261 matches found
The vulnerability of the Enterprise Resource Management System “Galaktika ERP” allows a perpetrator to execute arbitrary codes.
The vulnerability of the “Update Manager” component of the enterprise resource management system Galaktika ERP is related to the lack of protection for transmitted data. Exploiting this vulnerability allows a malicious actor, who operates remotely and has access to the update server, to execute...
HP Smart Update Manager Remote Unauthorized Access.
The HPE Smart Update manager running on the remote host is affected by an authentication bypass vulnerability. An unauthenticated, remote attacker can exploit this, via a specially crafted request, to bypass authentication and execute arbitrary actions defined by the application. C Tenable Networ...
HPE Smart Update Manager Security Feature Issue Vulnerability
HPE Smart Update Manager SUM is a smart update manager from Hewlett Packard Enterprise HPE, USA. It is used to install and update firmware and software components on HP ProLiant and HP Integrity servers, chassis, and options. A security feature issue vulnerability exists in versions of HPE SUM...
CVE-2019-11988
A Remote Unauthorized Access vulnerability was identified in HPE Smart Update Manager SUM earlier than version 8.3.5...
CVE-2019-11988
A Remote Unauthorized Access vulnerability was identified in HPE Smart Update Manager SUM earlier than version 8.3.5...
Privilege escalation
A security vulnerability in HPE Smart Update Manager SUM prior to v8.4 could allow local unauthorized elevation of privilege...
CVE-2019-11987
A security vulnerability in HPE Smart Update Manager SUM prior to v8.4 could allow local unauthorized elevation of privilege...
Design/Logic Flaw
A Remote Unauthorized Access vulnerability was identified in HPE Smart Update Manager SUM earlier than version 8.3.5...
CVE-2019-11988
CVE-2019-11988 affects HPE Smart Update Manager (SUM) prior to version 8.3.5. The vulnerability is a Remote Unauthorized Access flaw caused by an authentication bypass that allows an unauthenticated, remote attacker to bypass login and perform arbitrary actions in SUM. The NVD entry lists high/cr...
CVE-2019-11988
A Remote Unauthorized Access vulnerability was identified in HPE Smart Update Manager SUM earlier than version 8.3.5...
CVE-2019-11987
A security vulnerability in HPE Smart Update Manager SUM prior to v8.4 could allow local unauthorized elevation of privilege...
CVE-2019-11987
CVE-2019-11987 affects HPE Smart Update Manager (SUM) prior to v8.4. The vulnerability allows local unauthorized elevation of privilege due to insufficient authentication/authorization and privilege management. Affected component is SUM’s update/management workflow on HP ProLiant servers. Impact ...
CVE-2019-11988: Undefined Security Weakness
A Remote Unauthorized Access vulnerability was identified in HPE Smart Update Manager SUM earlier than version 8.3.5...
CVE-2019-11987: Undefined Security Weakness
A security vulnerability in HPE Smart Update Manager SUM prior to v8.4 could allow local unauthorized elevation of privilege...
Configuration Update Manager - Moderately critical - Cross Site Request Forgery (CSRF) - SA-CONTRIB-2017-091
The Configuration Update Reports sub-module in the Configuration Update module project enables you to run reports to see what configuration on your site differs from the configuration distributed by a module, theme, or installation profile, and to revert, delete, or import configuration. This...
The vulnerability of the Avira Management Console allows a hacker to execute arbitrary code.
The vulnerability of the Update Manager service in the Avira Management Console relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Avira Management Console Server HTTP Header Processing Heap Buffer Overflow
A heap buffer overflow vulnerability has been reported in Avira Management Console Server. The vulnerability exists in the way Update Manager Service handles overly long HTTP headers. A remote unauthenticated attacker could exploit this vulnerability by sending crafted HTTP requests to the server...
Avira Management Console Memory Misreference Vulnerability
Avira Management Console provides centralized and effective control of Avira security components. A memory misreference vulnerability exists in the Avira Management Console's Update Manager service, which can be exploited by a remote attacker to execute arbitrary code...