283 matches found
CVE-2015-0706
Cisco FireSIGHT Management Center/Open Redirect: A vulnerability in the web framework allows an unauthenticated, remote attacker to inject a crafted HTTP header, causing users to be redirected to arbitrary sites and enabling phishing. Affected are FireSIGHT System Software 5.3.1.1, 5.3.1.2, and 6...
CVE-2015-0707
Cisco FireSIGHT System Software versions 5.3.1.1 and 6.0.0 in FireSIGHT Management Center are affected by a cross-site scripting (XSS) vulnerability. The issue allows remote authenticated users to inject arbitrary web script or HTML via an unspecified parameter (Bug ID CSCus85425). Impact is web ...
Cisco ONS 15454控制卡HTTP URI拒绝服务漏洞
Bugtraq ID:66686 CVE ID:CVE-2014-2142 Cisco ONS 15454是一款多业务传输平台。 Cisco ONS 15454控制卡WEB接口存在安全漏洞，由于不正确解析HTTP URI，允许攻击者发送特制的HTTP请求，可使控制卡重载。 0 Cisco ONS 15454 System Software 目前厂商已经发布了升级补丁以修复漏洞，请下载使用： http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2142...
Xerox ColorQube Multiple Unspecified Vulnerabilities (XRX13-006)
According to its model number and software version, the remote host is a Xerox ColorQube device that is affected by multiple, unspecified vulnerabilities. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70370; scriptversion"1.6"; scriptcvsdate"Date: 2018/11/15...
CVE-2013-3454
Cisco TelePresence System Software 1.10.1 and earlier on 500, 13X0, 1X00, 30X0, and 3X00 devices, and 6.0.3 and earlier on TX 9X00 devices, has a default password for the pwrecovery account, which makes it easier for remote attackers to modify the configuration or perform arbitrary actions via...
[security bulletin] HPSBHF02878 rev.1 - HP Smart Zero Client, Unauthorized Access
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03757330 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03757330 Version: 1 HPSBHF02878 rev....
Cross site scripting
Cross-site scripting XSS vulnerability in the WebAAA login functionality wbalogin.html in Juniper Networks Mobility System Software MSS 7.6.x before 7.6.3, 7.7.x before 7.7.1, 7.5.x before 7.5.3, and other unspecified versions before 7.4 and 7.3 allows remote attackers to inject arbitrary web...
CVE-2012-1038
CVE-2012-1038 describes a cross-site scripting (XSS) vulnerability in Juniper Networks Mobility System Software (MSS) WebAAA login (wba_login.html). The issue arises in MSS 7.6.x before 7.6.3, 7.7.x before 7.7.1, 7.5.x before 7.5.3, and other unspecified versions prior to 7.4 and 7.3, where a cra...
CVE-2012-1038
Cross-site scripting XSS vulnerability in the WebAAA login functionality wbalogin.html in Juniper Networks Mobility System Software MSS 7.6.x before 7.6.3, 7.7.x before 7.7.1, 7.5.x before 7.5.3, and other unspecified versions before 7.4 and 7.3 allows remote attackers to inject arbitrary web...
Juniper Networks Mobility System Software - aaawba_login.html Cross-Site Scripting
Juniper Networks Mobility System Software - aaawbalogin.html Cross-Site Scripting source: https://www.securityfocus.com/bid/54075/info Mobility System Software is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to...
Sony: 'Very Professional, Sophisticated' Attackers Responsible for PSN Hack
Sony executives say that the people responsible for the attack that forced the company to shut down its PlayStation Network and other services and compromised data belonging to 77 million customers were “very professional, highly sophisticated” criminals who were able to infiltrate several of the...
systemsoftware Community Black index.php SQL Injection Vulnerability
Exploit for unknown platform in category web applications ==================================================================== systemsoftware Community Black index.php SQL Injection Vulnerability ====================================================================...
CVE-2009-0066
Multiple unspecified vulnerabilities in Intel system software for Trusted Execution Technology TXT allow attackers to bypass intended loader integrity protections, as demonstrated by exploitation of tboot. NOTE: as of 20090107, the only disclosure is a vague pre-advisory with no actionable...
CVE-2008-0331
Unspecified vulnerability in Funkwerk System Software before 7.4.1 PATCH 9 for certain Funkwerk Router / VPN devices allows remote attackers to cause a denial of service panic and reboot via unspecified DNS requests...
CVE-2008-0331
CVE-2008-0331 affects Funkwerk System Software on certain Funkwerk Router/VPN devices prior to 7.4.1 PATCH 9. The issue is a vulnerability that allows remote attackers to cause a denial of service (panic and reboot) via unspecified DNS requests. Root cause details are not provided in the availabl...
CVE-2008-0331
Unspecified vulnerability in Funkwerk System Software before 7.4.1 PATCH 9 for certain Funkwerk Router / VPN devices allows remote attackers to cause a denial of service panic and reboot via unspecified DNS requests...
Nexuiz game unauthorized access
gamedir command allows file system access...
dt_Multiple_vuln.txt
------------------------------------------------------------------------ Directtopics Multiple Vulnerabilities By : Morinex e-mail : [email protected] date : 08-04-2k5 shoutz : w00pie.nl Target : Directtopics Vulnerable Versions: DT 2 beta , DT2 final, 2.1, and 2.2 URL : www.directtopics.nl ...
