254 matches found
D-Link DCS - 'security.cgi' Cross-Site Request Forgery
source: https://www.securityfocus.com/bid/52134/info The D-Link DCS-900, DCS-2000, and DCS-5300 are prone to a cross-site request-forgery vulnerability. Successful exploits may allow attackers to run privileged commands on the affected device, change configuration, cause denial-of-service...
D-Link DCS - security.cgi Cross-Site Request Forgery
D-Link DCS - security.cgi Cross-Site Request Forgery source: https://www.securityfocus.com/bid/52134/info The D-Link DCS-900, DCS-2000, and DCS-5300 are prone to a cross-site request-forgery vulnerability. Successful exploits may allow attackers to run privileged commands on the affected device,...
Mambo 4.6.5 - 'index.php' Cross-Site Request Forgery
source: https://www.securityfocus.com/bid/49315/info Mambo CMS is prone to a cross-site request-forgery vulnerability. Attackers can exploit this issue by tricking an unsuspecting user into visiting a malicious Web page. The page will consist of specially crafted script code designed to perform...
Mambo 4.6.5 - index.php Cross-Site Request Forgery
Mambo 4.6.5 - index.php Cross-Site Request Forgery source: https://www.securityfocus.com/bid/49315/info Mambo CMS is prone to a cross-site request-forgery vulnerability. Attackers can exploit this issue by tricking an unsuspecting user into visiting a malicious Web page. The page will consist of...
Cisco DPC2100 2.0.2 r1256-060303 - Multiple Security Bypass / Cross-Site Request Forgery Vulnerabilities
source: https://www.securityfocus.com/bid/40346/info Cisco DPC2100 formerly Scientific Atlanta DPC2100 is prone to multiple security-bypass and cross-site request-forgery vulnerabilities. Successful exploits may allow attackers to run privileged commands on the affected device, change configurati...
Cisco DPC2100 2.0.2 r1256-060303 - Multiple Security Bypass Cross-Site Request Forgery Vulnerabilities
Cisco DPC2100 2.0.2 r1256-060303 - Multiple Security Bypass Cross-Site Request Forgery Vulnerabilities source: https://www.securityfocus.com/bid/40346/info Cisco DPC2100 formerly Scientific Atlanta DPC2100 is prone to multiple security-bypass and cross-site request-forgery vulnerabilities...
Huawei HG510 - Multiple Cross-Site Request Forgery Vulnerabilities
source: https://www.securityfocus.com/bid/38261/info Huawei HG510 is prone to multiple cross-site request-forgery vulnerabilities. Successful exploits may allow attackers to run privileged commands on the affected device, change configuration, cause denial-of-service conditions, or inject arbitra...
Huawei HG510 - Multiple Cross-Site Request Forgery Vulnerabilities
Huawei HG510 - Multiple Cross-Site Request Forgery Vulnerabilities source: https://www.securityfocus.com/bid/38261/info Huawei HG510 is prone to multiple cross-site request-forgery vulnerabilities. Successful exploits may allow attackers to run privileged commands on the affected device, change...
CA BrightStor ARCserve Backup Message Engine Insecure Methods (CVE-2007-5328)
CA BrightStor ARCserve Backup products offer data protection for distributed servers, clients, databases and applications. They provide centralized control over a series of distributed operations including Backup and Restore, Data Migration, and Threat Management. There exist unsecured Remote...
A-A-S Application Access Server Multiple Vulnerabilities
According to its version number, the remote version of A-A-S Application Access Server is prone to multiple security issues including a cross-site request-forgery vulnerability, an insecure-default-password vulnerability and an information-disclosure vulnerability. Attackers can exploit these...
CVE-2006-3569
CVE-2006-3569 affects NetApp Data ONTAP 7.0x through 7.0.4P8D9, 7.1x, 7.1.0.1x, and 7.2 RC1/RC2/RC3 used in IBM N-Series Filers. The vulnerability permits unauthorized users to access privileged commands via unknown vectors, likely due to incorrect capabilities assigned to the audit role. Documen...
CVE-2006-3569
Unspecified vulnerability in NetApp Data ONTAP 7.0x through 7.0.4P8D9, 7.1x, 7.1.0.1x, and 7.2RC1, RC2, and RC3, as used in IBM N series Filers and other products, allows unauthorized users to gain access to privileged commands via unknown vectors, probably related to incorrect capabilities with...
HP-UX vulnerable to buffer overflow in line printer daemon (rlpdaemon) via crafted print request
Overview The line printer daemon rlpdaemon on HP-UX systems enable various clients to share printers over a network. There exists a buffer overflow vulnerability in this daemon that permits remote execution of arbitrary commands with elevated privileges. Description A buffer overflow exists in...
tigris-rat-access.txt
Date: Sun, 3 Jan 1999 00:55:22 +1100 From: Robert Thomas To: [email protected] Subject: ACC's 'Tigris' Access Terminal server security vunerability.. ACC link - http://www.acc.com have been aware of this flaw for 3 months now, so I'm not springing this on them unaware. Just so you know 8- OS...