Tembria Server Multiple Cross-Site Scripting and Information Disclosure Vulnerabilities

Tembria Server Monitor is prone to cross-site scripting and information disclosure vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2011-3684

Multiple cross-site scripting XSS vulnerabilities in Tembria Server Monitor before 6.0.5 Build 2252 allow remote attackers to inject arbitrary web script or HTML via 1 the siteid parameter to logbook.asp, 2 the siteid parameter to monitor-events.asp, 3 the siteid parameter to...

CVE-2011-3685

Tembria Server Monitor before 6.0.5 Build 2252 uses a substitution cipher to encrypt application credentials, which allows local users to obtain sensitive information by leveraging read access to 1 authentication.dat or 2 XML files in the Exports directory...

Directory traversal

Tembria Server Monitor before 6.0.5 Build 2252 uses a substitution cipher to encrypt application credentials, which allows local users to obtain sensitive information by leveraging read access to 1 authentication.dat or 2 XML files in the Exports directory...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Tembria Server Monitor before 6.0.5 Build 2252 allow remote attackers to inject arbitrary web script or HTML via 1 the siteid parameter to logbook.asp, 2 the siteid parameter to monitor-events.asp, 3 the siteid parameter to...

CVE-2011-3685

Tembria Server Monitor before 6.0.5 Build 2252 uses a substitution cipher to encrypt application credentials, which allows local users to obtain sensitive information by leveraging read access to 1 authentication.dat or 2 XML files in the Exports directory...

CVE-2011-3685

Tembria Server Monitor (before 6.0.5 Build 2252) is vulnerable due to a substitution cipher used to encrypt application credentials, enabling local users with read access to authentication.dat or exports XML files to obtain sensitive information. This CVE (CVE-2011-3685) affects the confidentiali...

CVE-2011-3684

Multiple cross-site scripting XSS vulnerabilities in Tembria Server Monitor before 6.0.5 Build 2252 allow remote attackers to inject arbitrary web script or HTML via 1 the siteid parameter to logbook.asp, 2 the siteid parameter to monitor-events.asp, 3 the siteid parameter to...

CVE-2011-3684

Tembria Server Monitor is affected by multiple XSS vulnerabilities (CVE-2011-3684) prior to version 6.0.5 Build 2252. The flaws allow remote attackers to inject arbitrary script/HTML via numerous parameters (e.g., siteid in logbook.asp, monitor-events.asp, reports-config-by-device.asp, and others...

CVE-2011-3685: Undefined Security Weakness

Tembria Server Monitor before 6.0.5 Build 2252 uses a substitution cipher to encrypt application credentials, which allows local users to obtain sensitive information by leveraging read access to 1 authentication.dat or 2 XML files in the Exports directory...

CVE-2011-3684: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Tembria Server Monitor before 6.0.5 Build 2252 allow remote attackers to inject arbitrary web script or HTML via 1 the siteid parameter to logbook.asp, 2 the siteid parameter to monitor-events.asp, 3 the siteid parameter to...

SolarWinds Orion NPM Multiple Cross Site Scripting Vulnerabilities

This host is running SolarWinds Orion NPM and is prone to cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gborionnpmmultxssvuln.nasl 7044 2017-09-01 11:50:59Z teissa $ SolarWinds Orion NPM Multiple Cross Site Scripting Vulnerabilities Authors: Antu Sanadi Copyright: Copyrigh...

Cisco Unified Service Monitor / Cisco Unified Operations Manager / CiscoWorks LAN Management / EMC Ionix buffer overflow

Buffer overflow on TCP/9002 network packet parsing...

Cisco Security Advisory: CiscoWorks LAN Management Solution Remote Code Execution Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: CiscoWorks LAN Management Solution Remote Code Execution Vulnerabilities Advisory ID: cisco-sa-20110914-lms Revision 1.0 For Public Release 2011 September 14 1600 UTC GMT...

Cisco Security Advisory: Cisco Unified Service Monitor and Cisco Unified Operations Manager Remote Code Execution Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco Unified Service Monitor and Cisco Unified Operations Manager Remote Code Execution Vulnerabilities Advisory ID: cisco-sa-20110914-cusm Revision 1.0 For Public Release 2011 September 14 1600 UTC GMT...

CVE-2011-2738

Multiple unspecified vulnerabilities in Cisco Unified Service Monitor before 8.6, as used in Unified Operations Manager before 8.6 and CiscoWorks LAN Management Solution 3.x and 4.x before 4.1; and multiple EMC Ionix products including Application Connectivity Monitor Ionix ACM 2.3 and earlier,...

CVE-2011-2738

CVE-2011-2738 is a buffer overflow remote code execution vulnerability affecting Cisco Unified Service Monitor and Cisco Unified Operations Manager (and associated EMC Ionix products). Exploitation occurs by sending crafted packets to TCP port 9002, taking advantage of a flaw in handling SMARTS/ ...

CVE-2011-2738: Undefined Security Weakness

Multiple unspecified vulnerabilities in Cisco Unified Service Monitor before 8.6, as used in Unified Operations Manager before 8.6 and CiscoWorks LAN Management Solution 3.x and 4.x before 4.1; and multiple EMC Ionix products including Application Connectivity Monitor Ionix ACM 2.3 and earlier,...

Cisco Unified Service Monitor and Cisco Unified Operations Manager Remote Code Execution Vulnerabilities

...

Orion Network Performance Monitor 10.1.3 - CustomChart.aspx Cross-Site Scripting

Orion Network Performance Monitor 10.1.3 - CustomChart.aspx Cross-Site Scripting source: https://www.securityfocus.com/bid/49614/info Orion Network Performance Monitor is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can explo...