Lucene search
+L

501 matches found

Cvelist
Cvelist
•added 2017/04/04 4:00 p.m.•42 views

CVE-2017-7307

Riverbed RiOS before 9.0.1 does not properly restrict shell access in single-user mode, which makes it easier for physically proximate attackers to obtain root privileges and access decrypted data by replacing the /opt/tms/bin/cli file...

6.5AI score0.00333EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/04/04 12:00 a.m.•3 views

CVE-2017-7307: Incorrect Permission Assignment for Critical Resource

Riverbed RiOS before 9.0.1 does not properly restrict shell access in single-user mode, which makes it easier for physically proximate attackers to obtain root privileges and access decrypted data by replacing the /opt/tms/bin/cli file...

7.2CVSS5.8AI score0.00333EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2017/04/04 12:00 a.m.•3 views

PT-2017-17653

Name of the Vulnerable Software and Affected Versions Riverbed RiOS versions prior to 9.0.1 Description The issue makes it easier for physically proximate attackers to obtain root privileges and access decrypted data by replacing the /opt/tms/bin/cli file, due to improper restriction of shell...

7.2CVSS0.00333EPSS
SaveExploits0References4
seebug.org
seebug.org
•added 2016/01/14 12:00 a.m.•32 views

益用TMS在线培训系统mood/xinqing.aspx id参数SQL注入漏洞

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2016/01/13 12:00 a.m.•33 views

益用TMS content_show.aspx contentid 参数SQL注射

No description provided by source...

7.1AI score
SaveExploits0
CVE
CVE
•added 2015/02/18 2:00 a.m.•78 views

CVE-2015-0620

CVE-2015-0620 concerns the Cisco TelePresence Management Suite (TMS) XML parser. Affected versions are TMS 14.3(.2) and earlier. The root cause is improper handling of XML external entities, enabling a remote authenticated attacker to cause a denial of service by submitting specially crafted POST...

4CVSS6.5AI score0.01254EPSS
SaveExploits0References4Affected Software1
Cisco
Cisco
•added 2015/02/16 9:45 p.m.•64 views

Cisco TelePresence Management Suite XML Vulnerability

A vulnerability in the configuration of the XML parser of the Cisco TelePresence Management Suite TMS could allow an authenticated, remote attacker to cause a denial of service condition. The vulnerability is due to improper handling of XML external entities. An attacker could exploit this...

4CVSS6.4AI score0.01254EPSS
SaveExploits0References1
CVE
CVE
•added 2013/05/01 10:00 a.m.•63 views

CVE-2013-1229

Cisco TelePresence Management Suite (TMS) on 64-bit servers exposes TMSSNMPService.exe to denial of service via crafted SNMP traps (Bug ID CSCue00028). The issue affects the 64-bit SNMP server component and is triggered by specific SNMP trap input, leading to a process crash. Cisco’s advisory not...

5CVSS6.8AI score0.01232EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2013/05/01 10:00 a.m.•27 views

CVE-2013-1229

TMSSNMPService.exe in TelePresence Manager in Cisco TelePresence Management Suite TMS on 64-bit platforms allows remote attackers to cause a denial of service process crash via SNMP traps, aka Bug ID CSCue00028...

6.6AI score0.01232EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/05/01 12:00 a.m.•4 views

CVE-2013-1229: Improper Input Validation

TMSSNMPService.exe in TelePresence Manager in Cisco TelePresence Management Suite TMS on 64-bit platforms allows remote attackers to cause a denial of service process crash via SNMP traps, aka Bug ID CSCue00028...

5CVSS5.8AI score0.01232EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2013/05/01 12:00 a.m.•4 views

PT-2013-2992

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Management Suite TMS affected versions not specified Description The issue allows remote attackers to cause a denial of service, resulting in a process crash, via SNMP traps. Recommendations At the moment, there is no...

5CVSS0.01232EPSS
SaveExploits0References2
Prion
Prion
•added 2011/10/18 11:55 p.m.•23 views

Code injection

Unspecified vulnerability in the Health Sciences - Oracle Thesaurus Management System component in Oracle Industry Applications 4.6.1 and 4.6.2 allows remote attackers to affect integrity, related to TMS Help...

4.3CVSS6.2AI score0.01334EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2011/10/18 11:55 p.m.•32 views

CVE-2011-2323

Unspecified vulnerability in the Health Sciences - Oracle Thesaurus Management System component in Oracle Industry Applications 4.6.1 and 4.6.2 allows remote attackers to affect integrity, related to TMS Help...

4.3CVSS6AI score0.01334EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2011/10/18 11:00 p.m.•42 views

CVE-2011-2323

Unspecified vulnerability in the Health Sciences - Oracle Thesaurus Management System component in Oracle Industry Applications 4.6.1 and 4.6.2 allows remote attackers to affect integrity, related to TMS Help...

6AI score0.01334EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2011/10/18 12:00 a.m.•5 views

PT-2011-3774

Name of the Vulnerable Software and Affected Versions Oracle Industry Applications versions 4.6.1 through 4.6.2 Description The issue affects the integrity of the system, related to TMS Help in the Health Sciences - Oracle Thesaurus Management System component. Recommendations For versions 4.6.1...

4.3CVSS0.01334EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/10/18 12:00 a.m.•5 views

CVE-2011-2323: Undefined Security Weakness

Unspecified vulnerability in the Health Sciences - Oracle Thesaurus Management System component in Oracle Industry Applications 4.6.1 and 4.6.2 allows remote attackers to affect integrity, related to TMS Help...

4.3CVSS6AI score0.01334EPSS
SaveExploits0References1
Prion
Prion
•added 2010/04/13 10:30 p.m.•19 views

Design/Logic Flaw

Unspecified vulnerability in the Life Sciences - Oracle Thesaurus Management System component in Oracle Industry Product Suite 4.5.2, 4.6, and 4.6.1 allows remote attackers to affect integrity, related to TMS Browser...

4.3CVSS6.5AI score0.02057EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2010/04/13 10:00 p.m.•39 views

CVE-2010-0875

Unspecified vulnerability in the Life Sciences - Oracle Thesaurus Management System component in Oracle Industry Product Suite 4.5.2, 4.6, and 4.6.1 allows remote attackers to affect integrity, related to TMS Browser...

6.1AI score0.02057EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/04/13 12:00 a.m.•3 views

CVE-2010-0875: Undefined Security Weakness

Unspecified vulnerability in the Life Sciences - Oracle Thesaurus Management System component in Oracle Industry Product Suite 4.5.2, 4.6, and 4.6.1 allows remote attackers to affect integrity, related to TMS Browser...

4.3CVSS6AI score0.02057EPSS
SaveExploits0References1
CVE
CVE
•added 2005/07/10 4:00 a.m.•60 views

CVE-2004-2193

The CVE-2004-2193 issue affects CJOverkill’s trade.php (versions older than 4.0.4) with a cross-site scripting (XSS) vulnerability. The flaw arises from insufficient sanitization of user-supplied input, enabling remote attackers to inject script via the tms[0] or url parameters. OpenVAS entries c...

4.3CVSS5.7AI score0.01444EPSS
SaveExploits1References7Affected Software1
Rows per page
Query Builder