CVE-2016-4371

HPE Service Manager Software 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote authenticated users to obtain sensitive information, modify data, and conduct server-side request forgery SSRF attacks via unspecified vectors, related to the Server, Web Client, Windows Client, and...

Server side request forgery (ssrf)

HPE Service Manager Software 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote authenticated users to obtain sensitive information, modify data, and conduct server-side request forgery SSRF attacks via unspecified vectors, related to the Server, Web Client, Windows Client, and...

FTPShell client buffer overflow vulnerability

FTPShell client is a file transfer program for windows platform. A cache overflow entry exists in the input field 'Address' used to connect to an FTP server in the FTPShell.exe client. The vulnerability is exploited to execute arbitrary local commands by overwriting multiple stack registers and...

Idera Up.time agent for Windows Information Disclosure Vulnerability

Idera Up.time client for Windows is a Windows-based infrastructure performance monitoring software client from Idera Corporation. An information disclosure vulnerability exists in Idera Up.time client for Windows 7.6 and earlier. A remote attacker can exploit this vulnerability by sending built-i...

Idera Up.time agent for Windows buffer overflow vulnerability

Idera Up.time client for Windows is a Windows-based infrastructure performance monitoring software client from Idera Corporation. A buffer overflow vulnerability exists in Idera Up.time client for Windows version 7.2. A remote attacker can exploit this vulnerability by sending commands with large...

IBM i Access for Windows Local Buffer Overflow Vulnerability

IBM i Access for Windows is a suite of client solutions from IBM in the United States that provide access to and use of desktop resources from a variety of different Windows operating systems. A local buffer overflow vulnerability exists in IBM i Access for Windows, which could be exploited by an...

IBM i Access for Windows Local Denial of Service Vulnerability

IBM i Access for Windows is a suite of client solutions from IBM in the United States that provide access to and use of desktop resources from a variety of different Windows operating systems. A local denial of service vulnerability exists in IBM i Access for Windows, which can be exploited by an...

CVE-2008-3493

vncviewer.exe in RealVNC Windows Client 4.1.2.0 allows remote VNC servers to cause a denial of service application crash via a crafted frame buffer update packet...

Cisco AnyConnect Secure Mobility Client Search Path Handling Vulnerability

The Cisco AnyConnect Secure Mobility Client is a set of next-generation VPN clients. The client enables remote users to securely connect to Cisco ASA 5500 devices over SSL VPN. The 'CMainThread::launchDownloader' function in the vpndownloader.exe file of the Cisco AnyConnect Secure Mobility Clien...

Microsoft Internet Explorer 缓冲区溢出漏洞 ms15-093

当 Internet Explorer 不正确地访问内存中的对象时，存在远程执行代码漏洞。此漏洞可能以一种攻击者可以在当前用户的上下文中执行任意代码的方式损坏内存。攻击者可能拥有一个旨在通过 Internet Explorer 利用此漏洞的经特殊设计的网站，然后诱使用户查看该网站，则该漏洞可能允许远程执行代码。成功利用此漏洞的攻击者可以获得与当前用户相同的用户权限。如果当前用户使用管理用户权限登录，成功利用此漏洞的攻击者便可完全控制受影响的系统。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。频繁使用 Internet Explorer...

[security bulletin] HPSBGN03386 rev.1 - HP Central View Fraud Risk Management, Revenue Leakage Control, Dealer Performance Audit, Credit Risk Control, Roaming Fraud Control, Subscription Fraud Prevention, Remote Disclosure of Information, Local Discl

Note: the current version of the following document is available here: https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04751893 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04751893 Version: 1 HPSBGN03386 rev.1 - HP Central View Fraud Risk Management,...

SAP Afaria 'XeService.exe' Insecure File Permissions Vulnerability

SAP Afaria is a mobile device management and security solution. A security vulnerability exists in the Windows client of SAP Afaria version 7.0.6398.0, which can be exploited by a local attacker to gain privileges with the help of the Trojan horse XeService.exe file...

CVE-2015-3449

The Windows client in SAP Afaria 7.0.6398.0 uses weak permissions Everyone: read and Everyone: write for the install folder, which allows local users to gain privileges via a Trojan horse XeService.exe file...

Code injection

The Windows client in SAP Afaria 7.0.6398.0 uses weak permissions Everyone: read and Everyone: write for the install folder, which allows local users to gain privileges via a Trojan horse XeService.exe file...

CVE-2015-3449

The CVE-2015-3449 entry concerns the Windows client of SAP Afaria 7.0.6398.0. A root cause is insecure/permissive file permissions on the install folder (Everyone: read and Everyone: write), which enables a local attacker to gain privileges via a Trojan horse XeService.exe file. This describes a ...

Soreco AG Xpert.Line 3.0 Authentication Bypass

COMPASS SECURITY ADVISORY http://www.csnc.ch/en/downloads/advisories.html Product: Xpert.Line Vendor: Soreco AG 1 CVE ID: CVE-2015-3442 Subject: Authentication Bypass Risk: Critical Effect: Remotely exploitable Author: Alessandro Zala [email protected] Andreas Hunkeler...

IT-Grundschutz M4.244: Sichere Systemkonfiguration von Windows Client-Betriebssystemen.

IT-Grundschutz M4.244: Sichere Systemkonfiguration von Windows Client-Betriebssystemen. Stand: 15. Ergnzungslieferung 15. EL. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

IT-Grundschutz M4.146: Sicherer Betrieb von Windows Client-Betriebssystemen

IT-Grundschutz M4.146: Sicherer Betrieb von Windows Client-Betriebssystemen. Stand: 14. Ergaenzungslieferung 14. EL. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

IT-Grundschutz M4.244: Sichere Systemkonfiguration von Windows Client-Betriebssystemen.

IT-Grundschutz M4.244: Sichere Systemkonfiguration von Windows Client-Betriebssystemen. Stand: 15. Ergänzungslieferung 15. EL. OpenVAS Vulnerability Test $Id: GSHBM4244.nasl 7883 2017-11-23 11:22:59Z emoss $ IT-Grundschutz, 15. EL, Maßnahme 4.244 Authors: Thomas Rotter Copyright: Copyright c 2015...

IT-Grundschutz M4.249: Windows Client-Systeme aktuell halten

IT-Grundschutz M4.249: Windows Client-Systeme aktuell halten. Stand: 14. Ergänzungslieferung 14. EL. OpenVAS Vulnerability Test $Id: GSHBM4249.nasl 7883 2017-11-23 11:22:59Z emoss $ IT-Grundschutz, 14. EL, Maßnahme 4.249 Authors: Thomas Rotter Copyright: Copyright c 2015 Greenbone Networks GmbH,...