CVE-2014-2389: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in a certain decryption function in qconnDoor on BlackBerry Z10 devices with software 10.1.0.2312, when developer-mode has been previously enabled, allows remote attackers to execute arbitrary code via a crafted packet in a TCP session on a wireless network...

Authentication flaw

The Adaptive Security Device Management ASDM remote-management feature in Cisco Adaptive Security Appliance ASA Software 8.2.x before 8.25.46, 8.3.x before 8.32.39, 8.4.x before 8.46, 8.5.x before 8.51.18, 8.6.x before 8.61.12, 8.7.x before 8.71.7, 9.0.x before 9.03.1, and 9.1.x before 9.12.6 doe...

CVE-2013-5511

CVE-2013-5511 affects Cisco ASA/ASDM: the authentication-certificate option is not properly implemented, allowing remote attackers to bypass authentication via a TCP session to an ASDM interface. Affected ASA Software versions include 8.2.x up to 8.2(5.46), 8.3.x up to 8.3(2.39), 8.4.x up to 8.4(...

Debian DSA-2664-1 : stunnel4 - buffer overflow

Stunnel, a program designed to work as an universal SSL tunnel for network daemons, is prone to a buffer overflow vulnerability when using the Microsoft NT LAN Manager NTLM authentication 'protocolAuthentication = NTLM' together with the 'connect'protocol method 'protocol = connect'. With these...

stunnel -- Remote Code Execution

Michal Trojnara reports: 64-bit versions of stunnel with the following conditions: NTLM authentication enabled CONNECT protocol negotiation enabled Configured in SSL client mode An attacker that can either control the proxy server specified in the "connect" option or execute MITM attacks on the T...

MS IE Information Disclosure and Web Site Spoofing Vulnerabilities

This host is installed with Microsoft Internet Explorer and is prone to information disclosure and web site spoofing vulnerabilities. OpenVAS Vulnerability Test $Id: gbmsieinfodiscnspoofvuln.nasl 6104 2017-05-11 09:03:48Z teissa $ MS IE Information Disclosure and Web Site Spoofing Vulnerabilities...

Default credentials

WAGO I/O System 758 model 758-870, 758-874, 758-875, and 758-876 Industrial PC IPC devices have default passwords for unspecified Web Based Management accounts, which makes it easier for remote attackers to obtain administrative access via a TCP session...

CVE-2012-3013

CVE-2012-3013 affects WAGO I/O System 758 family Industrial PCs (models 758-870, 758-874, 758-875, 758-876). The issue is caused by default passwords for unspecified Web-Based Management accounts, enabling remote attackers to obtain administrative access over TCP. Connected Red Hat records refere...

PT-2012-4437

Name of the Vulnerable Software and Affected Versions WAGO I/O System 758 model versions 758-870, 758-874, 758-875, and 758-876 Description The issue allows remote attackers to obtain administrative access via a TCP session due to default passwords for Web Based Management accounts. Recommendatio...

CVE-2012-3013: Undefined Security Weakness

WAGO I/O System 758 model 758-870, 758-874, 758-875, and 758-876 Industrial PC IPC devices have default passwords for unspecified Web Based Management accounts, which makes it easier for remote attackers to obtain administrative access via a TCP session...

Sql injection

The MySQL component in Plixer Scrutinizer aka Dell SonicWALL Scrutinizer 9.0.1.19899 and earlier has a default password of admin for the 1 scrutinizer and 2 scrutremote accounts, which allows remote attackers to execute arbitrary SQL commands via a TCP session...

CVE-2012-3951: Improper Neutralization of Special Elements used in an SQL Command

The MySQL component in Plixer Scrutinizer aka Dell SonicWALL Scrutinizer 9.0.1.19899 and earlier has a default password of admin for the 1 scrutinizer and 2 scrutremote accounts, which allows remote attackers to execute arbitrary SQL commands via a TCP session...

CVE-2012-2632

SEIL routers with firmware SEIL/x86 1.00 through 2.35, SEIL/X1 2.30 through 3.75, SEIL/X2 2.30 through 3.75, and SEIL/B1 2.30 through 3.75, when the http-proxy and application-gateway features are enabled, do not properly handle the CONNECT command, which allows remote attackers to bypass intende...

Design/Logic Flaw

SEIL routers with firmware SEIL/x86 1.00 through 2.35, SEIL/X1 2.30 through 3.75, SEIL/X2 2.30 through 3.75, and SEIL/B1 2.30 through 3.75, when the http-proxy and application-gateway features are enabled, do not properly handle the CONNECT command, which allows remote attackers to bypass intende...

CVE-2012-2632

SEIL routers with firmware SEIL/x86 1.00 through 2.35, SEIL/X1 2.30 through 3.75, SEIL/X2 2.30 through 3.75, and SEIL/B1 2.30 through 3.75, when the http-proxy and application-gateway features are enabled, do not properly handle the CONNECT command, which allows remote attackers to bypass intende...

CVE-2012-2632

CVE-2012-2632 affects SEIL routers with firmware SEIL/x86 1.00–2.35, SEIL/X1 2.30–3.75, SEIL/X2 2.30–3.75, and SEIL/B1 2.30–3.75. The vulnerability arises from improper handling of the CONNECT command when http-proxy and application-gateway features are enabled, allowing remote attackers to bypas...

PT-2012-4144

Name of the Vulnerable Software and Affected Versions SEIL routers versions SEIL/x86 1.00 through 2.35 SEIL/X1 versions 2.30 through 3.75 SEIL/X2 versions 2.30 through 3.75 SEIL/B1 versions 2.30 through 3.75 Description The issue arises when the http-proxy and application-gateway features are...

CVE-2012-2632: Undefined Security Weakness

SEIL routers with firmware SEIL/x86 1.00 through 2.35, SEIL/X1 2.30 through 3.75, SEIL/X2 2.30 through 3.75, and SEIL/B1 2.30 through 3.75, when the http-proxy and application-gateway features are enabled, do not properly handle the CONNECT command, which allows remote attackers to bypass intende...

Memory corruption

PRRDS.exe in the Proficy Remote Data Service in GE Intelligent Platforms Proficy Plant Applications 5.0 and earlier allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted TCP session on port 12299...

Memory corruption

PRLicenseMgr.exe in the Proficy Server License Manager in GE Intelligent Platforms Proficy Plant Applications 5.0 and earlier allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted TCP session on port 12401...