61 matches found
CVE-2017-8990
A remote code execution vulnerability was identified in HPE Intelligent Management Center iMC Wireless Service Manager WSM Software earlier than version WSM 7.3 E0506. This issue was resolved in HPE IMC Wireless Services Manager Software IMC WSM 7.3 E0506P01 or subsequent version...
CVE-2017-8990
CVE-2017-8990 affects Hewlett Packard Enterprise iMC Wireless Service Manager (WSM) Software prior to 7.3 E0506. The root cause is improper validation of the length of user-submitted data, leading to a remote code execution on vulnerable installations. Some sources describe a stack-based buffer o...
CVE-2017-8990: Undefined Security Weakness
A remote code execution vulnerability was identified in HPE Intelligent Management Center iMC Wireless Service Manager WSM Software earlier than version WSM 7.3 E0506. This issue was resolved in HPE IMC Wireless Services Manager Software IMC WSM 7.3 E0506P01 or subsequent version...
CVE-2013-6021
Buffer overflow in WGagent in WatchGuard WSM and Fireware before 11.8 allows remote attackers to execute arbitrary code via a long sessionid value in a cookie...
Buffer overflow
Buffer overflow in WGagent in WatchGuard WSM and Fireware before 11.8 allows remote attackers to execute arbitrary code via a long sessionid value in a cookie...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in WebCenter in WatchGuard WSM and Fireware before 11.8 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters...
CVE-2013-6021
CVE-2013-6021 is a stack-based buffer overflow in WGagent used by WatchGuard WSM/Fireware before 11.8, caused by processing a crafted, oversized sessionid in cookies. This vulnerability enables remote code execution with network access, as attackers can exploit the cookie parsing to overflow the ...
CVE-2013-5702
CVE-2013-5702 corresponds to multiple non‑persistent Cross‑Site Scripting (XSS) vulnerabilities in Watchguard Server Center. The affected product/version scope includes Watchguard Server Center v11.7.4 Update #1 and older, where improper input validation of GET parameters could allow an authentic...
CVE-2013-5702: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in WebCenter in WatchGuard WSM and Fireware before 11.8 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters...
PT-2013-5928
Name of the Vulnerable Software and Affected Versions WatchGuard Fireware versions prior to 11.8 WatchGuard WSM versions prior to 11.8 Description The issue is related to a buffer overflow in the WGagent component. This can be exploited by remote attackers to execute arbitrary code by providing a...
PT-2013-5737
Name of the Vulnerable Software and Affected Versions WatchGuard Fireware versions prior to 11.8 WatchGuard WSM versions prior to 11.8 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in WebCenter. These vulnerabilities allow remote attackers to inject arbitrary we...
CVE-2013-6021: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in WGagent in WatchGuard WSM and Fireware before 11.8 allows remote attackers to execute arbitrary code via a long sessionid value in a cookie...
OpenText WSM CMS Cross Site Scripting
Exploit Title: OpenText WSM cms Cross Site Scripting Vulnerability Google Dork: Intext:" Powered by OpenText WSM" Date: 08/29/2012 Author: Crim3R Site : Http://Ajaxtm.com/ Vendor Home : http://www.opentext.com/uk Tested on: all ================================== + the search form in site is not...
CVE-2011-3569
Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 11.1.1.3, 11.1.1.4, and 11.1.1.5 allows remote attackers to affect confidentiality via unknown vectors related to Web Services Security...
CVE-2011-2237
Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 10.1.3.5.0 and 10.1.3.5.1 allows remote authenticated users to affect integrity, related to WSM Console, a different vulnerability than CVE-2011-3523...
CVE-2011-2237
Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 10.1.3.5.0 and 10.1.3.5.1 allows remote authenticated users to affect integrity, related to WSM Console, a different vulnerability than CVE-2011-3523...
CVE-2011-3523
Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 10.1.3.5.0 and 10.1.3.5.1 allows remote authenticated users to affect integrity, related to WSM Console, a different vulnerability than CVE-2011-2237...
PT-2011-3701
Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 10.1.3.5.0 through 10.1.3.5.1 Description The issue affects the integrity of the system, related to WSM Console in the Oracle Web Services Manager component. Recommendations For versions 10.1.3.5.0 and...
PT-2011-4501
Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 10.1.3.5.0 through 10.1.3.5.1 Description The issue affects the integrity of the system, related to WSM Console in the Oracle Web Services Manager component. Recommendations For versions 10.1.3.5.0 and...
CVE-2011-2237: Undefined Security Weakness
Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 10.1.3.5.0 and 10.1.3.5.1 allows remote authenticated users to affect integrity, related to WSM Console, a different vulnerability than CVE-2011-3523...