CVE-2011-1645: Undefined Security Weakness

The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with software before 2.0.2.1, allows remote attackers to read the backup configuration file, and consequently execute...

Cisco Security Advisory: Cisco RVS4000 and WRVS4400N Web Management Interface Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco RVS4000 and WRVS4400N Web Management Interface Vulnerabilities Advisory ID: cisco-sa-20110525-rvs4000 Revision 1.0 For Public Release 2011 May 25 1600 UTC GMT...

Cisco RVS4000 and WRVS4400N Web Management Interface Vulnerabilities

...

VulnCheck KEV: CVE-2007-1036

The default configuration of JBoss does not restrict access to the 1 console and 2 web management interfaces, which allows remote attackers to bypass authentication and gain administrative access via direct requests...

Cisco Security Agent code execution

Code execution via Web management interface...

CVE-2011-0887

The web management portal on the SMC SMCD3G-CCR aka Comcast Business Gateway with firmware before 1.4.0.49.2 uses predictable session IDs based on time values, which makes it easier for remote attackers to hijack sessions via a brute-force attack on the userid cookie...

PT-2011-2733

Name of the Vulnerable Software and Affected Versions SMC SMCD3G-CCR aka Comcast Business Gateway versions prior to 1.4.0.49.2 Description The issue concerns the web management portal of the affected device, which uses predictable session IDs based on time values. This predictability makes it...

PhpMyAdmin “error.php”spoofing vulnerability-vulnerability warning-the black bar safety net

Release date: 2010-12-10 Update date: 2010-12-13 Affected system: phpMyAdmin phpMyAdmin 3. x Description: -------------------------------------------------------------------------------- phpMyAdmin is PHP written tool used by the WEB Management of MySQL. phpMyAdmin implementation on the presence...

Multiple D-Link routers authentication bypass vulnerability-vulnerability warning-the black bar safety net

International famous network equipment manufacturers D-LINKfriends communicationscompany multiple the router's Web Management Interface the presence of the authentication bypass vulnerability may cause unauthorized user to browse, modify the router's Management Configuration. In addition, there i...

CVE-2010-2594

Multiple cross-site request forgery CSRF vulnerabilities in the web management interface in InterSect Alliance Snare Agent 3.2.3 and earlier on Solaris, Snare Agent 3.1.7 and earlier on Windows, Snare Agent 1.5.0 and earlier on Linux and AIX, Snare Agent 1.4 and earlier on IRIX, Snare Epilog 1.5....

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the web management interface in InterSect Alliance Snare Agent 3.2.3 and earlier on Solaris, Snare Agent 3.1.7 and earlier on Windows, Snare Agent 1.5.0 and earlier on Linux and AIX, Snare Agent 1.4 and earlier on IRIX, Snare Epilog 1.5....

CVE-2010-2594

Multiple cross-site request forgery CSRF vulnerabilities in the web management interface in InterSect Alliance Snare Agent 3.2.3 and earlier on Solaris, Snare Agent 3.1.7 and earlier on Windows, Snare Agent 1.5.0 and earlier on Linux and AIX, Snare Agent 1.4 and earlier on IRIX, Snare Epilog 1.5....

PT-2010-4133 · Ibm +6 · Aix +7

Name of the Vulnerable Software and Affected Versions: InterSect Alliance Snare Agent versions 3.2.3 and earlier on Solaris InterSect Alliance Snare Agent versions 3.1.7 and earlier on Windows InterSect Alliance Snare Agent versions 1.5.0 and earlier on Linux and AIX InterSect Alliance Snare Agen...

CVE-2010-2594: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the web management interface in InterSect Alliance Snare Agent 3.2.3 and earlier on Solaris, Snare Agent 3.1.7 and earlier on Windows, Snare Agent 1.5.0 and earlier on Linux and AIX, Snare Agent 1.4 and earlier on IRIX, Snare Epilog 1.5....

Tandberg VCS Arbitrary File Retrieval

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Virtual Security Research, LLC. http://www.vsecurity.com/ Security Advisory - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Advisory Name: TANDBERG Video Communication Server Arbitrary File Retrieval Release Date:...

phpMyAdmin table parameter SQL injection vulnerability-vulnerability warning-the black bar safety net

Affected version: phpMyAdmin phpMyAdmin 3. x phpMyAdmin phpMyAdmin 2.11. x vulnerability describes:BUGTRAQ ID: 3 2 7 2 0 phpMyAdmin is PHP written tool used by the WEB Management of MySQL. phpMyAdmin./ phpmyadmin/libraries/dbtableexists. lib. php file does not properly filter table parameters:...

Juniper Junos 8.59.0 J - Web Interface (Multiple Script) m[] Cross-Site Scripting

Juniper Junos 8.59.0 J - Web Interface Multiple Script m Cross-Site Scripting source: https://www.securityfocus.com/bid/36537/info Juniper Networks JUNOS is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data to...

Juniper Junos 8.59.0 J - Web Interface PATH_INFO Cross-Site Scripting

Juniper Junos 8.59.0 J - Web Interface PATHINFO Cross-Site Scripting source: https://www.securityfocus.com/bid/36537/info Juniper Networks JUNOS is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data to J-Web Junip...

Juniper Junos 8.59.0 J-Web Interface - scripter.php Multiple Cross-Site Scripting Vulnerabilities

Juniper Junos 8.59.0 J-Web Interface - scripter.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/36537/info Juniper Networks JUNOS is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to sufficiently sanitize...

Juniper Junos 8.5/9.0 J-Web Interface - 'scripter.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/36537/info Juniper Networks JUNOS is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data to J-Web Juniper Web Management. Attacker-supplied HTML or JavaScript code could ru...