLA-316-1 eglibc - security update
Bulletin has no description...
Microsoft has Built its own Linux Operating System
Sit Tight on your seats, because you're gonna get a Shock. Microsoft has developed an Operating System powered by LINUX. Close your mouth first. It’s True! Microsoft has built its own Linux-based operating system called Azure Cloud Switch ACS and believe me, under Satya Nadella, Microsoft has...
Moxa Industrial Managed Switch Elevation of Privilege Vulnerability
Moxa EDS-405A/EDS-408A is a series of Ethernet switches. An elevation of privilege vulnerability exists in the management web interface of the Moxa EDS-405A/EDS-408A, which can be exploited by an attacker to bypass the authentication mechanism and elevate privileges...
Amazon Linux: Security Advisory (ALAS-2015-495)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Moxa Industrial Managed Switch denial of service vulnerability(CVE-2 0 1 5-6 4 6 5)-vulnerability warning-the black bar safety net
Affected system: Moxa Industrial Managed Switch EDS-408A Moxa Industrial Managed Switch EDS-405A Description: CVECAN ID: CVE-2 0 1 5-6 4 6 5 Moxa EDS-405A/EDS-408A Ethernet switch Series products. Moxa EDS-405A/EDS-408A embedded GoAhead Web serverthere is a denial of service vulnerability, an...
