CVE-2010-2733: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Web Monitor in Microsoft Forefront Unified Access Gateway UAG 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "UAG XSS Allows EOP Vulnerability."...

Microsoft Forefront Unified Access Gateway Web Monitor Cross-Site Scripting Vulnerability

Description Microsoft Forefront Unified Access Gateway is prone to a cross-site scripting vulnerability because Web Monitor fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

Ricoh Web Image Monitor 2.03 - Cross-Site Scripting

Ricoh Web Image Monitor 2.03 - Cross-Site Scripting source: https://www.securityfocus.com/bid/44772/info Ricoh web image monitor is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

Ricoh Web Image Monitor 2.03 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/44772/info Ricoh web image monitor is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in t...

Cisco Security Advisory: CiscoWorks Common Services Arbitrary Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: CiscoWorks Common Services Arbitrary Code Execution Vulnerability Advisory ID: cisco-sa-20101027-cs Revision 1.0 For Public Release 2010 October 27 1600 UTC GMT...

Apache Hadoop MapReduce JobTracker Web Detection

The web interface for Hadoop MapReduce JobTracker was detected on the remote host. This interface can be used to monitor jobs submitted to the Hadoop MapReduce engine. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid50304; scriptversion"1.7"; scriptcvsdate"Date:...

eNYe Sec Monitor v1.0 DLL Hijacking Exploit (airpcap.dll)

Exploit for windows platform in category local exploits ========================================================= eNYe Sec Monitor v1.0 DLL Hijacking Exploit airpcap.dll ========================================================= / eNYe Sec Monitor v1.0 DLL Hijacking Exploit airpcap.dll Author :...

Default configuration

The default configuration of the CCAgent option before 9.0.8.4 in the management server aka TSA component in Alcatel-Lucent OmniTouch Contact Center Standard Edition enables maintenance access, which allows remote attackers to monitor or reconfigure Contact Center operations via vectors involving...

CVE-2010-3279

The default configuration of the CCAgent option before 9.0.8.4 in the management server aka TSA component in Alcatel-Lucent OmniTouch Contact Center Standard Edition enables maintenance access, which allows remote attackers to monitor or reconfigure Contact Center operations via vectors involving...

CVE-2010-3279

Affected product: Alcatel-Lucent OmniTouch Contact Center Standard Edition, CCAgent option (TSA management server). Root cause: default configuration and flawed authentication allow unauthenticated access to TSA_maintenance.exe, enabling remote monitoring or reconfiguration of Contact Center oper...

Design/Logic Flaw

Untrusted search path vulnerability in Qualcomm eXtensible Diagnostic Monitor QXDM 03.09.19 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse mfc71enu.dll that is located in the same folder as a .isf file...

CVE-2010-3403: Undefined Security Weakness

Untrusted search path vulnerability in Qualcomm eXtensible Diagnostic Monitor QXDM 03.09.19 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse mfc71enu.dll that is located in the same folder as a .isf file...

CVE-2010-3197

IBM DB2 9.7 before FP2 does not perform the expected access control on the monitor administrative views in the SYSIBMADM schema, which allows remote attackers to obtain sensitive information via unspecified vectors...

Code injection

IBM DB2 9.7 before FP2 does not perform the expected access control on the monitor administrative views in the SYSIBMADM schema, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2010-3197: Undefined Security Weakness

IBM DB2 9.7 before FP2 does not perform the expected access control on the monitor administrative views in the SYSIBMADM schema, which allows remote attackers to obtain sensitive information via unspecified vectors...

CA Oneview Monitor DoSave.jsp Path Manipulation

Minded Security Labs: Advisory MSA100410 CA Oneview Monitor "DoSave.jsp" path manipulation Tested Versions: This advisory is intended for CA Netegrity Siteminder Policy Manager 6.x with Netegrity Oneview monitor installed. Minded Security ReferenceID: MSA100410 Credits: Discovery by Giorgio Fedon...

Computer Associates Oneview Monitor 6.0 - doSave.jsp Remote Code Execution

Computer Associates Oneview Monitor 6.0 - doSave.jsp Remote Code Execution source: https://www.securityfocus.com/bid/42413/info Computer Associates Oneview Monitor is prone to a remote code-execution vulnerability because the application fails to sufficiently sanitize user-supplied input...

Computer Associates Oneview Monitor 6.0 - 'doSave.jsp' Remote Code Execution

source: https://www.securityfocus.com/bid/42413/info Computer Associates Oneview Monitor is prone to a remote code-execution vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow an attacker to inject and execute arbitrary JSP...

Fedora 12 : gnome-screensaver-2.28.2-1.fc12 (2010-1556)

gnome-screensaver currently doesn't deal with monitors getting removed properly. If the unlock dialog is on the removed monitor then the unlock dialog and its associated keyboard grab are not moved to an existing monitor when the monitor removal is processed. This means that users can gain access...

MySQL Enterprise Monitor (MEM) Web Detection

MySQL Enterprise Monitor MEM, a distributed application for monitoring multiple MySQL servers, is hosted on the remote web server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid46815; scriptversion"1.13"; scriptsetattributeattribute:"pluginmodificationdate",...