737 matches found
CVE-2020-7284
McAfee Network Security Management (NSM) prior to 10.1.7.7 is affected by CVE-2020-7284: a local attacker can exploit a command-line interface weakness to access the root account by issuing crafted commands from the restricted CLI, leading to a complete confidentiality, integrity, and availabilit...
Protecting Unmanaged & IoT Devices: Why Traditional Security Tools Fail
We are currently experiencing the single largest explosion of network-enabled devices that we’ve ever witnessed. Many of these devices are running on the same networks as critical business solutions and may even be connecting directly to critical assets or delivering a critical capability...
Intel CSME and TXE Input Validation Error Vulnerability
Intel Converged Security and Management Engine CSME and Intel TXE are both products of Intel Corporation, U.S.A. Intel Converged Security and Management Engine is a security management engine. Intel TXE is a trust execution engine with hardware authentication capabilities for use in CPUs central...
EyouCMS 1.4.6 - Persistent Cross-Site Scripting
Exploit Title: EyouCMS 1.4.6 - Persistent Cross-Site Scripting Date: 2020-05-28 Exploit Author: China Banking and Insurance Information Technology Management Co.,Ltd. Vendor Homepage: https://eyoucms.com Software Link: https://qiniu.eyoucms.com/EyouCMS-V1.4.6-UTF8-SP2.zip Version: EyouCMS V1.4.6...
CVE-2020-9046 Kantech EntraPass Security Management Software - System Permissions Vulnerability
A vulnerability in all versions of Kantech EntraPass Editions could potentially allow an authorized low-privileged user to gain full system-level privileges by replacing critical files with specifically crafted files...
Cisco Content Security Management Appliance Open Redirect Multiple Vulnerabilities (cisco-sa-sma-opn-rdrct-yPPMdsMQ)
According to its self-reported version, Cisco Content Security Management Appliance SMA is affected by multiple vulnerabilities in the web-based GUI due to improper input validation of the parameters of an HTTP request. An unauthenticated, remote attacker can exploit these, by intercepting an HTT...
The vulnerability of the graphical interface of the Cisco Content Security Management Appliance allows attackers to redirect users to arbitrary websites and carry out phishing attacks using specially crafted URLs.
The vulnerability of the graphical interface of the Cisco Content Security Management Appliance software for content management systems involves the redirection of URLs to insecure websites. Exploiting this vulnerability allows a malicious actor to redirect users to arbitrary websites and carry o...
CISO stress-busters: post #1 overcoming obstacles
As part of the launch of the U.S. space program’s moon shot, President Kennedy famously said we do these things “not because they are easy, but because they are hard.” The same can be said for the people responsible for security at their organizations; it is not a job one takes because it is easy...
CVE-2020-3178
Multiple vulnerabilities in the web-based GUI of Cisco AsyncOS Software for Cisco Content Security Management Appliance SMA could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerabilities are due to improper input validation of the parameters of an...
CVE-2020-3178
Multiple vulnerabilities in the web-based GUI of Cisco AsyncOS Software for Cisco Content Security Management Appliance SMA could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerabilities are due to improper input validation of the parameters of an...
Open redirect
Multiple vulnerabilities in the web-based GUI of Cisco AsyncOS Software for Cisco Content Security Management Appliance SMA could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerabilities are due to improper input validation of the parameters of an...
CVE-2020-3178 Cisco Content Security Management Appliance Open Redirect Vulnerabilities
Multiple vulnerabilities in the web-based GUI of Cisco AsyncOS Software for Cisco Content Security Management Appliance SMA could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerabilities are due to improper input validation of the parameters of an...
CVE-2020-3178 Cisco Content Security Management Appliance Open Redirect Vulnerabilities
Multiple vulnerabilities in the web-based GUI of Cisco AsyncOS Software for Cisco Content Security Management Appliance SMA could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerabilities are due to improper input validation of the parameters of an...
Cisco Content Security Management Appliance Open Redirect Vulnerabilities
Multiple vulnerabilities in the web-based GUI of Cisco AsyncOS Software for Cisco Content Security Management Appliance SMA could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerabilities are due to improper input validation of the parameters of an...
EMC RSA Authentication Manager < 8.4 P11 XSS Vulnerability (DSA-2020-066)
The version of EMC RSA Authentication Manager running on the remote host is prior to 8.4 Patch 11. It is, therefore, affected by stored cross-site scripting vulnerability in the Security Console. A authorized remote user could exploit this vulnerability to store arbitrary HTML or JavaScript code...
The vulnerability of the message filtering function of Cisco AsyncOS software in Cisco Email Security Appliances and Cisco Content Security Management Appliances, as well as in Cisco Web Security Appliances, allows attackers to trigger service interruptions.
The vulnerability of the message filtering function in Cisco AsyncOS software for Cisco Email Security Appliances, Cisco Content Security Management Appliances, and Cisco Web Security Appliances is related to insufficient input validation. Exploiting this vulnerability can allow an attacker to...
McAfee Network Security Management Cross-Site Scripting Vulnerability (CNVD-2020-20985)
McAfee Network Security Management NSM is a suite of network security solutions from McAfee that enables real-time monitoring of deployed McAfee intrusion prevention systems across the network. A cross-site scripting vulnerability exists in McAfee NSM versions prior to 9.1. The vulnerability stem...
McAfee Network Security Management Cross-Site Scripting Vulnerability (CNVD-2020-21065)
McAfee Network Security Management NSM is a suite of network security solutions from McAfee that enables real-time monitoring of deployed McAfee intrusion prevention systems across the network. A cross-site scripting vulnerability exists in McAfee Network Security Management 9.1 and prior version...