Lucene search
+L

906 matches found

Zero Day Initiative
Zero Day Initiative
added 2014/06/02 12:0 a.m.60 views

(0Day) Rocket Servergraph Admin Center for TSM fileRequestServlet writeDataFile Command Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Rocket Servergraph Admin Center for Tivoli Storage Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the fileRequestServlet servlet. This servle...

10CVSS7.2AI score0.72606EPSS
Exploits5References1
Zero Day Initiative
Zero Day Initiative
added 2014/04/10 12:0 a.m.54 views

WellinTech KingScada AEserver.exe Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of WellinTech KingScada. Authentication is not required to exploit this vulnerability. The specific flaw exists within the protocol parsing code contained in kxNetDispose.dll. The parent service is...

10CVSS7.3AI score0.1602EPSS
Exploits5References1
Zero Day Initiative
Zero Day Initiative
added 2014/04/08 12:0 a.m.26 views

SolarWinds Firewall Security Manager FSMWebService Information Disclosure Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SolarWinds Firewall Security Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the FSMWebService service. The issue lies within the...

7.8CVSS7.7AI score
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2014/01/10 12:0 a.m.27 views

Hewlett-Packard Data Protector Backup Client Service rbda Remote Code Execution Vulnerability

This vulnerability allows remote attackers directory traversal on vulnerable installations of HP OpenView Data Protector. Authentication is not required to exploit this vulnerability. This specific flaw exists in the Backup Client Service OmniInet.exe. The Backup Client Service listens on TCP por...

10CVSS6AI score0.10436EPSS
Exploits1References1
Zero Day Initiative
Zero Day Initiative
added 2014/01/10 12:0 a.m.21 views

Hewlett-Packard Data Protector Backup Client Service rrda Remote Code Execution Vulnerability

This vulnerability allows remote attackers directory traversal on vulnerable installations of HP OpenView Data Protector. Authentication is not required to exploit this vulnerability. This specific flaw exists in the Backup Client Service OmniInet.exe. The Backup Client Service listens on TCP por...

10CVSS5.7AI score0.10436EPSS
Exploits1References1
Zero Day Initiative
Zero Day Initiative
added 2014/01/10 12:0 a.m.37 views

Hewlett-Packard Data Protector Backup Client Service RxNtSetup Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute remote code on vulnerable installations of HP Data Protector. Authentication is not required to exploit this vulnerability. This specific flaw exists in the Backup Client Service OmniInet.exe. The Backup Client Service listens on TCP port 5555...

10CVSS5.5AI score0.10436EPSS
Exploits1References1
Zero Day Initiative
Zero Day Initiative
added 2014/01/10 12:0 a.m.66 views

Hewlett-Packard Data Protector Backup Client Service vrda Remote Code Execution Vulnerability

This vulnerability allows remote attackers directory traversal on vulnerable installations of HP OpenView Data Protector. Authentication is not required to exploit this vulnerability. This specific flaw exists in the Backup Client Service OmniInet.exe. The Backup Client Service listens on TCP por...

10CVSS5.6AI score0.10436EPSS
Exploits1References1
Zero Day Initiative
Zero Day Initiative
added 2014/01/10 12:0 a.m.666 views

Hewlett-Packard Data Protector Backup Client Service Opcode 45 and 46 Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute remote code on vulnerable installations of HP Data Protector. Authentication is not required to exploit this vulnerability. This specific flaw exists in the Backup Client Service OmniInet.exe. The Backup Client Service listens on TCP port 5555...

10CVSS5.9AI score0.10436EPSS
Exploits1References1
Zero Day Initiative
Zero Day Initiative
added 2014/01/10 12:0 a.m.34 views

Hewlett-Packard Data Protector Backup Client Service EXEC_BAR Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute remote code on vulnerable installations of HP Data Protector. Authentication is not required to exploit this vulnerability. This specific flaw exists in the Backup Client Service OmniInet.exe. The Backup Client Service listens on TCP port 5555...

10CVSS5.4AI score0.66409EPSS
Exploits14References1
Zero Day Initiative
Zero Day Initiative
added 2014/01/10 12:0 a.m.75 views

Hewlett-Packard Data Protector Backup Client Service vbda Remote Code Execution Vulnerability

This vulnerability allows remote attackers directory traversal on vulnerable installations of HP OpenView Data Protector. Authentication is not required to exploit this vulnerability. This specific flaw exists in the Backup Client Service OmniInet.exe. The Backup Client Service listens on TCP por...

10CVSS5.6AI score0.10436EPSS
Exploits1References1
Zero Day Initiative
Zero Day Initiative
added 2013/11/24 12:0 a.m.37 views

HP SiteScope issueSiebelCmd SOAP Request Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP SiteScope. Authentication is not required to exploit this vulnerability. The specific flaw exists within the issueSiebelCmd web method. A remote attacker can abuse this web method in order to...

10CVSS3.1AI score0.71003EPSS
Exploits5References1
Zero Day Initiative
Zero Day Initiative
added 2013/11/24 12:0 a.m.29 views

Cisco Data Center Network Manager fileUploadServlet Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco Data Center Network Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the FileUploadServlet. Multiple arguments of a multipart form reques...

10CVSS5.6AI score0.75962EPSS
Exploits6References1
Zero Day Initiative
Zero Day Initiative
added 2013/10/16 12:0 a.m.26 views

PANDA Security Communications Agent Service Pagent.exe 'MESSAGE_FROM_REMOTE' Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of PANDA Security for Business Communications. Authentication is not required to exploit this vulnerability. The specific flaw exists within the 'Panda AdminSecure Communications Agent' Pagent.exe whi...

10CVSS7.9AI score
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2013/10/16 12:0 a.m.32 views

Hewlett-Packard Intelligent Management Center BIMS UploadServlet Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard Intelligent Management Center. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UploadServlet in the Branch Intelligent Management...

10CVSS5.1AI score0.62617EPSS
Exploits5References1
Check Point Advisories
Check Point Advisories
added 2013/10/13 12:0 a.m.37 views

Microsoft Windows RAS Manager Registry Corruption (CVE-2006-2371)

A buffer overflow vulnerability has been reported in Microsoft Routing and Remote Access Service. The flaw is caused by improper boundary checking of user-supplied data to the Routing and Remote Access service. A remote attacker may leverage this vulnerability by sending a crafted request to the...

7.5CVSS7.5AI score0.22597EPSS
Exploits6
Saint
Saint
added 2013/10/03 12:0 a.m.52 views

HP ProCurve Manager SNAC UpdateCertificatesServlet FileName Vulnerability

Added: 10/03/2013 CVE: CVE-2013-4812 BID: 62348 OSVDB: 97155 Background HP ProCurve Manager PCM is a secure, advanced Windows-based network management platform that allows administrators to configure, update, monitor, and troubleshoot ProCurve devices centrally. Problem The SNAC registration serv...

10CVSS7.1AI score0.51903EPSS
Exploits10
Zero Day Initiative
Zero Day Initiative
added 2013/09/11 12:0 a.m.72 views

HP PCM+ and Application Lifecycle Management JBoss Invoker Servlets Marshalled Object Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP PCM Plus and Application Lifecycle Management. Authentication is not required to exploit this vulnerability. The specific flaw exists within the exposed EJBInvokerServlet and JMXInvokerServlet. ...

10CVSS5AI score0.79003EPSS
Exploits5References2
Zero Day Initiative
Zero Day Initiative
added 2013/09/11 12:0 a.m.33 views

HP PCM+ AgentController Servlet Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP PCM Plus. Authentication is not required to exploit this vulnerability. The specific flaws exist within the Agent servlet. This servlet is vulnerable to a command injection vulnerability when...

10CVSS3.9AI score0.08507EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2013/09/11 12:0 a.m.38 views

HP PCM+ SNAC Registration Server UpdateCertificatesServlet Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP PCM Plus. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UpdateCertificatesServlet. This servlet improperly sanitizes the 'fileName' argument...

10CVSS4.1AI score0.51903EPSS
Exploits10References1
Zero Day Initiative
Zero Day Initiative
added 2013/09/11 12:0 a.m.37 views

HP PCM+ SNAC Registration Server UpdateDomainControllerServlet Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP PCM Plus. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UpdateDomainControllerServlet. This servlet improperly sanitizes the 'adCert' argument...

10CVSS6.5AI score0.71293EPSS
Exploits6
Rows per page
Query Builder