ManageEngine EventLog Analyzer Default Credentials

The remote ManageEngine EventLog Analyzer web administration interface uses a known set of default credentials. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid77479; scriptversion"1.5";...

DSA-2975-1 phpmyadmin - security update

Bulletin has no description...

SurgeLDAP 1.0 Web Administration Authentication Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10294/info SurgeLDAP is an LDAP server implementation for Microsoft Windows and various Unix operating systems. It includes a built-in web server to permit remote user access via HTTP. It has been reported that the...

Cisco Aironet AP1x00 Malformed HTTP GET Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8290/info Cisco Aironet AP1x00 series devices are prone to a denial of service vulnerability upon receipt of a malformed HTTP GET request. Such a request will cause the device to reload. !/usr/bin/perl Cisco Global...

IBM Directory Server 4.1 Web Administration Interface Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9140/info IBM Directory Server is prone to cross-site scripting attacks via the web administrative interface. An attacker may be able to embed hostile HTML and script code in a malicious link to the server, which when...

SAMBA 2.0.7 SWAT Symlink Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/1872/info The Samba software suite is a collection of programs that implements the SMB protocol for unix systems, allowing you to serve files and printers to Windows, NT, OS/2 and DOS clients. This protocol is sometimes...

MailEnable Enterprise <= 2.0 (ASP Version) Multiple Vulnerabilities

No description provided by source. Hi, I'm Soroush Dalili from GrayHatz Security Group GSG. I found multiple bugs in MailEnable Enterprise Edition ASP Version = 2.0 that I listed them below: 1 - Any user can login to web administration site. 2 - Authenticated normal user can gain ADMIN or SYSADMI...

3Com Wireless 8760 Dual-Radio 11a/b/g PoE Multiple Security Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/32358/info 3Com Wireless 8760 Dual-Radio 11a/b/g PoE Access Point is prone to multiple security vulnerabilities, including an HTML-injection issue and an authentication-bypass issue. Successfully exploiting these issues...

IISProtect 2.1/2.2 Web Administration Interface SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7675/info The IISProtect web administration interface does not properly sanitize user input. This could allow for SQL injection attacks on a Microsoft IIS server running IISProtect. Successful exploitation could result in...

Ericsson HM220dp DSL Modem World Accessible Web Administration Interface Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6824/info The Ericsson HM220dp DSL Modem uses a web interface for remote administration and configuration. This interface does not require any authentication in order to access. There is no option to enable any...

Cacheflow CacheOS 3.1/4.0 Web Administration Arbitrary Cached Page Code Leakage Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3841/info CacheOS is the firmware designed and distributed with CacheFlow web cache systems. It is maintained and distributed by CacheFlow. When a user connects to the system via the web administration interface on port...

SAMBA 2.0.7 SWAT Symlink Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/1872/info The Samba software suite is a collection of programs that implements the SMB protocol for unix systems, allowing you to serve files and printers to Windows, NT, OS/2 and DOS clients. This protocol is sometimes...

D-Link DSL-500T / DAP 1150 / DAP-1320 multiple security vulnerabilities

Web administration interface crossite request forgery, authentication bypass, directory traversal...

CVE-2014-3115

Fortinet FortiWeb

Fortiweb 5.1.x Cross Site Request Forgery Vulnerability

FortiWeb versions 5.1.x and below suffer from a cross site request forgery vulnerability. FortiWeb Cross-Site Request Forgery Vulnerability Multiple CSRF vulnerabilities exist in the FortiWeb web administration console due to lack of CSRF token protection. This could allow remote attackers to...

CVE-2014-0331

Cross-site scripting XSS vulnerability in the web administration interface in FortiADC with firmware before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via the locale parameter to guipartA/...

Cross site scripting

Cross-site scripting XSS vulnerability in the web administration interface in FortiADC with firmware before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via the locale parameter to guipartA/...

CVE-2014-0331

Fortinet FortiADC D-series (3.2.0, possibly earlier) contains a cross-site scripting (XSS) vulnerability in the web interface. The issue stems from the locale parameter in /FortiADC/gui_partA/ failing to neutralize input, allowing a remote attacker to inject script/HTML in the victim’s browser co...

Multiple SonicWALL Products Authentication Bypass - Ver2 (CVE-2013-1359)

An authentication bypass vulnerability has been reported in SonicWALL Products. The vulnerability is due to authentication bypass in the Web Administration interface. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...

Debian DSA-2889-1 : postfixadmin - security update

A SQL injection vulnerability was discovered in postfixadmin, a web administration interface for the Postfix Mail Transport Agent, which allowed authenticated users to make arbitrary manipulations to the database. The oldstable distribution squeeze does not contain postfixadmin. %NASLMINLEVEL 703...