synetics i-doit pro API跨站脚本漏洞

BUGTRAQ ID：65957 CVE ID：CVE-2014-2231 Synetics i-doit是德国Synetics公司的一个基于Web的开源IT文档和CMDB（配置管理数据库），它能够记录IT系统及其变化的信息，同时针对系统变化制定应急方案，最终确保IT网络稳定、高效的运作。 synetics i-doit 1.2.5之前版本的的API存在跨站脚本漏洞，允许远程攻击者通过产权注入任意的web脚本或HTML。 0 synetics GmbH i-doit 1.2.4 synetics GmbH i-doit 1.1.1 synetics GmbH i-doit 1.1.2...

Novell ZENworks Configuration Management < 11.3.0.35304 PreBoot Service Directory Traversal

The remote host has a version of Novell ZENworks Configuration Management installed prior to 11 SP3 11.3.0.35304. It is, therefore, affected by a directory traversal vulnerability due to improper validation of an unspecified parameter of the PreBoot Service when reading files. A remote,...

Novell ZENworks Configuration Management目录遍历漏洞

BUGTRAQ ID: 65912 CVECAN ID: CVE-2013-3706 Novell ZENworks Configuration Management是ZENworks系统网关工具中的配置管理解决方案。 Novell ZENworks Configuration Management 11.2版本的PreBoot服务相关输入没有被正确验证即用于读取文件，这可使恶意用户通过目录遍历序列泄露任意文件的内容。 0 Novell ZENworks Configuration Management 11.2 厂商补丁： Novell ------...

Updated puppet & puppet3 packages fix CVE-2013-4969 and a regression

Updated puppet and puppet3 packages fix security vulnerability: An unsafe use of temporary files was discovered in Puppet, a tool for centralized configuration management. An attacker can exploit this vulnerability and overwrite an arbitrary file in the system CVE-2013-4969. This update also...

RedHat Update for augeas RHSA-2014:0044-01

Check for the Version of augeas OpenVAS Vulnerability Test RedHat Update for augeas RHSA-2014:0044-01 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

USN-2077-1: Puppet vulnerability

It was discovered that Puppet incorrectly handled temporary files. A local attacker could possibly use this issue to overwrite arbitrary files. In the default installation of Ubuntu, this should be prevented by the Yama link restrictions...

Debian DSA-2831-1 : puppet - insecure temporary files

An unsafe use of temporary files was discovered in Puppet, a tool for centralized configuration management. An attacker can exploit this vulnerability and overwrite an arbitrary file in the system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in thi...

Debian Security Advisory DSA 2831-1 (puppet - insecure temporary files)

An unsafe use of temporary files was discovered in Puppet, a tool for centralized configuration management. An attacker can exploit this vulnerability and overwrite an arbitrary file in the system. OpenVAS Vulnerability Test $Id: deb2831.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated fr...

Puppet/Puppet Enterprise不安全临时文件符号链接攻击漏洞

CVE ID:CVE-2013-4969 puppet是一款Linux、Unix、windows平台的集中配置管理系统。 Puppet和Puppet Enterprise使用不安全的临时文件，允许本地攻击者使用符号链接攻击覆盖系统任意文件。 0 Puppet 3.3.2 Puppet 3.4.0 Puppet 2.8.3 Puppet 3.1.0 puppet 2.8.4和3.1.1， puppet 3.3.3和3.4.1已经修复该漏洞，建议用户下载更新： http://puppetlabs.com/...

CVE-2013-5402

Cross-site scripting XSS vulnerability in IBM Maximo Asset Management, Maximo Asset Management Essentials, Maximo for Government, Maximo for Nuclear Power, Maximo for Transportation, Maximo for Life Sciences, Maximo for Oil and Gas, and Maximo for Utilities 7.1.x through 7.1.1.12, 7.1.2, 7.5 befo...

augeas security update

CentOS Errata and Security Advisory CESA-2013:1537 Updated augeas packages that fix two security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common...

Novell ZENworks Configuration Management umaninv Information Disclosure (CVE-2013-1084)

An information disclosure vulnerability exists in Novel ZENworks Configuration Management...

CVE-2013-6347

Session fixation vulnerability in Novell ZENworks Configuration Management ZCM before 11.2.4 allows remote attackers to hijack web sessions via unspecified vectors...

CVE-2013-6345

Unspecified vulnerability in the ZCC page in Novell ZENworks Configuration Management ZCM before 11.2.4 has unknown impact and attack vectors related to an "Application Exception."...

CVE-2013-6344

The ZCC page in Novell ZENworks Configuration Management ZCM before 11.2.4 allows attackers to conduct cross-frame scripting attacks via unknown vectors...

Cross site scripting

The ZCC page in Novell ZENworks Configuration Management ZCM before 11.2.4 allows attackers to conduct cross-frame scripting attacks via unknown vectors...

Session fixation

Session fixation vulnerability in Novell ZENworks Configuration Management ZCM before 11.2.4 allows remote attackers to hijack web sessions via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the ZCC page in Novell ZENworks Configuration Management ZCM before 11.2.4 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2013-6347

Session fixation vulnerability in Novell ZENworks Configuration Management ZCM before 11.2.4 allows remote attackers to hijack web sessions via unspecified vectors...

CVE-2013-6344

The ZCC page in Novell ZENworks Configuration Management ZCM before 11.2.4 allows attackers to conduct cross-frame scripting attacks via unknown vectors...