Tenable Research

The HP Client Automation / Accelerite Endpoint Management 9.00 core server is a central management server that sends user credentials in cleartext during agent deployment, to remote agents listening via the HPCA Management Agent (nvdkit.exe), running on TCP port 3463. This may allow an attacker with privileged network position (e.g.

CODESYS Runtime, a runtime system that "turns any embedded or PC based device into a full-fledged IEC 61131-3 controller", is vulnerable to a remote denial of service attack. The issue is due to the PLCWinNT Runtime service that runs on TCP port 1200 not properly sanitizing user-supplied input.

Microsoft Windows 2008 and Vista (and possible Windows 2003) contain a buffer overflow condition in the SMB v1 functionality.

Novell ZENworks Configuration Management (ZCM)contains a flaw that allows traversing outside of a restricted path. The issue is due to the PreBoot service not properly sanitizing user input, specifically path traversal style attacks (e.g. '../')]. With a specially crafted request, a remote attacker can read arbitrary files.

Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 9.0 before Update 12, 9.0.1 before Update 11, 9.0.2 before Update 6, and 10 before Update 12, when the CFIDE directory is available, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to the logviewer directory.