Cisco IOS SSL VPN Denial of Service Vulnerability

Cisco IOS Software contains a vulnerability that could allow an authenticated, remote attacker to cause a denial of service DoS condition on a targeted system. The vulnerability is due to an error in the SSL VPN component of the affected software. An authenticated, remote attacker could exploit...

Barracuda SSL VPN crossite scripting

Multiple crossite scripting conditions...

Barracuda SSL VPN 680 - Cross Site Scripting Vulnerabilities

Title: ====== Barracuda SSL VPN 680 - Cross Site Scripting Vulnerabilities Date: ===== 2012-07-16 References: =========== http://vulnerability-lab.com/getcontent.php?id=561 Barracuda Networks Security ID: BNSEC-278 VL-ID: ===== 561 Common Vulnerability Scoring System:...

CVE-2012-4739

Multiple cross-site scripting XSS vulnerabilities in Barracuda SSL VPN before 2.2.2.203 2012-07-05 allow remote attackers to inject arbitrary web script or HTML via the 1 policyLaunching, 2 resourcePrefix, or 3 actionPath parameter in showUserResourceCategories.do; 4 list or 5 path parameter to...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Barracuda SSL VPN before 2.2.2.203 2012-07-05 allow remote attackers to inject arbitrary web script or HTML via the 1 policyLaunching, 2 resourcePrefix, or 3 actionPath parameter in showUserResourceCategories.do; 4 list or 5 path parameter to...

CVE-2012-4739

CVE-2012-4739 concerns multiple XSS vulnerabilities in Barracuda SSL VPN before version 2.2.2.203 (2012-07-05). The flaws allow remote attackers to inject arbitrary web script or HTML through parameters in showUserResourceCategories.do (policyLaunching, resourcePrefix, actionPath), fileSystem.do ...

CVE-2012-4739

Multiple cross-site scripting XSS vulnerabilities in Barracuda SSL VPN before 2.2.2.203 2012-07-05 allow remote attackers to inject arbitrary web script or HTML via the 1 policyLaunching, 2 resourcePrefix, or 3 actionPath parameter in showUserResourceCategories.do; 4 list or 5 path parameter to...

PT-2012-5565

Name of the Vulnerable Software and Affected Versions Barracuda SSL VPN versions prior to 2.2.2.203 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via several parameters in different API endpoints, such as the policyLaunching,...

CVE-2012-4739: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Barracuda SSL VPN before 2.2.2.203 2012-07-05 allow remote attackers to inject arbitrary web script or HTML via the 1 policyLaunching, 2 resourcePrefix, or 3 actionPath parameter in showUserResourceCategories.do; 4 list or 5 path parameter to...

Cisco IOS Clientless SSL VPN DoS

The remote Cisco IOS device is configured for clientless SSL VPN. It is, therefore, affected by a denial of service vulnerability due to an unspecified flaw that causes a device reload when using a web browser to refresh the SSL VPN portal page. A remote, authenticated attacker can exploit this t...

Design/Logic Flaw

Cisco IOS 15.1 and 15.2, when a clientless SSL VPN is configured, allows remote authenticated users to cause a denial of service device reload by using a web browser to refresh the SSL VPN portal page, as demonstrated by the Android browser, aka Bug ID CSCtr86328...

CVE-2012-1344

Cisco IOS 15.1 and 15.2, when a clientless SSL VPN is configured, allows remote authenticated users to cause a denial of service device reload by using a web browser to refresh the SSL VPN portal page, as demonstrated by the Android browser, aka Bug ID CSCtr86328...

CVE-2012-1344

Cisco IOS 15.1 and 15.2, when a clientless SSL VPN is configured, allows remote authenticated users to cause a denial of service device reload by using a web browser to refresh the SSL VPN portal page, as demonstrated by the Android browser, aka Bug ID CSCtr86328...

CVE-2012-1344

Cisco IOS 15.1/15.2 clientless SSL VPN is vulnerable to a DoS: refreshing the SSL VPN portal page in a browser can cause a device reload, exploitable by remote authenticated users. The issue (Bug CSCtr86328) is documented in Cisco advisory Cisco-SA-20120810-CVE-2012-1344; remediation involves upd...

PT-2012-3199

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.1 through 15.2 Description The issue allows remote authenticated users to cause a denial of service, resulting in a device reload. This can be achieved by using a web browser to refresh the SSL VPN portal page when a...

CVE-2012-1344: Improper Restriction of Operations within the Bounds of a Memory Buffer

Cisco IOS 15.1 and 15.2, when a clientless SSL VPN is configured, allows remote authenticated users to cause a denial of service device reload by using a web browser to refresh the SSL VPN portal page, as demonstrated by the Android browser, aka Bug ID CSCtr86328...

Barracuda SSL VPN 680 Cross Site Scripting

Title: ====== Barracuda SSL VPN 680 - Cross Site Scripting Vulnerabilities Date: ===== 2012-07-16 References: =========== http://vulnerability-lab.com/getcontent.php?id=561 Barracuda Networks Security ID: BNSEC-278 VL-ID: ===== 561 Common Vulnerability Scoring System:...

CVE-2012-4043

Cross-site scripting XSS vulnerability in global-protect/login.esp in Palo Alto Networks Global Protect Portal, Global Protect Gateway, and SSL VPN portals 3.1.x through 3.1.11 and 4.0.x through 4.0.5 allows remote attackers to inject arbitrary web script or HTML via the inputStr parameter in a...

CVE-2012-4043

CVE-2012-4043 is an XSS vulnerability in Palo Alto Networks GlobalProtect portals (Portal, Gateway, SSL VPN) where the inputStr parameter in the Login action can be abused to inject arbitrary script/HTML. Affected versions are GlobalProtect 3.1.x up to 3.1.11 and 4.0.x up to 4.0.5. The provided d...

PT-2012-5163

Name of the Vulnerable Software and Affected Versions Palo Alto Networks Global Protect Portal, Global Protect Gateway, and SSL VPN portals versions 3.1.x through 3.1.11 Palo Alto Networks Global Protect Portal, Global Protect Gateway, and SSL VPN portals versions 4.0.x through 4.0.5 Description ...