NetFlow Analyzer 5 - '/jspui/selectDevice.jsp?rtype' Cross-Site Scripting

source: https://www.securityfocus.com/bid/24766/info NetFlow Analyzer is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user ...

NetFlow Analyzer 5 - '/jspui/customReport.jsp?rtype' Cross-Site Scripting

source: https://www.securityfocus.com/bid/24766/info NetFlow Analyzer is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user ...

NetFlow Analyzer 5 - 'netflow/jspui/index.jsp?view' Cross-Site Scripting

source: https://www.securityfocus.com/bid/24766/info NetFlow Analyzer is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user ...

NetFlow Analyzer 5 - '/jspui/appConfig.jsp?task' Cross-Site Scripting

source: https://www.securityfocus.com/bid/24766/info NetFlow Analyzer is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user ...

NetFlow Analyzer 5 - '/jspui/applicationList.jsp?alpha' Cross-Site Scripting

source: https://www.securityfocus.com/bid/24766/info NetFlow Analyzer is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user ...

NetFlow Analyzer 5 - jspuicustomReport.jsp?rtype Cross-Site Scripting

NetFlow Analyzer 5 - jspuicustomReport.jsp?rtype Cross-Site Scripting...

DSA-1322-1 wireshark

Bulletin has no description...

[SECURITY] Fedora 7 Update: mecab-0.96-1.fc7

MeCab is a open source morphological analyzer which uses CRF Conditional Random Fields as the estimation of parameters. NOTE: You have to install MeCab dictionary rpm to make use of MeCab...

Buffer overflow

Multiple buffer overflows in the ESA protocol implementation in eIQnetworks Enterprise Security Analyzer ESA 2.5 allow remote attackers to execute arbitrary code via a long parameter to the 1 DELETESEARCHFOLDER, 2 DELTASK, 3 HMGRCHECKHOSTSCSV, 4 TASKUPDATEDUSER, 5 VERIFYUSERKEY, or 6 VERIFYPWD...

CVE-2007-2059

CVE-2007-2059 concerns the eIQnetworks Enterprise Security Analyzer (ESA) 2.5. The vulnerability stems from multiple buffer overflows in the ESA protocol implementation that occur when a long parameter is sent to any of the following commands: DELETESEARCHFOLDER, DELTASK, HMGR_CHECKHOSTSCSV, TASK...

eIQnetworks Enterprise Security Analyzer License Manager < 2.5.9 Multiple Remote Overflows

The version of eIQnetworks Enterprise Security Analyzer installed on the remote host contains multiple buffer overflows in its License Manager service. Using long arguments to various commands, an unauthenticated, remote attacker may be able to leverage this issue to crash the affected service or...

eIQnetworks Enterprise Security Analyzer multiple buffer overflows

Buffer overflow on parsing TCP/10616 ESA Server data...

INFIGO-2007-04-05: Enterprise Security Analyzer server remote buffer overflows

INFIGO IS Security Advisory ADV-2007-04-01 http://www.infigo.hr/ Title: Enterprise Security Analyzer server remote buffer overflows Advisory ID: INFIGO-2007-08 Date: 2007-04-05 Advisory URL: http://www.infigo.hr/en/infocus/advisories/INFIGO-2006-08-04 Impact: Remote code execution preauth Risk...

ManageEngine Firewall Analyzer任意文件信息泄露漏洞

ManageEngine Firewall Analyzer是一款防火墙分析程序。 ManageEngine Firewall Analyzer存在设计错误，远程攻击者可以利用漏洞获得敏感信息。 授权用户使用"firewall analyzer"可以访问任何系统文件，可导致获得敏感信息。 ManageEngine Firewall Analyzer 4 目前没有详细解决方案提供： http://manageengine.adventnet.com/...

CVE-2007-1642

Unspecified vulnerability in ManageEngine Firewall Analyzer allows remote authenticated users to "access any common file" via a direct URL request...

Cross site request forgery (csrf)

Unspecified vulnerability in ManageEngine Firewall Analyzer allows remote authenticated users to "access any common file" via a direct URL request...

ManageEngine Firewall Analyzer arbitrary file disclosure to authorized user

"ManageEngine Firewall Analyzer is a web based firewall monitoring and log analysis tool that collects, analyses, and reports information on enterprise-wide firewalls, proxy servers, and radius servers. " a authorized user to the "firewall analyzer" can access any common file on the system, it is...

CVE-2007-1642

Unspecified vulnerability in ManageEngine Firewall Analyzer allows remote authenticated users to "access any common file" via a direct URL request...

CVE-2007-1642

Technical details about CVE-2007-1642 are not publicly provided in the supplied documents. Monitor for updates from official advisories and databases before drawing conclusions about affected versions or remediation.

CVE-2007-1194

Norman SandBox Analyzer does not use the proper range for Interrupt Descriptor Table IDT entries, which allows local users to determine that the local machine is an emulator, or a similar environment not based on a physical Intel processor, which allows attackers to produce malware that is more...