1819 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in Administration pages in Cisco Secure Access Control System ACS allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud75165...
CVE-2013-3421
Cross-site scripting XSS vulnerability in the Help index page in Cisco Secure Access Control System ACS allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud75170...
CVE-2013-3424
Cross-site request forgery CSRF vulnerability in Administration and View pages in Cisco Secure Access Control System ACS allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCud75177...
CVE-2013-3422
CVE-2013-3422 describes a Cross-Site Scripting (XSS) vulnerability in the Administration pages of Cisco Secure Access Control System (ACS). The root cause is insufficient input validation of a parameter, allowing unauthenticated, remote attackers to craft links that execute arbitrary web script o...
CVE-2013-3424
Cisco ACS is affected by CVE-2013-3424: a CSRF vulnerability in the Administration and View pages could allow an unauthenticated/remote attacker to hijack the authentication of a user (Bug CSCud75177). Impact per sources includes potential actions taken in the context of an authenticated session ...
CVE-2013-3421
Cross-site scripting XSS vulnerability in the Help index page in Cisco Secure Access Control System ACS allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud75170...
CVE-2013-3421
CVE-2013-3421 (Cisco ACS) describes a Cross-Site Scripting (XSS) vulnerability on the Help index page of Cisco Secure Access Control System (ACS). The issue arises from insufficient input validation of a parameter, enabling an unauthenticated, remote attacker to inject arbitrary script or HTML wh...
PT-2013-4380
Name of the Vulnerable Software and Affected Versions Cisco Secure Access Control System ACS affected versions not specified Description A cross-site scripting XSS issue exists in the web interface, allowing remote attackers to inject arbitrary web script or HTML via an unspecified field...
PT-2013-4379
Name of the Vulnerable Software and Affected Versions Cisco Secure Access Control System ACS affected versions not specified Description A cross-site scripting XSS issue exists in the Administration pages, allowing remote attackers to inject arbitrary web script or HTML via an unspecified...
PT-2013-4381
Name of the Vulnerable Software and Affected Versions Cisco Secure Access Control System ACS affected versions not specified Description A cross-site request forgery CSRF issue affects Administration and View pages, allowing remote attackers to hijack the authentication of arbitrary users...
CVE-2013-3422: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Administration pages in Cisco Secure Access Control System ACS allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud75165...
CVE-2013-3424: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in Administration and View pages in Cisco Secure Access Control System ACS allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCud75177...
CVE-2013-3423: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the web interface in Cisco Secure Access Control System ACS allows remote attackers to inject arbitrary web script or HTML via an unspecified field, aka Bug ID CSCud75174...
CVE-2013-3421: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Help index page in Cisco Secure Access Control System ACS allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud75170...
PT-2013-4378
Name of the Vulnerable Software and Affected Versions Cisco Secure Access Control System ACS affected versions not specified Description A cross-site scripting XSS issue exists in the Help index page, allowing remote attackers to inject arbitrary web script or HTML via an unspecified parameter...
Fedora Update for kremotecontrol FEDORA-2013-10130
Check for the Version of kremotecontrol OpenVAS Vulnerability Test Fedora Update for kremotecontrol FEDORA-2013-10130 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...
CVE-2013-3380
The administrative web interface in the Access Control Server in Cisco Secure Access Control System ACS does not properly restrict the report view page, which allows remote authenticated users to obtain sensitive information via a direct request, aka Bug ID CSCue79279...
Information disclosure
The administrative web interface in the Access Control Server in Cisco Secure Access Control System ACS does not properly restrict the report view page, which allows remote authenticated users to obtain sensitive information via a direct request, aka Bug ID CSCue79279...
CVE-2013-3380
The administrative web interface in the Access Control Server in Cisco Secure Access Control System ACS does not properly restrict the report view page, which allows remote authenticated users to obtain sensitive information via a direct request, aka Bug ID CSCue79279...
CVE-2013-3380
The advisory concerns Cisco Secure Access Control System (ACS) and its administrative web interface. The issue is a failure to properly restrict the report view page, allowing remote authenticated users to view potentially sensitive information via a direct request (Bug ID CSCue79279). Exploitati...