CVE-2017-3840

CVE-2017-3840 is a open redirect vulnerability in the web interface of Cisco Secure Access Control System (ACS). An unauthenticated remote attacker could cause a user to be redirected to a malicious URL due to improper input validation of HTTP parameters. The issue affects Cisco ACS and is docume...

CVE-2017-3839

CVE-2017-3839 is an XML External Entity (XXE) vulnerability in Cisco Secure Access Control System (ACS) web UI. An unauthenticated, remote attacker could read part of the information stored on the affected device. Root cause: improper handling of XML entities in the web framework. Affected releas...

CVE-2017-3838

Cisco Secure Access Control System (ACS) contains a DOM-based XSS vulnerability that could be exploited by an unauthenticated, remote attacker via the web interface. The issue arises from insufficient input validation of a user-supplied value and affects at least release 5.8(2.5). The CVE entry i...

CVE-2017-3840

A vulnerability in the web interface of the Cisco Secure Access Control System ACS could allow an unauthenticated, remote attacker to redirect a user to a malicious web page, aka an Open Redirect Vulnerability. More Information: CSCvc04849. Known Affected Releases: 5.82.5...

HTTP Banner Evaluation

This script gets the HTTP banner and stores some values in the KB related to it. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cisco Secure Access Control System XML External Entity Vulnerability

A vulnerability in the web-based user interface of the Cisco Secure Access Control System ACS could allow an authenticated, remote attacker to have read access to part of the information stored in the affected system. The vulnerability is due to improper handling of the XML External Entity XXE wh...

Cisco Secure Access Control System Open Redirect Vulnerability

A vulnerability in the web interface of the Cisco Secure Access Control System ACS could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerability is due to improper input validation of the parameters in the HTTP request. An attacker could exploit thi...

Potential vulnerability in Intel® SSD Data Center Family for SATA - lu

Lenovo Security Advisory: LEN-6022 Potential Impact: Denial of service Severity:High Scope of Impact: Industry-Wide Summary Description: Intel Solid State Drives SSDs are used in some Lenovo System X servers. The Intel SSD Data Center Family for SATA product series was designed to the ATA-ACS...

Potential vulnerability in Intel® SSD Data Center Family for SATA - Lenovo Support NL

No description provided...

communities.acs.org XSS vulnerability

Vulnerable URL: https://communities.acs.org/community/science/chemicalbiology/tags?tags=%22%3E%3C/option%3E%3C%20/select%3E%3Cbody/onpageshow=prompt%28%29%3E%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:|...

acsa.edu.au XSS vulnerability

Vulnerable URL: http://www.acsa.edu.au/pages/search.asp Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4251056 Google Pagerank| 5 VIP website status:| No Check acsa.edu.au SSL...

acs-alumni.co.uk Open Redirect vulnerability

Vulnerable URL: http://www.acs-alumni.co.uk/cfnews/forward.cfm?dest=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 10.04.2016 Latest check for patch:| 10.04.2016 12:25 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank|...

Emerson Avocent® ACS 6000 Advanced Console Server 弱口令

No description provided by source...

o2 DSL Auto Configuration Server Credential Disclosure

Advisory: o2/Telefonica Germany: ACS Discloses VoIP/SIP Credentials The o2 Auto Configuration Server ACS discloses VoIP/SIP credentials of arbitrary customers when receiving manipulated CWMP packets. These credentials can then be used by an attacker to register any VoIP number of the victim. This...

acs.com.hk XSS vulnerability

Vulnerable URL: http://www.acs.com.hk/en/search/"/ Details: Description| Value ---|--- Patched:| Yes, at 24.02.2016 Latest check for patch:| 24.02.2016 15:50 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 386615 Google Pagerank| 4 VIP website status:| No Check...

CVE-2015-6349

Cross-site scripting XSS vulnerability in the web interface in the Solution Engine in Cisco Secure Access Control Server ACS 5.70.15 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2015-6348

The report-generation web interface in the Solution Engine in Cisco Secure Access Control Server ACS 5.70.15 allows remote authenticated users to bypass intended RBAC restrictions, and read report or status information, by visiting an unspecified web page...

CVE-2015-6347

The Solution Engine in Cisco Secure Access Control Server ACS 5.70.15 allows remote authenticated users to bypass intended RBAC restrictions, and create a dashboard or portlet, by visiting an unspecified web page...

CVE-2015-6345

SQL injection vulnerability in the Solution Engine in Cisco Secure Access Control Server ACS 5.70.15 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCuw24700...

Cross site scripting

Cross-site scripting XSS vulnerability in the web interface in the Solution Engine in Cisco Secure Access Control Server ACS 5.70.15 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...