567 matches found
McAfee Application Control Buffer Overflow Vulnerability
McAfee Application Control is a suite of program control software from the U.S.-based company McAfee. The software protects enterprise servers and endpoints from unauthorized applications and malware threats by using a dynamic trust model. A buffer overflow vulnerability exists in McAfee...
McAfee Application Control Security Bypass Vulnerability
McAfee Application Control is a suite of program control software from the U.S.-based company McAfee. The software protects enterprise servers and endpoints from unauthorized applications and malware threats by using a dynamic trust model. McAfee Application Control has a security vulnerability...
Cross-Site Scripting (XSS) in qTranslate WordPress Plugin
High-Tech Bridge Security Research Lab discovered vulnerability in qTranslate WordPress plugin, which can be exploited to perform Cross-Site Scripting XSS attacks against website administrators. Successful exploitation of this vulnerability may allow a remote attacker to gain complete control ove...
Nodes Studio CMS Information Disclosure Vulnerability
Nodes Studio CMS is a content management system. Nodes Studio CMS has an unspecified security vulnerability that allows remote attackers to obtain sensitive cookie information, take control of the application, and access or modify data...
PhreeBooks Input Validation Vulnerability
PhreeBooks is a suite of open source Web-based enterprise resource planning ERP and accounting applications that provide vendor account information management, inventory management and tracking, checking and bank reconciliation, and more. An input validation vulnerability exists in PhreeBooks. An...
PT-2015-4780
Name of the Vulnerable Software and Affected Versions Cisco Application Networking Manager ANM affected versions not specified Cisco Device Manager DM on Cisco 4710 Application Control Engine ACE appliances affected versions not specified Description A cross-site request forgery CSRF issue in the...
CVE-2015-0651: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the web GUI in Cisco Application Networking Manager ANM, and Device Manager DM on Cisco 4710 Application Control Engine ACE appliances, allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuo99753...
CVE-2014-8877 - Code Injection in Wordpress CM Download Manager plugin
Vulnerability title: Code Injection in Wordpress CM Download Manager plugin CVE: CVE-2014-8877 Plugin: CM Download Manager plugin Vendor: CreativeMinds - https://www.cminds.com/ Product: https://wordpress.org/plugins/cm-download-manager/ Affected version: 2.0.0 and previous version Fixed version:...
CVE-2014-8951
Unspecified vulnerability in Check Point Security Gateway R75, R76, R77, and R77.10, when UserCheck is enabled and the 1 Application Control, 2 URL Filtering, 3 DLP, 4 Threat Emulation, 5 Anti-Bot, or 6 Anti-Virus blade is used, allows remote attackers to cause a denial of service fwk0 process...
CVE-2014-8951
Technical details (affected product, component, root cause, versions, or remediation) are not publicly provided in the supplied documents. Monitor for updates.
Android 5.0 Lollipop Encryption and Application Control
Google, like most technology companies in this climate, is fighting for the security and privacy of its users’ data on several fronts. With a mobile application ecosystem that invites trouble and government demands for user content and information continuing to rise, Google decided with Android...
Local Privilege Escalation Vulnerability in Symantec Endpoint Protection
US-CERT is aware of a local privilege escalation vulnerability in Symantec Endpoint Protection. This vulnerability affects all versions of Symantec Endpoint Protection Client 11.x and 12.x running Application and Device Control. Exploitation of this vulnerability may allow an attacker to gain ful...
123 Flash Chat 5.0 - Remote Code Injection Weakness
No description provided by source. source: http://www.securityfocus.com/bid/16360/info 123 Flash Chat is prone to an arbitrary code injection weakness. An attacker can influence the value of a variable that is insecurely passed to an 'eval' call. Successful exploitation may allow attackers to tak...
PostNuke 0.6x/0.7x NS-Languages Module language Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/16752/info PostNuke is prone to multiple input-validation vulnerabilities. These issues are due to the application's failure to properly sanitize user-supplied input. Successful exploitation could allow an attacker to...
PostNuke 0.6x/0.7x NS-Languages Module language Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/16752/info PostNuke is prone to multiple input-validation vulnerabilities. These issues are due to the application's failure to properly sanitize user-supplied input. Successful exploitation could allow an attacker to...
PT-2014-2014
Name of the Vulnerable Software and Affected Versions Check Point Security Gateway versions R75 through R77.10 Description The issue is related to an unspecified vulnerability in Check Point Security Gateway when UserCheck is enabled and certain blades are used, including Application Control, URL...
Check Point response to "Bypassing Application Control"
...
Cisco Application Control Engine Login Administrator IP Address Overlap (cisco-sa-20120620-ace)
The Cisco Application Control Engine ACE software installed on the remote Cisco IOS device is earlier than A42.3 / A51.1. It, therefore, potentially does not properly share a management IP address among multiple contexts when multicontext mode is enabled. This might allow an administrative user t...
Cisco Application Control Engine (ACE) Version
Cisco Application Control Engine ACE software is installed on the remote Cisco IOS or ACE device. It is a load-balancing and application-delivery solution for Cisco Catalyst 6500 Series switches and Cisco 7600 Series routers, and it is also available as an appliance. TRUSTED...