CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2018-20034
https://notcve.org/view.php?id=CVE-2018-20034
21 Mar 2019 — A Denial of Service vulnerability related to adding an item to a list in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier allows a remote attacker to send a combination of messages to lmgrd or the vendor daemon, causing the heartbeat between lmgrd and the vendor daemon to stop, and the vendor daemon to shut down. Una vulnerabilidad de denegación de servicio (DoS) relacionada con la adición de un ítem a una lista en los componentes del demonio lmgrd y del fabricante de Fl... • http://www.securityfocus.com/bid/109155 •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2018-20032
https://notcve.org/view.php?id=CVE-2018-20032
21 Mar 2019 — A Denial of Service vulnerability related to message decoding in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier allows a remote attacker to send a combination of messages to lmgrd or the vendor daemon, causing the heartbeat between lmgrd and the vendor daemon to stop, and the vendor daemon to shut down. Una vulnerabilidad de denegación de servicio (DoS) relacionada con el descifrado de mensajes en los componentes del demonio lmgrd y del fabricante de FlexNet Publisher,... • http://www.securityfocus.com/bid/109155 •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2018-20031
https://notcve.org/view.php?id=CVE-2018-20031
21 Mar 2019 — A Denial of Service vulnerability related to preemptive item deletion in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier allows a remote attacker to send a combination of messages to lmgrd or the vendor daemon, causing the heartbeat between lmgrd and the vendor daemon to stop, and the vendor daemon to shut down. Una vulnerabilidad de denegación de servicio (DoS) relacionada con la eliminación de ítems preferentes en los componentes del demonio lmgrd y del fabricante de ... • http://www.securityfocus.com/bid/109155 •
CVSS: 9.8EPSS: 0%CPEs: 2EXPL: 0CVE-2018-20033
https://notcve.org/view.php?id=CVE-2018-20033
25 Feb 2019 — A Remote Code Execution vulnerability in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier could allow a remote attacker to corrupt the memory by allocating / deallocating memory, loading lmgrd or the vendor daemon and causing the heartbeat between lmgrd and the vendor daemon to stop. This would force the vendor daemon to shut down. No exploit of this vulnerability has been demonstrated. Una vulnerabilidad de ejecución remota de código en los componentes de lmgrd y del de... • http://www.securityfocus.com/bid/109155 • CWE-770: Allocation of Resources Without Limits or Throttling •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2016-10395
https://notcve.org/view.php?id=CVE-2016-10395
15 Jun 2017 — In FlexNet Publisher versions before Luton SP1 (11.14.1.1) running FlexNet Publisher Licensing Service on Windows platform, a boundary error related to a named pipe within the FlexNet Publisher Licensing Service can be exploited to cause an out-of-bounds memory read access and subsequently execute arbitrary code with SYSTEM privileges. En las versiones anteriores a Liton SP1 (11.14.1.1) de FlaxNet Publisher ejecutando FlaxNet Publisher Licensing Service en Windows, un error de limites relacionado al nombre ... • https://ics-cert.us-cert.gov/advisories/ICSA-18-144-01 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0CVE-2017-5571
https://notcve.org/view.php?id=CVE-2017-5571
03 Mar 2017 — Open redirect vulnerability in the lmadmin component in Flexera FlexNet Publisher (aka Flex License Manager) 11.14.1 and earlier, as used in Citrix License Server for Windows and the Citrix License Server VPX, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Vulnerabilidad de redirección abierta en el componente lmadmin en Flexera FlexNet Publisher (también conocido como Flex License Manager) 11.14.1 y versiones anteriores, como se utiliz... • http://www.securityfocus.com/bid/96028 • CWE-601: URL Redirection to Untrusted Site ('Open Redirect') •
CVSS: 10.0EPSS: 90%CPEs: 1EXPL: 1CVE-2015-8277
https://notcve.org/view.php?id=CVE-2015-8277
24 Feb 2016 — Multiple buffer overflows in (1) lmgrd and (2) Vendor Daemon in Flexera FlexNet Publisher before 11.13.1.2 Security Update 1 allow remote attackers to execute arbitrary code via a crafted packet with opcode (a) 0x107 or (b) 0x10a. Múltiples desbordamientos de buffer en (1) lmgrd y (2) Vendor Daemon en Flexera FlexNet Publisher en versiones anteriores a 11.13.1.2 Security Update 1 permite a atacantes remotos ejecutar código arbitrario a través de un paquete manipulado con código de operación (a) 0x107 o (b) ... • https://github.com/securifera/CVE-2015-8277-Exploit • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 10.0EPSS: 10%CPEs: 1EXPL: 0CVE-2011-4135
https://notcve.org/view.php?id=CVE-2011-4135
19 Jan 2012 — Multiple directory traversal vulnerabilities in lmgrd in Flexera FlexNet Publisher 11.10 (aka FlexNet License Server Manager) allow remote attackers to execute arbitrary code via vectors related to save, rename, and load operations on log files. NOTE: this might overlap CVE-2011-1389. Múltiples vulnerabilidades de salto de directorio en lmgrd en Flexera FLEXnet Publisher v11.10 (también conocido como FlexNet License Server Manager) permiten a atacantes remotos ejecutar código de su elección a través de vect... • http://kb.flexerasoftware.com/selfservice/microsites/search.do?cmd=displayKC&docType=kc&externalId=Q200975&sliceId=1 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 10.0EPSS: 3%CPEs: 1EXPL: 0CVE-2011-4134
https://notcve.org/view.php?id=CVE-2011-4134
19 Jan 2012 — Heap-based buffer overflow in lmadmin in Flexera FlexNet Publisher 11.10 (aka FlexNet License Server Manager) allows remote attackers to execute arbitrary code via a crafted 0x2f packet. Un desbordamiento de buffer basado en memoria dinámica (montículo) en lmadmin en Flexera FLEXnet Publisher v11.10 (también conocido como FlexNet License Server Manager) permite a atacantes remotos ejecutar código de su elección mediante un paquete 0x2f modificado. • http://kb.flexerasoftware.com/selfservice/microsites/search.do?cmd=displayKC&docType=kc&externalId=Q200980&sliceId=1 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •