673 matches found
ProCheckUp Security Advisory 2007.26
Date Found: 17th July 2007 Vendor informed: 23rd July 2007 Confirmed by vendor: 13th September 2007 Description: Aruba 800 is vulnerable to a persistent XSS on the administrator login screen. An unauthenticated user can re-write the hidden parameter 'url' by requesting a link under the /screens/...
Aruba MC-800 Mobility Controller - Screens Directory HTML Injection
Aruba MC-800 Mobility Controller - Screens Directory HTML Injection source: https://www.securityfocus.com/bid/26465/info Aruba MC-800 Mobility Controller is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow...
Aruba MC-800 Mobility Controller - Screens Directory HTML Injection
source: https://www.securityfocus.com/bid/26465/info Aruba MC-800 Mobility Controller is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow an attacker to execute HTML and script code in the context of the...
CVE-2002-2380: Exposure of Sensitive Information to an Unauthorized Actor
NetDSL ADSL Modem 800 with Microsoft Network firmware 5.5.11 allows remote attackers to gain access to configuration menus by sniffing undocumented usernames and passwords from network traffic...
Cisco Router Web Setup (CRWS) contains an insecure default IOS configuration
Overview A vulnerability in the Cisco Router Web Setup CRWS web configuration tool on some Cisco 800 and SOHO series routers may allow remote execution of system-level commands with no authentication. Description Cisco Router Web Setup Tool The Cisco Router Web Setup tool, or CRWS, provides a GUI...
CVE-2005-3140
Procom NetFORCE 800 4.02 M10 Build 20 and possibly other versions sends the NIS password map passwd.nis as a file attachment in diagnostic e-mail messages, which allows remote attackers to obtain the cleartext NIS password hashes...
CVE-2005-3140
Procom NetFORCE 800 4.02 M10 Build 20 and possibly other versions sends the NIS password map passwd.nis as a file attachment in diagnostic e-mail messages, which allows remote attackers to obtain the cleartext NIS password hashes...
CVE-2005-3140: Cleartext Transmission of Sensitive Information
Procom NetFORCE 800 4.02 M10 Build 20 and possibly other versions sends the NIS password map passwd.nis as a file attachment in diagnostic e-mail messages, which allows remote attackers to obtain the cleartext NIS password hashes...
[Information Disclosure] NetForce v4.02 Sends NIS Password Maps with passwords hashes over sendmail
Vendor: Procom Technology, Inc. Product: NetFORCE 800, v 4.02 M10 Build 20 Other Versions Vulnerable: unknown, vendor’s website sucks so I can’t tell Vulnerability type: Information disclosure Severity: Medium Software Information -------------------- Model : NetFORCE 800 Version : 4.02 M10 Build...
Debian DSA-800-1 : pcre3 - integer overflow
An integer overflow with subsequent buffer overflow has been detected in PCRE, the Perl Compatible Regular Expressions library, which allows an attacker to execute arbitrary code. Since several packages link dynamically to this library you are advised to restart the corresponding services or...
CVE-2005-2674
Note: the vendor has disputed this issue. Multiple cross-site scripting XSS vulnerabilities in Land Down Under LDU 800 allow remote attackers to inject arbitrary web script or HTML via the 1 c or 2 m parameters to index.php or 3 w parameter to journal.php. NOTE: this issue has been disputed by th...
CVE-2005-2674
Note: the vendor has disputed this issue. Multiple cross-site scripting XSS vulnerabilities in Land Down Under LDU 800 allow remote attackers to inject arbitrary web script or HTML via the 1 c or 2 m parameters to index.php or 3 w parameter to journal.php. NOTE: this issue has been disputed by th...
CVE-2005-2675
CVE-2005-2675 corresponds to multiple SQL injection vulnerabilities in Land Down Under (LDU) 800/800-series in which remote attackers could manipulate SQL queries via various PHP script parameters (forums.php, list.php, journal.php, forums.php, links.php). OpenVAS/Nessus entries corroborate SQLi ...
CVE-2005-2674
Affected product: Land Down Under (LDU) 800 series (
PT-2005-3560 · Land Down Under · Land Down Under (Ldu) 800
Name of the Vulnerable Software and Affected Versions: Land Down Under LDU 800 Description: Multiple cross-site scripting XSS vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the c or m parameters to "index.php" or the w parameter to "journal.php". The vendor has...
CVE-2005-2674: Undefined Security Weakness
Note: the vendor has disputed this issue. Multiple cross-site scripting XSS vulnerabilities in Land Down Under LDU 800 allow remote attackers to inject arbitrary web script or HTML via the 1 c or 2 m parameters to index.php or 3 w parameter to journal.php. NOTE: this issue has been disputed by th...
CVE-2001-1439: Undefined Security Weakness
Buffer overflow in the text editor functionality in HP-UX 10.01 through 11.04 on HP9000 Series 700 and Series 800 allows local users to cause a denial of service "system availability" via text editors such as 1 e, 2 ex, 3 vi, 4 edit, 5 view, and 6 vedit...
CVE-2003-1087: Undefined Security Weakness
Unknown vulnerability in diagmond and possibly other applications in HP9000 Series 700/800 running HP-UX B.11.00, B.11.04, B.11.11, and B.11.22 allows remote attackers to cause a denial of service program failure via certain network traffic...
HP-UX PHCO_23178 : HPSBUX0101-138 Sec. Vulnerability in man(1) command (rev.1)
s700800 11.04 VVOS man1 patch : All HP9000 series 700/800 workstations and servers. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO23178. The text itself is copyright C Hewlett-Packard Development Company,...
DEBIAN-CVE-2004-1076
Multiple buffer overflows in the RtConfigLoad function in rt-config.c for Atari800 before 1.3.4 allow local users to execute arbitrary code via large values in the configuration file...