PT-2015-6465

Name of the Vulnerable Software and Affected Versions Cisco Web Security Virtual Appliance versions prior to 2015-06-25 Cisco Email Security Virtual Appliance versions prior to 2015-06-25 Cisco Security Management Virtual Appliance versions prior to 2015-06-25 Description The issue concerns the...

PT-2015-6464

Name of the Vulnerable Software and Affected Versions Cisco Web Security Virtual Appliance versions prior to 2015-06-25 Cisco Email Security Virtual Appliance versions prior to 2015-06-25 Cisco Security Management Virtual Appliance versions prior to 2015-06-25 Description The issue concerns the...

CVE-2015-4217: Exposure of Sensitive Information to an Unauthorized Actor

The remote-support feature on Cisco Web Security Virtual Appliance WSAv, Email Security Virtual Appliance ESAv, and Security Management Virtual Appliance SMAv devices before 2015-06-25 uses the same default SSH host keys across different customers' installations, which makes it easier for remote...

CVE-2015-4216: Exposure of Sensitive Information to an Unauthorized Actor

The remote-support feature on Cisco Web Security Virtual Appliance WSAv, Email Security Virtual Appliance ESAv, and Security Management Virtual Appliance SMAv devices before 2015-06-25 uses the same default SSH root authorized key across different customers' installations, which makes it easier f...

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in Web Security Virtual Appliance WSAv, Email Security Virtual Appliance ESAv, and Content Security Management Virtual Appliance SMAv software. Exploitation of one of these vulnerabilities may allow a remote attacker to take control o...

Fortigate FortiManager 1000D Multiple Privilege Escalation Vulnerabilities

FortiManager Security Management appliances allow you to centrally manage any number of Fortinet Network Security devices,from several to thousands, including FortiGate®, FortiWiFi™, and FortiCarrier™. Fortimanager is vulnerable to multiple privilege escalation attacks, including root jailbreak...

AlienVault OSSIM NBE hostname/IP handling command execution vulnerability

AlienVault OSSIM or Open Source Security Information Management is a popular open source security management system. AlienVault OSSIM handles the existence of an input validation vulnerability in NBE hostname/IP, which allows remote attackers to exploit the vulnerability by submitting a specially...

HP TippingPoint Security Management System / TippingPoint Virtual Security Management System code execution

Code execution via web interface...

Code injection

The Framework Daemon in AlienVault Unified Security Management before 4.15 allows remote attackers to execute arbitrary Python code via a crafted plugin configuration file .cfg...

CVE-2015-3446: Improper Control of Generation of Code

The Framework Daemon in AlienVault Unified Security Management before 4.15 allows remote attackers to execute arbitrary Python code via a crafted plugin configuration file .cfg...

PT-2015-6231

Name of the Vulnerable Software and Affected Versions AlienVault Unified Security Management versions prior to 4.15 Description The issue allows remote attackers to execute arbitrary Python code via a crafted plugin configuration file. This can be achieved by manipulating the plugin configuration...

AlienVault Unified Security Management Plugin Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of AlienVault Unified Security Management. Authentication is not required to exploit this vulnerability. The specific flaw exists within the AlienVault framework daemon which permits remote...

HP TippingPoint Security Management System and TippingPoint Virtual Security Management System Remote Command Execution Vulnerability

HP TippingPoint SMS is a network security management system for TippingPoint products. A remote command execution vulnerability exists in HP TippingPoint Security Management System SMS and TippingPoint Virtual Security Management System vSMS. An attacker could be allowed to exploit this...

CVE-2015-2117

HP TippingPoint Security Management System SMS and TippingPoint Virtual Security Management System vSMS before 4.1 patch 3 and 4.2 before patch 1 do not require authentication for JBoss RMI requests, which allows remote attackers to execute arbitrary code by 1 uploading this code within an archiv...

CVE-2015-2117: Improper Authentication

HP TippingPoint Security Management System SMS and TippingPoint Virtual Security Management System vSMS before 4.1 patch 3 and 4.2 before patch 1 do not require authentication for JBoss RMI requests, which allows remote attackers to execute arbitrary code by 1 uploading this code within an archiv...

IBM Security SiteProtector System Local Elevation of Privilege Vulnerability

IBM Security SiteProtector System is a centralized management system that unifies the management and analysis of network, server and endpoint security agents. A local elevation of privilege vulnerability exists in IBM Security SiteProtector System. This vulnerability could be exploited to allow a...

IT-Grundschutz, 15. EL

Zusammenfassung von Tests gem der IT-Grundschutz Kataloge mit Stand 15. Ergnzungslieferung. Diese Routinen prfen smtliche Manahmen des IT-Grundschutz des Bundesamts fr Sicherheit in der Informationstechnik BSI auf den Zielsystemen soweit die Manahmen auf automatisierte Weise abgeprft werden knnen...

AlienVault Unified Security Management cloneid SQL Injection and Scanner Binary Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of AlienVault Unified Security Management. Authentication is required to exploit this vulnerability. The specific flaws exist within the cloneid request parameter and Scanner Binary fields. An attacke...

CVE-2015-0624

The web framework in Cisco AsyncOS on Email Security Appliance ESA, Content Security Management Appliance SMA, and Web Security Appliance WSA devices allows remote attackers to trigger redirects via a crafted HTTP header, aka Bug IDs CSCur44412, CSCur44415, CSCur89630, CSCur89636, CSCur89633, and...

CVE-2015-0624

Cisco AsyncOS web framework on ESA, SMA, and WSA is vulnerable to an HTTP header injection flaw due to insufficient validation of header values (notably Host/X-Forwarded-Host). A remote attacker can trigger redirects to arbitrary URLs by sending crafted HTTP headers, potentially aided by publicly...