501 matches found
CVE-2017-7307
Riverbed RiOS before 9.0.1 does not properly restrict shell access in single-user mode, which makes it easier for physically proximate attackers to obtain root privileges and access decrypted data by replacing the /opt/tms/bin/cli file...
CVE-2017-7307: Incorrect Permission Assignment for Critical Resource
Riverbed RiOS before 9.0.1 does not properly restrict shell access in single-user mode, which makes it easier for physically proximate attackers to obtain root privileges and access decrypted data by replacing the /opt/tms/bin/cli file...
PT-2017-17653
Name of the Vulnerable Software and Affected Versions Riverbed RiOS versions prior to 9.0.1 Description The issue makes it easier for physically proximate attackers to obtain root privileges and access decrypted data by replacing the /opt/tms/bin/cli file, due to improper restriction of shell...
益用TMS在线培训系统mood/xinqing.aspx id参数SQL注入漏洞
No description provided by source...
益用TMS content_show.aspx contentid 参数SQL注射
No description provided by source...
CVE-2015-0620
CVE-2015-0620 concerns the Cisco TelePresence Management Suite (TMS) XML parser. Affected versions are TMS 14.3(.2) and earlier. The root cause is improper handling of XML external entities, enabling a remote authenticated attacker to cause a denial of service by submitting specially crafted POST...
Cisco TelePresence Management Suite XML Vulnerability
A vulnerability in the configuration of the XML parser of the Cisco TelePresence Management Suite TMS could allow an authenticated, remote attacker to cause a denial of service condition. The vulnerability is due to improper handling of XML external entities. An attacker could exploit this...
CVE-2013-1229
Cisco TelePresence Management Suite (TMS) on 64-bit servers exposes TMSSNMPService.exe to denial of service via crafted SNMP traps (Bug ID CSCue00028). The issue affects the 64-bit SNMP server component and is triggered by specific SNMP trap input, leading to a process crash. Cisco’s advisory not...
CVE-2013-1229
TMSSNMPService.exe in TelePresence Manager in Cisco TelePresence Management Suite TMS on 64-bit platforms allows remote attackers to cause a denial of service process crash via SNMP traps, aka Bug ID CSCue00028...
CVE-2013-1229: Improper Input Validation
TMSSNMPService.exe in TelePresence Manager in Cisco TelePresence Management Suite TMS on 64-bit platforms allows remote attackers to cause a denial of service process crash via SNMP traps, aka Bug ID CSCue00028...
PT-2013-2992
Name of the Vulnerable Software and Affected Versions Cisco TelePresence Management Suite TMS affected versions not specified Description The issue allows remote attackers to cause a denial of service, resulting in a process crash, via SNMP traps. Recommendations At the moment, there is no...
Code injection
Unspecified vulnerability in the Health Sciences - Oracle Thesaurus Management System component in Oracle Industry Applications 4.6.1 and 4.6.2 allows remote attackers to affect integrity, related to TMS Help...
CVE-2011-2323
Unspecified vulnerability in the Health Sciences - Oracle Thesaurus Management System component in Oracle Industry Applications 4.6.1 and 4.6.2 allows remote attackers to affect integrity, related to TMS Help...
CVE-2011-2323
Unspecified vulnerability in the Health Sciences - Oracle Thesaurus Management System component in Oracle Industry Applications 4.6.1 and 4.6.2 allows remote attackers to affect integrity, related to TMS Help...
PT-2011-3774
Name of the Vulnerable Software and Affected Versions Oracle Industry Applications versions 4.6.1 through 4.6.2 Description The issue affects the integrity of the system, related to TMS Help in the Health Sciences - Oracle Thesaurus Management System component. Recommendations For versions 4.6.1...
CVE-2011-2323: Undefined Security Weakness
Unspecified vulnerability in the Health Sciences - Oracle Thesaurus Management System component in Oracle Industry Applications 4.6.1 and 4.6.2 allows remote attackers to affect integrity, related to TMS Help...
Design/Logic Flaw
Unspecified vulnerability in the Life Sciences - Oracle Thesaurus Management System component in Oracle Industry Product Suite 4.5.2, 4.6, and 4.6.1 allows remote attackers to affect integrity, related to TMS Browser...
CVE-2010-0875
Unspecified vulnerability in the Life Sciences - Oracle Thesaurus Management System component in Oracle Industry Product Suite 4.5.2, 4.6, and 4.6.1 allows remote attackers to affect integrity, related to TMS Browser...
CVE-2010-0875: Undefined Security Weakness
Unspecified vulnerability in the Life Sciences - Oracle Thesaurus Management System component in Oracle Industry Product Suite 4.5.2, 4.6, and 4.6.1 allows remote attackers to affect integrity, related to TMS Browser...
CVE-2004-2193
The CVE-2004-2193 issue affects CJOverkill’s trade.php (versions older than 4.0.4) with a cross-site scripting (XSS) vulnerability. The flaw arises from insufficient sanitization of user-supplied input, enabling remote attackers to inject script via the tms[0] or url parameters. OpenVAS entries c...