F-Secure Messaging Security Gateway 'new'参数跨站脚本漏洞

Bugtraq ID:66959 CVE ID:CVE-2014-2844 F-Secure Messaging Security Gateway是一款消息安全网关解决方案。 F-Secure Messaging Security Gateway存在一个反射型跨站脚本漏洞，允许攻击者构建恶意URI，诱使用户解析，可获得敏感Cookie，劫持会话或在客户端上进行恶意操作。 0 F-Secure Messaging Security Gateway 7.5.0 F-Secure Messaging Security Gateway 7.5.0 Patch...

F-Secure Messaging Security Gateway 7.5.0.892 Cross Site Scripting

F-Secure Messaging Security Gateway version 7.5.0.892 suffers from a reflective cross site scripting vulnerability. I. VULNERABILITY ------------------------- Reflected XSS Attacks vulnerabilities F-Secure Messaging Security Gateway V7.5.0.892 II. BACKGROUND ------------------------- F-Secure...

CVE-2014-2844

Cross-site scripting XSS vulnerability in F-Secure Messaging Secure Gateway 7.5.0 before Patch 1862 allows remote authenticated administrators to inject arbitrary web script or HTML via the new parameter in the SysUser module to admin...

Cross site scripting

Cross-site scripting XSS vulnerability in F-Secure Messaging Secure Gateway 7.5.0 before Patch 1862 allows remote authenticated administrators to inject arbitrary web script or HTML via the new parameter in the SysUser module to admin...

CVE-2014-2844

Cross-site scripting XSS vulnerability in F-Secure Messaging Secure Gateway 7.5.0 before Patch 1862 allows remote authenticated administrators to inject arbitrary web script or HTML via the new parameter in the SysUser module to admin...

CVE-2014-2844

CVE-2014-2844 describes a reflected XSS in F-Secure Messaging Secure Gateway 7.5.0 prior to patch 1862. The issue results from the SysUser module’s new parameter allowing an authenticated admin to inject arbitrary web script/HTML when processing input, enabling potential cookie access or session ...

CVE-2014-2844: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in F-Secure Messaging Secure Gateway 7.5.0 before Patch 1862 allows remote authenticated administrators to inject arbitrary web script or HTML via the new parameter in the SysUser module to admin...

PT-2014-4913

Name of the Vulnerable Software and Affected Versions F-Secure Messaging Secure Gateway version 7.5.0 before Patch 1862 Description A cross-site scripting XSS issue allows remote authenticated administrators to inject arbitrary web script or HTML via the new parameter in the SysUser module to...

DEBIAN-CVE-2014-2744

plugins/modcompression.lua in 1 Prosody before 0.9.4 and 2 Lightwitch Metronome through 3.4 negotiates stream compression while a session is unauthenticated, which allows remote attackers to cause a denial of service resource consumption via compressed XML elements in an XMPP stream, aka an...

CVE-2014-2542

Cross-site scripting XSS vulnerability in the Rendezvous Daemon rvd, Rendezvous Routing Daemon rvrd, Rendezvous Secure Daemon rvsd, and Rendezvous Secure Routing Daemon rvsrd in TIBCO Rendezvous before 8.4.2, Messaging Appliance before 8.7.1, and Substation ES before 2.8.1 allows remote attackers...

Improper access control

The Rendezvous Daemon rvd, Rendezvous Routing Daemon rvrd, Rendezvous Secure Daemon rvsd, and Rendezvous Secure Routing Daemon rvsrd in TIBCO Rendezvous before 8.4.2, Messaging Appliance before 8.7.1, and Substation ES before 2.8.1 do not properly implement access control, which allows remote...

Cross site scripting

Cross-site scripting XSS vulnerability in the Rendezvous Daemon rvd, Rendezvous Routing Daemon rvrd, Rendezvous Secure Daemon rvsd, and Rendezvous Secure Routing Daemon rvsrd in TIBCO Rendezvous before 8.4.2, Messaging Appliance before 8.7.1, and Substation ES before 2.8.1 allows remote attackers...

Buffer overflow

Buffer overflow in the Rendezvous Daemon rvd, Rendezvous Routing Daemon rvrd, Rendezvous Secure Daemon rvsd, and Rendezvous Secure Routing Daemon rvsrd in TIBCO Rendezvous before 8.4.2, Messaging Appliance before 8.7.1, and Substation ES before 2.8.1 allows remote attackers to execute arbitrary...

CVE-2014-2541

The CVE-2014-2541 issue affects TIBCO Rendezvous components: Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), and Rendezvous Secure Routing Daemon (rvsrd). The root cause is improper access control in these components, as deployed in TIBCO Rendezvous bef...

CVE-2014-2542

CVE-2014-2542 describes a cross-site scripting (XSS) vulnerability in TIBCO Rendezvous components: Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), and Rendezvous Secure Routing Daemon (rvsrd). Affected versions are Rendezvous before 8.4.2, Messaging App...

CVE-2014-2542

Cross-site scripting XSS vulnerability in the Rendezvous Daemon rvd, Rendezvous Routing Daemon rvrd, Rendezvous Secure Daemon rvsd, and Rendezvous Secure Routing Daemon rvsrd in TIBCO Rendezvous before 8.4.2, Messaging Appliance before 8.7.1, and Substation ES before 2.8.1 allows remote attackers...

Microsoft Internet Explorer CVE-2014-1753 Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions. Technologies Affected Avaya Aura Conferencing Standard Avaya...

CVE-2014-2541: Undefined Security Weakness

The Rendezvous Daemon rvd, Rendezvous Routing Daemon rvrd, Rendezvous Secure Daemon rvsd, and Rendezvous Secure Routing Daemon rvsrd in TIBCO Rendezvous before 8.4.2, Messaging Appliance before 8.7.1, and Substation ES before 2.8.1 do not properly implement access control, which allows remote...

CVE-2014-2542: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Rendezvous Daemon rvd, Rendezvous Routing Daemon rvrd, Rendezvous Secure Daemon rvsd, and Rendezvous Secure Routing Daemon rvsrd in TIBCO Rendezvous before 8.4.2, Messaging Appliance before 8.7.1, and Substation ES before 2.8.1 allows remote attackers...

CVE-2014-2543: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Rendezvous Daemon rvd, Rendezvous Routing Daemon rvrd, Rendezvous Secure Daemon rvsd, and Rendezvous Secure Routing Daemon rvsrd in TIBCO Rendezvous before 8.4.2, Messaging Appliance before 8.7.1, and Substation ES before 2.8.1 allows remote attackers to execute arbitrary...