1508 matches found
WatchGuard Fireware AD Helper Component 5.8.5.10317 - Credential Disclosure Vulnerability
Exploit for java platform in category web applications Exploit: WatchGuard Fireware AD Helper Component 5.8.5.10317 - Credential Disclosure Author: RedTeam Pentesting GmbH Vendor: https://www.watchguard.com Software link:...
CVE-2020-10532: Cleartext Storage of Sensitive Information
The AD Helper component in WatchGuard Fireware before 5.8.5.10317 allows remote attackers to discover cleartext passwords via the /domains/list URI...
WatchGuard Fireware AD Helper Component 5.8.5.10317 - Credential Disclosure
WatchGuard Fireware AD Helper Component 5.8.5.10317 - Credential Disclosure Exploit: WatchGuard Fireware AD Helper Component 5.8.5.10317 - Credential Disclosure Author: RedTeam Pentesting GmbH Date: 2020-03-11 Vendor: https://www.watchguard.com Software link:...
WatchGuard Fireware AD Helper Component 5.8.5.10317 - Credential Disclosure
Exploit: WatchGuard Fireware AD Helper Component 5.8.5.10317 - Credential Disclosure Author: RedTeam Pentesting GmbH Date: 2020-03-11 Vendor: https://www.watchguard.com Software link: https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/services/tdr/tdradhelperc.html CVE:...
CVE-2014-6413
A Cross-site Scripting XSS vulnerability exists in WatchGuard XTM 11.8.3 via the pollname parameter in the firewall/policy script...
Cross site scripting
A Cross-site Scripting XSS vulnerability exists in WatchGuard XTM 11.8.3 via the pollname parameter in the firewall/policy script...
CVE-2014-6413
A Cross-site Scripting XSS vulnerability exists in WatchGuard XTM 11.8.3 via the pollname parameter in the firewall/policy script...
CVE-2014-6413
WatchGuard XTM 11.8.3 is affected by CVE-2014-6413, a Cross-site Scripting (XSS) flaw exploitable via the poll_name parameter in the firewall/policy script. Affects the product as described in NVD entries; CVSS base scores: 4.3 (NVD CVSS2) and 6.1 (CVSS3.1) with network attack vector, low attack ...
PT-2020-7725
Name of the Vulnerable Software and Affected Versions WatchGuard XTM version 11.8.3 Description A Cross-site Scripting XSS issue exists via the poll name parameter in the "firewall/policy script" API endpoint. Recommendations For WatchGuard XTM version 11.8.3, avoid using the poll name parameter ...
CVE-2014-6413: Improper Neutralization of Input During Web Page Generation
A Cross-site Scripting XSS vulnerability exists in WatchGuard XTM 11.8.3 via the pollname parameter in the firewall/policy script...
WatchGuard XMT515 Cross-Site Scripting Vulnerability
WatchGuard XMT515 is a firewall router product from WatchGuard USA. A cross-site scripting vulnerability exists in WatchGuard XMT515 version 12.1.3 and earlier. The vulnerability stems from the lack of proper validation of client-side data by the WEB application. An attacker can exploit the...
CVE-2019-18652
A DOM based XSS vulnerability has been identified on the WatchGuard XMT515 through 12.1.3, allowing a remote attacker to execute JavaScript in the victim's browser by tricking the victim into clicking on a crafted link. The payload was tested in Microsoft Internet Explorer 11.418.18362.0 and...
CVE-2019-18652
A DOM based XSS vulnerability has been identified on the WatchGuard XMT515 through 12.1.3, allowing a remote attacker to execute JavaScript in the victim's browser by tricking the victim into clicking on a crafted link. The payload was tested in Microsoft Internet Explorer 11.418.18362.0 and...
Design/Logic Flaw
A DOM based XSS vulnerability has been identified on the WatchGuard XMT515 through 12.1.3, allowing a remote attacker to execute JavaScript in the victim's browser by tricking the victim into clicking on a crafted link. The payload was tested in Microsoft Internet Explorer 11.418.18362.0 and...
CVE-2019-18652
A DOM based XSS vulnerability has been identified on the WatchGuard XMT515 through 12.1.3, allowing a remote attacker to execute JavaScript in the victim's browser by tricking the victim into clicking on a crafted link. The payload was tested in Microsoft Internet Explorer 11.418.18362.0 and...
CVE-2019-18652
CVE-2019-18652 affects WatchGuard XMT515 (firmware ≤ 12.1.3). A DOM/XSS vulnerability arises from insufficient validation of client-side data in the web application, allowing a remote attacker to cause the execution of JavaScript in a victim’s browser via a crafted link. Connected sources confirm...
PT-2020-9979
Name of the Vulnerable Software and Affected Versions: WatchGuard XMT515 versions prior to 12.1.3 Description: A DOM based XSS issue allows a remote attacker to execute JavaScript in the victim's browser by tricking the victim into clicking on a crafted link. The issue was tested in Microsoft...
CVE-2019-18652: Improper Neutralization of Input During Web Page Generation
A DOM based XSS vulnerability has been identified on the WatchGuard XMT515 through 12.1.3, allowing a remote attacker to execute JavaScript in the victim's browser by tricking the victim into clicking on a crafted link. The payload was tested in Microsoft Internet Explorer 11.418.18362.0 and...
Watchguard Fireware Cross-Site Scripting Vulnerability (CNVD-2019-29226)
WatchGuard Fireware is a firewall operating system from WatchGuard USA. The system supports intrusion protection, spam virus email filtering, SSL VPN, and more. A cross-site scripting vulnerability exists in the authentication program in Watchguard Fireware version 11.11, which can be exploited b...