Cisco FireSIGHT Management Center FireSIGHT System Software Cross-Site Scripting Vulnerability

Cisco FireSIGHT Management Center is the United States Cisco Cisco company's set of support for centralized management of the use of FirePOWER Services Cisco ASA and Cisco FirePOWER network security equipment network security and operational functions of the management center software. A cross-si...

CVE-2015-0707

Cisco FireSIGHT System Software versions 5.3.1.1 and 6.0.0 in FireSIGHT Management Center are affected by a cross-site scripting (XSS) vulnerability. The issue allows remote authenticated users to inject arbitrary web script or HTML via an unspecified parameter (Bug ID CSCus85425). Impact is web ...

CVE-2015-0706

Open redirect vulnerability in Cisco FireSIGHT System Software 5.3.1.1, 5.3.1.2, and 6.0.0 in FireSIGHT Management Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted HTTP header, aka Bug IDs CSCut06060, CSCut06056, and CSCus98966...

CVE-2015-0706

Cisco FireSIGHT Management Center/Open Redirect: A vulnerability in the web framework allows an unauthenticated, remote attacker to inject a crafted HTTP header, causing users to be redirected to arbitrary sites and enabling phishing. Affected are FireSIGHT System Software 5.3.1.1, 5.3.1.2, and 6...

PT-2015-4827

Name of the Vulnerable Software and Affected Versions Cisco FireSIGHT System Software versions 5.3.1.1 through 5.3.1.2 Cisco FireSIGHT System Software version 6.0.0 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted HT...

CVE-2015-0706: Undefined Security Weakness

Open redirect vulnerability in Cisco FireSIGHT System Software 5.3.1.1, 5.3.1.2, and 6.0.0 in FireSIGHT Management Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted HTTP header, aka Bug IDs CSCut06060, CSCut06056, and CSCus98966...

CVE-2015-0707: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Cisco FireSIGHT System Software 5.3.1.1 and 6.0.0 in FireSIGHT Management Center allows remote authenticated users to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCus85425...

Cisco ONS 15454控制卡HTTP URI拒绝服务漏洞

Bugtraq ID:66686 CVE ID:CVE-2014-2142 Cisco ONS 15454是一款多业务传输平台。 Cisco ONS 15454控制卡WEB接口存在安全漏洞，由于不正确解析HTTP URI，允许攻击者发送特制的HTTP请求，可使控制卡重载。 0 Cisco ONS 15454 System Software 目前厂商已经发布了升级补丁以修复漏洞，请下载使用： http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2142...

PT-2013-5220

Name of the Vulnerable Software and Affected Versions HP Intelligent Management Center iMC versions affected versions not specified HP IMC Branch Intelligent Management System Software Module aka BIMS versions affected versions not specified Description The issue allows remote attackers to execut...

CVE-2013-4822: Undefined Security Weakness

Unspecified vulnerability in HP Intelligent Management Center iMC and HP IMC Branch Intelligent Management System Software Module aka BIMS allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1606...

CVE-2013-4823: Undefined Security Weakness

Unspecified vulnerability in HP Intelligent Management Center iMC and HP IMC Branch Intelligent Management System Software Module aka BIMS allows remote attackers to obtain sensitive information via unknown vectors, aka ZDI-CAN-1607...

Xerox ColorQube Multiple Unspecified Vulnerabilities (XRX13-006)

According to its model number and software version, the remote host is a Xerox ColorQube device that is affected by multiple, unspecified vulnerabilities. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70370; scriptversion"1.6"; scriptcvsdate"Date: 2018/11/15...

CVE-2013-3454

Cisco TelePresence System Software 1.10.1 and earlier on 500, 13X0, 1X00, 30X0, and 3X00 devices, and 6.0.3 and earlier on TX 9X00 devices, has a default password for the pwrecovery account, which makes it easier for remote attackers to modify the configuration or perform arbitrary actions via...

PT-2013-4406

Name of the Vulnerable Software and Affected Versions Cisco TelePresence System Software versions 1.10.1 and earlier on 500, 13X0, 1X00, 30X0, and 3X00 devices Cisco TelePresence System Software version 6.0.3 and earlier on TX 9X00 devices Description The issue allows remote attackers to modify t...

CVE-2013-3454: Undefined Security Weakness

Cisco TelePresence System Software 1.10.1 and earlier on 500, 13X0, 1X00, 30X0, and 3X00 devices, and 6.0.3 and earlier on TX 9X00 devices, has a default password for the pwrecovery account, which makes it easier for remote attackers to modify the configuration or perform arbitrary actions via...

[security bulletin] HPSBHF02878 rev.1 - HP Smart Zero Client, Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03757330 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03757330 Version: 1 HPSBHF02878 rev....

PT-2013-3005

Name of the Vulnerable Software and Affected Versions Cisco TelePresence System Software affected versions not specified Description The issue is related to the improper handling of inactive t-shell sessions, allowing remote authenticated users to cause a denial of service by consuming memory and...

CVE-2013-1246: Undefined Security Weakness

Cisco TelePresence System Software does not properly handle inactive t-shell sessions, which allows remote authenticated users to cause a denial of service memory consumption and service outage by establishing multiple SSH connections, aka Bug ID CSCug77610...

Cross site scripting

Cross-site scripting XSS vulnerability in the WebAAA login functionality wbalogin.html in Juniper Networks Mobility System Software MSS 7.6.x before 7.6.3, 7.7.x before 7.7.1, 7.5.x before 7.5.3, and other unspecified versions before 7.4 and 7.3 allows remote attackers to inject arbitrary web...

CVE-2012-1038

Cross-site scripting XSS vulnerability in the WebAAA login functionality wbalogin.html in Juniper Networks Mobility System Software MSS 7.6.x before 7.6.3, 7.7.x before 7.7.1, 7.5.x before 7.5.3, and other unspecified versions before 7.4 and 7.3 allows remote attackers to inject arbitrary web...