Cross site scripting

Cross-site scripting XSS vulnerability in the HTTP module in Cisco Security Manager CSM 4.70SP11 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCut27789...

CVE-2015-0727

Cross-site scripting XSS vulnerability in the HTTP module in Cisco Security Manager CSM 4.70SP11 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCut27789...

CVE-2015-0727: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the HTTP module in Cisco Security Manager CSM 4.70SP11 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCut27789...

PT-2015-4842

Name of the Vulnerable Software and Affected Versions Cisco Security Manager version 4.70SP11 Description A cross-site scripting XSS issue in the HTTP module allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Recommendations For Cisco Security Manager version...

Cisco Security Manager Cross-Site Scripting Vulnerability

A vulnerability in the HTTP module of the Cisco Security Manager CSM could allow an unauthenticated, remote attacker to conduct reflective cross-site scripting attacks. The vulnerability is due to insufficient validation of user-supplied input submitted to the vulnerable CSM web interface. An...

[SECURITY] Fedora 21 Update: libxml2-2.9.1-6.fc21

This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX strea...

Heap overflow

The HTTP module in the 1 Branch Intelligent Management System BIMS and 2 web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, S7800, and S8500 switches does not check whether HTTP data is longer than the value of the Content-Length field, which allows remot...

Stack overflow

Stack-based buffer overflow in the HTTP module in the 1 Branch Intelligent Management System BIMS and 2 web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, S7800, and S8500 switches allows remote attackers to execute arbitrary code via a long URI...

Design/Logic Flaw

The HTTP module in the 1 Branch Intelligent Management System BIMS and 2 web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, and S7800 switches uses predictable Session ID values, which makes it easier for remote attackers to hijack sessions via a...

CVE-2012-6570

The HTTP module in the 1 Branch Intelligent Management System BIMS and 2 web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, S7800, and S8500 switches does not check whether HTTP data is longer than the value of the Content-Length field, which allows remot...

CVE-2012-6571

The HTTP module in the 1 Branch Intelligent Management System BIMS and 2 web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, and S7800 switches uses predictable Session ID values, which makes it easier for remote attackers to hijack sessions via a...

CVE-2012-6569

Stack-based buffer overflow in the HTTP module in the 1 Branch Intelligent Management System BIMS and 2 web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, S7800, and S8500 switches allows remote attackers to execute arbitrary code via a long URI...

PT-2013-2024

Name of the Vulnerable Software and Affected Versions Huawei BIMS and web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, S7800, and S8500 switches affected versions not specified Description The issue concerns the HTTP module in the affected systems, whic...

PT-2013-2025

Name of the Vulnerable Software and Affected Versions Huawei BIMS and web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, and S7800 switches affected versions not specified Description The issue concerns the HTTP module in the affected systems, which...

CVE-2012-6571: Undefined Security Weakness

The HTTP module in the 1 Branch Intelligent Management System BIMS and 2 web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, and S7800 switches uses predictable Session ID values, which makes it easier for remote attackers to hijack sessions via a...

PT-2013-2023

Name of the Vulnerable Software and Affected Versions Huawei Branch Intelligent Management System BIMS affected versions not specified Huawei AR routers affected versions not specified Huawei S2000, S3000, S3500, S3900, S5100, S5600, S7800, and S8500 switches affected versions not specified...

CVE-2012-6569: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the HTTP module in the 1 Branch Intelligent Management System BIMS and 2 web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, S7800, and S8500 switches allows remote attackers to execute arbitrary code via a long URI...

[SECURITY] Fedora 16 Update: libxml2-2.7.8-8.fc16

This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX strea...

[SECURITY] Fedora 17 Update: libxml2-2.7.8-9.fc17

This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX strea...

Security Advisory-HTTP Session Management Vulnerability in HTTP Module

Branch Intelligent Management System BIMS and Web management is provided by Huawei for network and device management. Both BIMS and Web management use HTTP. Therefore, to use BIMS and Web management, you must enable HTTP. Because HTTP session ID generation is weak and predictable, an attacker can...