WatchGuard Fireware XTM Open Redirect Vulnerability

WatchGuard Fireware XTM is a firewall appliance from WatchGuard USA. An open redirection vulnerability exists in WatchGuard Fireware XTM versions prior to 11.10.7. The vulnerability can be exploited to redirect a user to an attacker-controlled website by constructing a malicious URI that entices...

Fireware XTM Web UI Open Redirect Vulnerability

Fireware is the operating system for the WatchGuard UTM security solution. web UI to manage the device. An open redirect vulnerability exists in the Fireware XTM Web UI login form. An attacker is able to redirect to an arbitrary website via a WatchGuard Fireware XTM Web UI page...

WatchGuard Fireware XTM < 11.10.7 Open Redirect Vulnerability

WatchGuard Fireware XMT Web UI is prone to an open redirect vulnerability. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

Fireware XTM Web UI Open Redirect

================================================================ Fireware XTM Web UI - Open Redirect ================================================================ Information -------------------- Name: Fireware XTM Web UI - Open Redirect Affected Software : Fireware XTM Web UI Affected Version...

Watchguard Fireware XTM OpenSSL TLS心跳信息泄漏漏洞

CVE ID:CVE-2014-0160 WatchGuard Fireware XTM是一款防火墙设备。 WatchGuard Fireware XTM所绑定的OpenSSL存在安全漏洞，OpenSSL处理TLS”心跳“扩展存在一个边界错误，允许攻击者利用漏洞获取64k大小的已链接客户端或服务器的内存内容。内存信息可包括私钥，用户名密码等。 0 WatchGuard Fireware XTM 11.x WatchGuard Fireware XTM 11.8.3 Update 1版本已修复该漏洞，建议用户下载使用： http://watchguardsecuritycenter.com...

WatchGuard Fireware XTM 'poll_name'参数跨站脚本漏洞

Bugtraq ID:66210 CVE ID:CVE-2014-0338 WatchGuard Fireware XTM是一款多功能防火墙管理软件。 WatchGuard Fireware XTM不正确过滤用户提交给"pollname"参数的数据，允许远程攻击者利用漏洞注入恶意脚本或HTML代码，当恶意数据被查看时，可获取敏感信息或劫持用户会话。 0 WatchGuard Fireware XTM 11.8 目前没有详细解决方案提供： http://www.watchguard.com/products/fireware-xtm.asp...

CVE-2014-0338

Multiple cross-site scripting XSS vulnerabilities in the firewall policy management pages in WatchGuard Fireware XTM before 11.8.3 allow remote attackers to inject arbitrary web script or HTML via the polname parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the firewall policy management pages in WatchGuard Fireware XTM before 11.8.3 allow remote attackers to inject arbitrary web script or HTML via the polname parameter...

CVE-2014-0338

Multiple cross-site scripting XSS vulnerabilities in the firewall policy management pages in WatchGuard Fireware XTM before 11.8.3 allow remote attackers to inject arbitrary web script or HTML via the polname parameter...

CVE-2014-0338

WatchGuard Fireware XTM before 11.8.3 is affected by cross-site scripting in the firewall policy management page, exploitable via the pol_name parameter in firewall/policy. The root cause is improper input handling of the pol_name field, allowing remote attackers to inject arbitrary script/HTML t...

CVE-2014-0338: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the firewall policy management pages in WatchGuard Fireware XTM before 11.8.3 allow remote attackers to inject arbitrary web script or HTML via the polname parameter...

PT-2014-3570

Name of the Vulnerable Software and Affected Versions WatchGuard Fireware XTM versions prior to 11.8.3 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the firewall policy management pages. These vulnerabilities allow remote attackers to inject arbitrary web...

WatchGuard Fireware XTM devices contain a cross-site scripting vulnerability

Overview WatchGuard Fireware XTM 11.8.1, and possibly earlier versions, contains a cross-site scripting vulnerability. Description CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' WatchGuard Fireware XTM 11.8.1 contains a cross-site scripting vulnerabilit...

CVE-2013-6021

Buffer overflow in WGagent in WatchGuard WSM and Fireware before 11.8 allows remote attackers to execute arbitrary code via a long sessionid value in a cookie...

CVE-2013-5702

Multiple cross-site scripting XSS vulnerabilities in WebCenter in WatchGuard WSM and Fireware before 11.8 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters...

Buffer overflow

Buffer overflow in WGagent in WatchGuard WSM and Fireware before 11.8 allows remote attackers to execute arbitrary code via a long sessionid value in a cookie...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in WebCenter in WatchGuard WSM and Fireware before 11.8 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters...

CVE-2013-5702

Multiple cross-site scripting XSS vulnerabilities in WebCenter in WatchGuard WSM and Fireware before 11.8 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters...

CVE-2013-6021

Buffer overflow in WGagent in WatchGuard WSM and Fireware before 11.8 allows remote attackers to execute arbitrary code via a long sessionid value in a cookie...

CVE-2013-5702

CVE-2013-5702 corresponds to multiple non‑persistent Cross‑Site Scripting (XSS) vulnerabilities in Watchguard Server Center. The affected product/version scope includes Watchguard Server Center v11.7.4 Update #1 and older, where improper input validation of GET parameters could allow an authentic...