EUVD-2015-2862

Malware in sbrugna...

Websense TRITON V-Series appliances directory traversal vulnerability

Websense TRITON V-Series is a V-Series module used in Websense applications from Websense USA. A directory traversal vulnerability in Websense TRITON V-Series appliances prior to version 8.0.0 allows an attacker to read arbitrary files via unspecified vectors...

Websense TRITON V-Series appliances cross-site request forgery vulnerability

Websense TRITON is the Unified Content Architecture for data security. A cross-site request forgery vulnerability exists in the Websense TRITON V-Series appliances command line page, which allows attackers to exploit the vulnerability to hijack authentication for unauthorized access...

CVE-2015-2773

SVM in Websense TRITON V-Series appliances before 8.0.0 allows attackers to read arbitrary files via unspecified vectors...

CVE-2015-2772

SVM in Websense TRITON V-Series appliances before 8.0.0 allows attackers to upload arbitrary files via unspecified vectors...

CVE-2015-2770

Cross-site request forgery CSRF vulnerability in the command line page in Websense TRITON V-Series appliances before 8.0.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2014-9712

Websense TRITON V-Series appliances before 7.8.3 Hotfix 03 and 7.8.4 before Hotfix 01 allow remote administrators to read arbitrary files and obtain passwords via a crafted path...

Design/Logic Flaw

SVM in Websense TRITON V-Series appliances before 8.0.0 allows attackers to upload arbitrary files via unspecified vectors...

Design/Logic Flaw

SVM in Websense TRITON V-Series appliances before 8.0.0 allows attackers to read arbitrary files via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the command line page in Websense TRITON V-Series appliances before 8.0.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2015-2772

The CVE-2015-2772 entry covers a vulnerability in Websense TRITON V-Series appliances (before 8.0.0) where the SVM component allows uploading arbitrary files via unspecified vectors. This could enable an attacker to place files on the appliance, with potential impact including partial confidentia...

CVE-2014-9712

Websense TRITON V-Series appliances before 7.8.3 Hotfix 03 and 7.8.4 before Hotfix 01 allow remote administrators to read arbitrary files and obtain passwords via a crafted path...

CVE-2015-2773

SVM in Websense TRITON V-Series appliances before 8.0.0 allows attackers to read arbitrary files via unspecified vectors...