426 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in the UserPortal page in SOPHOS UTM before 9.353 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...
CVE-2016-2046
Cross-site scripting XSS vulnerability in the UserPortal page in SOPHOS UTM before 9.353 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...
CVE-2016-2046
A concrete XSS vulnerability in Sophos UTM 9 UserPortal: the lang parameter is not properly sanitized, enabling remote injection of arbitrary script/HTML. Affected: Sophos UTM 9 prior to 9.353 (per CVE-2016-2046). Exploitation involves crafting a link the user visits (user interaction required pe...
Sophos UTM 9 Cross Site Scripting
----------- Vendor: ----------- Sophos https://www.sophos.com ----------------------------------------- Affected Products/Versions: ----------------------------------------- Product: Sophos UTM 9 Version: 9.350-12 with pattern version 92405 potentially lower ---------------- Description:...
Fortinet(FortiGate)suspected the presence of the SSH Backdoor influence 4. 0 to 5.0.7 version-bug warning-the black bar safety net
Overview 1 On 1 2 May, twitter user@esizkur published information that the Fortigate exist ssh back door, the impact of the version from 4. 0 to 5. 0. 7, and in the link given in the attached full attack using the code. According to the disclosure of information display, the attacker can use this...
FortiGate OS(飞塔系统) 4.0-5.0.7 SSH 后门
漏洞概述 FortiGate飞塔防火墙采用 ASIC 加速的 UTM 解决方案,可以有效地防御网 络层和内容层的攻击。FortiGate 解决方案能够发现和消除多层的攻击,比如病 毒、蠕虫、入侵、以及 Web 恶意内容等等实时的应用,而不会导致网络性能下降。 北京时间 2016 年 1 月 12 日凌晨四点钟,国外安全研究员在 twitter 上爆料 FortiGate 防火墙存在一个后门,攻击者可以通过这个后门直接获取防火墙控制 权限。...
Octogate UTM 3.0.12 - Admin Interface Directory Traversal
Exploit Title: Octogate UTM Admin Interface Directory Traversal Date: 26.08.2015 Software Link: http://www.octogate.com Exploit Author: Oliver Karow Contact: [email protected] Website: http://www.oliverkarow.de Category: Remote Exploit Affected Products/Versions -------------------------- Produ...
Octogate UTM 3.0.12 - Admin Interface Directory Traversal
Octogate UTM 3.0.12 - Admin Interface Directory Traversal Exploit Title: Octogate UTM Admin Interface Directory Traversal Date: 26.08.2015 Software Link: http://www.octogate.com Exploit Author: Oliver Karow Contact: [email protected] Website: http://www.oliverkarow.de Category: Remote Exploit...
Octogate UTM 3.0.12 - Admin Interface Directory Traversal Vulnerability
Exploit for php platform in category web applications Exploit Title: Octogate UTM Admin Interface Directory Traversal Date: 26.08.2015 Software Link: http://www.octogate.com Exploit Author: Oliver Karow Contact: email protected Website: http://www.oliverkarow.de Category: Remote Exploit Affected...
Cyberoam UTM Multiiple Vulnerabilities
No description provided by source. SECURITY ADVISORY: cyberoam-utm-command-executaion Affected Software: Cyberoam CR50ia 10.01.0 build 678 Vulnerability: OS Command Execution Severity: High Release Date: Unreleased I. Background Cyberoam Unified Threat Management appliances offer assured security...
Fortigate UTM WAF Appliance Multiple Vulnerabilities
No description provided by source...
Endian UTM Firewall 2.4.x & 2.5.0 - Multiple Web Vulnerabilities
No description provided by source...
Check Point VPN-1 UTM Edge NGX 7.0.48x - Login Page Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28116/info Check Point VPN-1 UTM Edge is prone to a cross-site scripting vulnerability because it fails to adequately sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in t...
WANGKONGBAO CNS-1000 UTM IPS-FW Directory Traversal
No description provided by source. Exploit Title: WANGKONGBAO CNS-1000 and 1100 Network Security Platform UTM Directory Traversal Date: 7/2/2012 Exploit Author: Dillon Beresford Vendor Homepage: http://www.wangkongbao.com/products.html Version: CNS-1000 and 1100 The issue is in the...
CheckPoint/Sofaware Firewall Multiple Vulnerabilities
No description provided by source. ProCheckUp Research http://procheckup.com/procheckup-labs/pr11-07.aspx PR11-07 Multiple peristent XSS, XSS, XSRF, offsite redirection and information disclosure flaws within CheckPoint/Sofaware firewalls Vulnerability found: 3rd May 2011 Vendor informed: 20th Ju...
CVE-2014-2537
Memory leak in the TCP stack in the kernel in Sophos UTM before 9.109 allows remote attackers to cause a denial of service memory consumption via unspecified vectors...
Memory corruption
Memory leak in the TCP stack in the kernel in Sophos UTM before 9.109 allows remote attackers to cause a denial of service memory consumption via unspecified vectors...
CVE-2014-2537
Memory leak in the TCP stack in the kernel in Sophos UTM before 9.109 allows remote attackers to cause a denial of service memory consumption via unspecified vectors...
CVE-2014-2537
The CVE-2014-2537 entry concerns Sophos UTM prior to 9.109, where a memory leak in the kernel’s TCP stack can be exploited remotely to cause a denial of service. Affected product/version: Sophos UTM versions 9.108 and earlier. Root cause: memory leak in the TCP stack (kernel level). Impact: denia...
KLA10337 DoS vulnerability in Sophos UTM
A memory leak was found in Sophos UTM. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via unspecified vectors. Original advisories - Related products Sophos-Unified-Threat-Management CVE list CVE-2014-2537 high Solution...