XZERES 442SR Wind Turbine Cross-site Scripting Vulnerability (Update C)

OVERVIEW This updated advisory is a follow-up to the updated advisory titled ICSA-15-342-01B XZERES 442SR Wind Turbine Cross-site Scripting Vulnerability that was published March 21, 2016, on the NCCIC/ICS-CERT web site. --------- Begin Update C Part 1 of 2 -------- Independent researchers Karn...

XZERES 442SR Wind Turbine Cross-site Scripting Vulnerability

OVERVIEW This updated advisory is a follow-up to the updated advisory titled ICSA-15-342-01B XZERES 442SR Wind Turbine Cross-site Scripting Vulnerability that was published March 21, 2016, on the NCCIC/ICS-CERT web site. --------- Begin Update C Part 1 of 2 -------- Independent researchers Karn...

Fortinet FortiOS Input Validation Vulnerability

Fortinet FortiOS is a set of security operating system developed by the U.S. Fiat Fortinet company dedicated to FortiGate network security platform. The system provides users with firewall, antivirus, IPSec/SSL VPN, Web content filtering and anti-spam and other security features. A security...

SA100 : Apache Tomcat Vulnerabilities

SUMMARY Blue Coat products using affected versions of Tomcat 8.x, 7.x, and 6.x are susceptible to multiple vulnerabilities. A remote attacker may exploit these vulnerabilities to gain unauthorized read access or escalated privileges, or to conduct denial of service, HTTP request smuggling, or...

CVE-2014-2844

Cross-site scripting XSS vulnerability in F-Secure Messaging Secure Gateway 7.5.0 before Patch 1862 allows remote authenticated administrators to inject arbitrary web script or HTML via the new parameter in the SysUser module to admin...

Cross site scripting

Cross-site scripting XSS vulnerability in F-Secure Messaging Secure Gateway 7.5.0 before Patch 1862 allows remote authenticated administrators to inject arbitrary web script or HTML via the new parameter in the SysUser module to admin...

CVE-2014-2844

CVE-2014-2844 describes a reflected XSS in F-Secure Messaging Secure Gateway 7.5.0 prior to patch 1862. The issue results from the SysUser module’s new parameter allowing an authenticated admin to inject arbitrary web script/HTML when processing input, enabling potential cookie access or session ...

CVE-2014-2844

Cross-site scripting XSS vulnerability in F-Secure Messaging Secure Gateway 7.5.0 before Patch 1862 allows remote authenticated administrators to inject arbitrary web script or HTML via the new parameter in the SysUser module to admin...

Citrix Secure Gateway Unspecified Remote Code Execution

The version of Citrix Secure Gateway running on the remote host has an unspecified code execution vulnerability. This could reportedly allow a remote attacker to execute arbitrary code in the context of the Secure Gateway process. C Tenable Network Security, Inc. include"compat.inc"; if descripti...

Citrix Secure Gateway Unspecified DoS

The version of Citrix Secure Gateway running on the remote host has an unspecified denial of service vulnerability. Making a specially crafted request can result in 100% CPU utilization, causing the application to become unresponsive. A remote attacker could exploit this by sending a malicious...

Citrix Secure Gateway Installed

Citrix Secure Gateway is installed on the remote host. This application provides a secure gateway between Citrix XenApp and client devices. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid52545; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate",...

CVE-2009-2214

The Secure Gateway service in Citrix Secure Gateway 3.1 and earlier allows remote attackers to cause a denial of service CPU consumption via an unspecified request...

CVE-2009-2214

The Secure Gateway service in Citrix Secure Gateway 3.1 and earlier allows remote attackers to cause a denial of service CPU consumption via an unspecified request...

Design/Logic Flaw

The Secure Gateway service in Citrix Secure Gateway 3.1 and earlier allows remote attackers to cause a denial of service CPU consumption via an unspecified request...

CVE-2009-2214

The Secure Gateway service in Citrix Secure Gateway 3.1 and earlier allows remote attackers to cause a denial of service CPU consumption via an unspecified request...

CVE-2009-2214

Citrix Secure Gateway 3.1 and earlier are affected by CVE-2009-2214. The Secure Gateway service may be subjected to a DoS via an unspecified request that can cause elevated CPU utilization and service unresponsiveness; some sources describe potential 100% CPU usage and the remote attacker ability...

KLA10114 DoS vulnerability in Citrix Secure Gateway

An unspecified vulnerability was found in the Citrix Secure Gateway. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited from the network via a specially designed request. Original advisories Citrix bulletin Related products...