402 matches found
Dell OpenManage Server Administrator index_main.htm DOM-based XSS
The version of Dell OpenManage Server Administrator hosted on the remote web server has a cross-site scripting vulnerability. Making a specially crafted request for indexmain.htm can result in client-side script injection. An attacker could exploit this by tricking a user into requesting a...
Dell OpenManage Server Administrator - Cross-Site Scripting
source: https://www.securityfocus.com/bid/57212/info Dell OpenManage Server Administrator is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
Dell OpenManage Server Administrator - Cross-Site Scripting
Dell OpenManage Server Administrator - Cross-Site Scripting source: https://www.securityfocus.com/bid/57212/info Dell OpenManage Server Administrator is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to...
Dell OpenManage Server Administrator omalogin.html DOM-based XSS
The version of Dell OpenManage Server Administrator hosted on the remote web server has a cross-site scripting vulnerability. Making a specially crafted request for omalogin.html can result in client-side script injection. An attacker could exploit this by tricking a user into requesting a...
CVE-2012-4955
Cross-site scripting XSS vulnerability in Dell OpenManage Server Administrator OMSA before 6.5.0.1, 7.0 before 7.0.0.1, and 7.1 before 7.1.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in Dell OpenManage Server Administrator OMSA before 6.5.0.1, 7.0 before 7.0.0.1, and 7.1 before 7.1.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2012-4955
Cross-site scripting XSS vulnerability in Dell OpenManage Server Administrator OMSA before 6.5.0.1, 7.0 before 7.0.0.1, and 7.1 before 7.1.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2012-4955
Dell OpenManage Server Administrator (OMSA) prior to 6.5.0.1, 7.0 prior to 7.0.0.1, and 7.1 prior to 7.1.0.1 contains a cross-site scripting (XSS) vulnerability. The Nessus entry specifies DOM-based XSS in omalogin.html and mentions a related vector in omatasks.html, enabling remote attackers to ...
Dell OpenManage Server Administrator contains a cross-site scripting vulnerability
Overview Dell OpenManage Server Administrator version 7.1 and earlier contains a cross-site scripting vulnerability. Description Dell OpenManage Server Administrator version 7.1 and earlier contains a cross-site scripting vulnerability CWE-79. --- Impact A remote attacker may be able to execute...
Dell OpenManage Server Administrator 'HelpViewer' Redirect
Dell OpenManage Server Administrator appears to be installed on the remote host. The installed version fails to validate input passed to the 'file' parameter in '/servlet/HelpViewer' before redirecting an unauthenticated user to the location it specifies. An attacker may be able to exploit this...
Dell OpenManage POST Request Heap Overflow (win32)
This module exploits a heap overflow in the Dell OpenManage Web Server omws32.exe, versions 3.2-3.7.1. The vulnerability exists due to a boundary error within the handling of POST requests, where the application input is set to an overly long file name. This module will crash the web server,...
CVE-2006-3470
The Dell Openmanage CD launches X11 and SSH daemons that do not require authentication, which allows remote attackers to gain privileges...
CVE-2006-3470
The CVE-2006-3470 entry concerns the Dell OpenManage CD, where X11 and SSH daemons are launched without authentication. This allows remote attackers to gain privileges on affected systems. The available connected documents confirm the vulnerability is due to unauthenticated services started by th...
CVE-2006-3470
The Dell Openmanage CD launches X11 and SSH daemons that do not require authentication, which allows remote attackers to gain privileges...
Dell Openmanage CD launches unauthenticated services
Overview Dell Openmanage CD launches X11 and SSH daemons that permit unauthenticated users full access. Description The Dell Openmanage CD gives system administrators using Dell servers access to drivers, diagnostic tools, remote system control, and other utilities. When loaded, the CD launches X...
Dell OpenManage Web Server <= 3.7.1
Dell OpenManage Web Servers 3.2.0-3.7.1 are vulnerable to a heap based buffer overflow attack. A proof of concept denial of service attack has been released. SPDX-FileCopyrightText: 2004 Tomi Hanninen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
CVE-2004-0331
Heap-based buffer overflow in Dell OpenManage Web Server 3.4.0 allows remote attackers to cause a denial of service crash via a HTTP POST with a long application variable...
Dell OpenManage Server Administrator Detection
Dell OpenManage Server Administrator OMSA, a systems management server, is running on the remote host. %NASLMINLEVEL 70300 This script was rewritten by Tenable Network Security include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid12295; scriptversion"1.23";...
CVE-2004-0331
CVE-2004-0331 describes a heap-based buffer overflow in Dell OpenManage Web Server (omws32.exe) due to a boundary error when handling POST requests. Affected versions include 3.2.0–3.7.1 (per connected advisories and the MSF module), with exploitation possible via a remote HTTP POST containing an...