Alt-N MDaemon WebAdmin Unsupported Version Detection

According to its self-reported version number, the installation of MDaemon WebAdmin running on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities...

CVE-2016-6338

ovirt-engine-webadmin, as used in Red Hat Enterprise Virtualization Manager aka RHEV-M for Servers and RHEV-M 4.0, allows physically proximate attackers to bypass a webadmin session timeout restriction via vectors related to UI selections, which trigger repeating queries...

Design/Logic Flaw

ovirt-engine-webadmin, as used in Red Hat Enterprise Virtualization Manager aka RHEV-M for Servers and RHEV-M 4.0, allows physically proximate attackers to bypass a webadmin session timeout restriction via vectors related to UI selections, which trigger repeating queries...

CVE-2016-6338

ovirt-engine-webadmin, as used in Red Hat Enterprise Virtualization Manager aka RHEV-M for Servers and RHEV-M 4.0, allows physically proximate attackers to bypass a webadmin session timeout restriction via vectors related to UI selections, which trigger repeating queries...

CVE-2016-6338

ovirt-engine-webadmin, as used in Red Hat Enterprise Virtualization Manager aka RHEV-M for Servers and RHEV-M 4.0, allows physically proximate attackers to bypass a webadmin session timeout restriction via vectors related to UI selections, which trigger repeating queries...

CVE-2016-6338

The CVE-2016-6338 issue affects ovirt-engine-webadmin (used by Red Hat Enterprise Virtualization Manager, RHEV-M, and RHEV-M 4.0). Root cause: webadmin session timeouts not properly enforced, enabling bypass via UI-driven actions that trigger repeating queries. Impact: potential session hijack/by...

CVE-2016-6338: Improper Access Control

ovirt-engine-webadmin, as used in Red Hat Enterprise Virtualization Manager aka RHEV-M for Servers and RHEV-M 4.0, allows physically proximate attackers to bypass a webadmin session timeout restriction via vectors related to UI selections, which trigger repeating queries...

CVE-2016-6080

The WebAdmin context for WebSphere Message Broker allows directory listings which could disclose sensitive information to the attacker...

Directory traversal

The WebAdmin context for WebSphere Message Broker allows directory listings which could disclose sensitive information to the attacker...

CVE-2016-6080

The WebAdmin context for WebSphere Message Broker allows directory listings which could disclose sensitive information to the attacker...

CVE-2016-6080

CVE-2016-6080 affects WebSphere Message Broker (WebAdmin) on WebSphere Message Broker v8. The vulnerability allows directory listings via the WebAdmin context, potentially disclosing sensitive information. IBM’s security bulletin confirms the issue and provides a remediation: apply APAR IT16698 i...

CVE-2016-6080: Exposure of Sensitive Information to an Unauthorized Actor

The WebAdmin context for WebSphere Message Broker allows directory listings which could disclose sensitive information to the attacker...

PT-2017-8881

Name of the Vulnerable Software and Affected Versions WebSphere Message Broker affected versions not specified Description The issue allows directory listings in the WebAdmin context, potentially disclosing sensitive information to attackers. Recommendations At the moment, there is no information...

IBM WebSphere Message Broker Information Disclosure Vulnerability (CNVD-2016-11964)

IBM WebSphere Message Broker now known as IBM Integration Bus is an enterprise service bus ESB product from IBM, USA. The product provides connectivity and common data transformations for Service Oriented Architecture SOA environments and non-SOA environments. A security vulnerability exists in...

GE Healthcare Centricity Image Vault Trust Management Vulnerability

GE Healthcare Centricity Image Vault is a library of Vivid cardiovascular ultrasound images from General Electric GE for the healthcare industry. A security vulnerability exists in GE Healthcare Centricity Image Vault version 3.x, which stems from the use of 'gemnet' as password for the...

CVE-2004-2777: Undefined Security Weakness

GE Healthcare Centricity Image Vault 3.x has a password of 1 gemnet for the administrator account, 2 webadmin for the webadmin administrator account of the ASACA DVD library, 3 an empty value for the gemsservice account of the Ultrasound Database, and possibly 4 gemnet2002 for the gemnet2002...

PT-2015-3460

Name of the Vulnerable Software and Affected Versions GE Healthcare Centricity Image Vault versions 3.x Description The issue concerns hardcoded or default passwords for various accounts in the system. Specifically, the passwords are: gemnet for the administrator account, webadmin for the webadmi...

CodeMeter < 5.20 Local Privilege Escalation Vulnerability

According to its self-reported version, the CodeMeter WebAdmin server installed on the remote host is prior to 5.20a 5.20.1458.500. It is affected by insecure read/write permissions for the 'codemeter.exe' service, which a local attacker can exploit to gain elevated privileges via a trojan horse...

AltN WebAdmin USER Buffer Overflow - Ver2 (CVE-2003-0471)

A buffer overflow vulnerability has been reported in Alt-N Webadmin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

VamCart 0.9 - CSRF Vulnerability

No description provided by source. Exploit Title: VamCart v0.9 CSRF Vulnerability Date: 20/08/2012 Author: DaOne Software Link: http://vamcart.googlecode.com/files/vamcart.zip Greetings to: LCA CSRF Add Admin: html body onload=document.form0.submit; form method=POST name=form0...