207 matches found
CVE-2010-5190
Technical details about CVE-2010-5190 are not publicly provided in the connected documents. The available sources reiterate the same description. Monitor for updated advisories to obtain concrete product/version, impact, or remediation information.
CVE-2011-5126
The CVE-2011-5126 entry concerns Blue Coat ProxySG (SGOS) versions affected by an information disclosure flaw. Specifically, Blue Coat ProxySG 6.1 prior to SGOS 6.1.5.1 and 6.2 prior to SGOS 6.2.2.1 write the secure heap to core images. This allows context-dependent attackers to obtain sensitive ...
CVE-2011-5124
Stack-based buffer overflow in the BCAAA component before build 60258, as used by Blue Coat ProxySG 4.2.3 through 6.1 and ProxyOne, allows remote attackers to execute arbitrary code via a large packet to the synchronization port 16102/tcp...
CVE-2011-5126
Blue Coat ProxySG 6.1 before SGOS 6.1.5.1 and 6.2 before SGOS 6.2.2.1 writes the secure heap to core images, which allows context-dependent attackers to obtain sensitive authentication information by leveraging read access to a downloaded core file...
CVE-2010-5190
The Active Content Transformation functionality in Blue Coat ProxySG before SGOS 4.3.4.2, 5.x before SGOS 5.4.5.1, 5.5 before SGOS 5.5.4.1, and 6.x before SGOS 6.1.2.1 allows remote attackers to bypass JavaScript detection via HTML entities...
CVE-2010-5192
Cross-site scripting XSS vulnerability in the Java Management Console in Blue Coat ProxySG before SGOS 4.3.4.1, 5.x before SGOS 5.4.5.1, 5.5 before SGOS 5.5.4.1, and 6.x before SGOS 6.1.1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2010-5192
An XSS vulnerability in the Java Management Console of Blue Coat ProxySG (SGOS) affecting: SGOS < 4.3.4.1; SGOS < 5.4.5.1 (5.x); SGOS < 5.5.4.1 (5.5); SGOS
CVE-2010-5189
CVE-2010-5189 affects Blue Coat ProxySG (SGOS) prior to 4.3.4.1, 5.x prior to 5.4.5.1, 5.5 prior to 5.5.4.1, and 6.x prior to 6.1.1.1. The issue allows remote authenticated users to execute arbitrary CLI commands by leveraging read-only administrator privileges and establishing an HTTPS session. ...
CVE-2011-5124
Summary (CVE-2011-5124) : A stack-based buffer overflow in the Blue Coat BCAAA component (pre-60258 builds) used by ProxySG 4.2.3–6.1 and ProxyOne allows remote code execution via a crafted 16102/tcp packet. AFFECTED: Blue Coat ProxySG/ProxyOne with BCAAA prior to build 60258. IMPACT: arbitrary c...
CVE-2010-5189
Blue Coat ProxySG before SGOS 4.3.4.1, 5.x before SGOS 5.4.5.1, 5.5 before SGOS 5.5.4.1, and 6.x before SGOS 6.1.1.1 allows remote authenticated users to execute arbitrary CLI commands by leveraging read-only administrator privileges and establishing an HTTPS session...
Design/Logic Flaw
Blue Coat ProxySG, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet...
CVE-2009-1211
Blue Coat ProxySG, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet...
CVE-2009-1211
Blue Coat ProxySG, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet...
CVE-2009-1211
CVE-2009-1211 affects Blue Coat ProxySG when in transparent interception mode. The vulnerability arises because the appliance uses the HTTP Host header to select the remote endpoint, allowing a crafted page to cause a client to send requests with a modified Host header. This can bypass access con...
Blue Coat Systems ProxySG 3.x Default Password (deprecated)
Binary data 4843.prm...
Cross site scripting
Cross-site scripting XSS vulnerability in the management console in Blue Coat ProxySG before 4.2.6.1, and 5.x before 5.2.2.5, allows remote attackers to inject arbitrary web script or HTML by modifying the URL that is used for loading Certificate Revocation Lists...
CVE-2007-5796
Cross-site scripting XSS vulnerability in the management console in Blue Coat ProxySG before 4.2.6.1, and 5.x before 5.2.2.5, allows remote attackers to inject arbitrary web script or HTML by modifying the URL that is used for loading Certificate Revocation Lists...
CVE-2007-5796
The CVE-2007-5796 entry describes an XSS flaw in the Blue Coat ProxySG management console, exploitable by modifying the URL used to load Certificate Revocation Lists. Affected versions are ProxySG < 4.2.6.1 and 5.x
CVE-2007-5796
Cross-site scripting XSS vulnerability in the management console in Blue Coat ProxySG before 4.2.6.1, and 5.x before 5.2.2.5, allows remote attackers to inject arbitrary web script or HTML by modifying the URL that is used for loading Certificate Revocation Lists...
