CVE-2014-4831

IBM Security QRadar SIEM and QRadar Risk Manager 7.1 before MR2 Patch 9 and 7.2 before 7.2.4 Patch 1, and QRadar Vulnerability Manager 7.2 before 7.2.4 Patch 1, allow remote attackers to hijack sessions via unspecified vectors...

CVE-2014-6075

IBM Security QRadar SIEM and QRadar Risk Manager 7.1 before MR2 Patch 9 and 7.2 before 7.2.4 Patch 1, and QRadar Vulnerability Manager 7.2 before 7.2.4 Patch 1, place credentials in URLs, which allows remote attackers to obtain sensitive information by reading 1 web-server access logs, 2 web-serv...

CVE-2014-6075

IBM QRadar family vulnerability CVE-2014-6075 involves credentials being placed in URLs, potentially exposed via browser history, web server logs, or Referer logs. Affected: IBM QRadar SIEM 7.2.x before 7.2.4 Patch 1, QRadar SIEM 7.1 MR2 before Patch 9, QRadar Vulnerability Manager 7.2 before 7.2...

CVE-2014-4832

IBM Security QRadar SIEM and QRadar Risk Manager 7.1 before MR2 Patch 9 and 7.2 before 7.2.4 Patch 1, and QRadar Vulnerability Manager 7.2 before 7.2.4 Patch 1, allow remote attackers to obtain sensitive cookie information by sniffing the network during an HTTP session...

Debian Security Advisory DSA 3017-1 (php-cas - security update)

Marvin S. Addison discovered that Jasig phpCAS, a PHP library for the CAS authentication protocol, did not encode tickets before adding them to an URL, creating a possibility for cross site scripting. OpenVAS Vulnerability Test $Id: deb3017.nasl 6692 2017-07-12 09:57:43Z teissa $ Auto-generated...

McAfee Vulnerability Manager Multiple Vulnerabilities

McAfee Vulnerability Manager is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

McAfee Vulnerability Manager Detection

Detects the installed version of McAfee Vulnerability Manager. The script logs in via smb, searches for McAfee Vulnerability Manager in the registry and gets the version from registry. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, a...

McAfee Vulnerability Manager Installed (credentialed check)

Binary data mcafeevulnerabilitymanagerinstalled.nbin...

McAfee Vulnerability Manager Enterprise Manager Multiple Vulnerabilities (SB10061)

The version of McAfee Vulnerability Manager installed is 7.0.x prior to 7.0.11.05002, 7.5.x earlier than 7.5.4, 7.5.4 prior to 7.5.4.05007, or 7.5.5 prior to 7.5.5.05002. It is, therefore, potentially affected by multiple cross-site scripting and cross-site request forgery vulnerabilities in the...

CVE-2013-5094

Cross-site scripting XSS vulnerability in index.exp in McAfee Vulnerability Manager 7.5 allows remote attackers to inject arbitrary web script or HTML via the certcn cookie parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in index.exp in McAfee Vulnerability Manager 7.5 allows remote attackers to inject arbitrary web script or HTML via the certcn cookie parameter...

CVE-2013-5094

Cross-site scripting XSS vulnerability in index.exp in McAfee Vulnerability Manager 7.5 allows remote attackers to inject arbitrary web script or HTML via the certcn cookie parameter...

CVE-2013-5094

CVE-2013-5094 is an XSS vulnerability in McAfee Vulnerability Manager 7.5, caused by unsafe handling in the index.exp script via the cert_cn cookie parameter. The vulnerability allows a remote attacker to inject and execute arbitrary script in a user’s browser. Public references note this as a cr...

CVE-2014-1472

Multiple cross-site scripting XSS vulnerabilities in the Enterprise Manager in McAfee Vulnerability Manager MVM 7.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-1473

Multiple cross-site request forgery CSRF vulnerabilities in the Enterprise Manager in McAfee Vulnerability Manager MVM 7.5.5 and earlier allow remote attackers to hijack the authentication of users for requests that modify HTML via unspecified vectors related to the "response web page."...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the Enterprise Manager in McAfee Vulnerability Manager MVM 7.5.5 and earlier allow remote attackers to hijack the authentication of users for requests that modify HTML via unspecified vectors related to the "response web page."...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Enterprise Manager in McAfee Vulnerability Manager MVM 7.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-1472

Multiple cross-site scripting XSS vulnerabilities in the Enterprise Manager in McAfee Vulnerability Manager MVM 7.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-1473

McAfee Vulnerability Manager (Enterprise Manager) is affected by CVE-2014-1473, with multiple CSRF issues leading to hijacking of user authentication for HTML-modifying requests. The affected versions include MVM 7.0.x prior to 7.0.11.05002, 7.5.x prior to 7.5.4, 7.5.4 prior to 7.5.4.05007, and 7...

CVE-2014-1473

Multiple cross-site request forgery CSRF vulnerabilities in the Enterprise Manager in McAfee Vulnerability Manager MVM 7.5.5 and earlier allow remote attackers to hijack the authentication of users for requests that modify HTML via unspecified vectors related to the "response web page."...