Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
secure remote services vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2015-0543
EMC Secure Remote Services Virtual Edition (ESRS VE) 3.x prior to 3.06 does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle malicious users to spoof servers and obtain sensitive information via a crafted certificate.
Emc Secure Remote Services 3.03
Emc Secure Remote Services 3.04
Emc Secure Remote Services 3.02
4.3
CVSSv3
CVE-2015-6852
Directory traversal vulnerability in the API in EMC Secure Remote Services Virtual Edition 3.x prior to 3.10 allows remote authenticated users to read log files via a crafted parameter.
Emc Secure Remote Services 3.03
Emc Secure Remote Services 3.0
Emc Secure Remote Services 3.02
NA
CVE-2015-0544
EMC Secure Remote Services Virtual Edition (ESRS VE) 3.x prior to 3.06 does not properly generate random values for session cookies, which makes it easier for remote malicious users to hijack sessions by predicting a value.
Emc Secure Remote Services 3.03
Emc Secure Remote Services 3.04
Emc Secure Remote Services 3.02
NA
CVE-2015-0525
The Gateway Provisioning service in EMC Secure Remote Services Virtual Edition (ESRS VE) 3.02 and 3.03 allows remote malicious users to execute arbitrary OS commands via unspecified vectors.
Emc Secure Remote Services 3.02
Emc Secure Remote Services 3.03
NA
CVE-2015-0524
SQL injection vulnerability in the Gateway Provisioning service in EMC Secure Remote Services Virtual Edition (ESRS VE) 3.02 and 3.03 allows remote malicious users to execute arbitrary SQL commands via unspecified vectors.
Emc Secure Remote Services 3.02
Emc Secure Remote Services 3.03
7.8
CVSSv3
CVE-2018-11079
Dell EMC Secure Remote Services, versions before 3.32.00.08, contains a Plaintext Password Storage vulnerability. Database credentials are stored in plaintext in a configuration file. An authenticated malicious user with access to the configuration file may obtain the exposed pas...
Emc Secure Remote Services
7.8
CVSSv3
CVE-2018-11080
Dell EMC Secure Remote Services, versions before 3.32.00.08, contains Improper File Permission Vulnerabilities. The application contains multiple configuration files with world-readable permissions that could allow an authenticated malicious user to utilize the file contents to p...
Emc Secure Remote Services
5.3
CVSSv3
CVE-2017-4986
EMC ESRS VE 3.18 or earlier contains Authentication Bypass that could potentially be exploited by malicious users to compromise the affected system.
Emc Secure Remote Services 3.18
5.5
CVSSv3
CVE-2018-15765
Dell EMC Secure Remote Services, versions before 3.32.00.08, contains an Information Exposure vulnerability. The log file contents store sensitive data including executed commands to generate authentication tokens which may prove useful to an attacker for crafting malicious authe...
Dell Emc Secure Remote Services
NA
CVE-2015-4219
Cisco Secure Access Control System prior to 5.4(0.46.2) and 5.5 prior to 5.5(0.46) and Cisco Identity Services Engine 1.0(4.573) do not properly implement access control for support bundles, which allows remote authenticated users to obtain sensitive information via brute-force a...
Cisco Secure Access Control System
Cisco Secure Access Control System 5.3.0.40.5
Cisco Identity Services Engine Software 1.0.4.573
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-32976
CVE-2024-33557
CVE-2024-36801
CVE-2024-35654
authentication bypass
CVE-2024-24919
CSRF
code execution
CVE-2024-27348
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
5
6
NEXT »