7456 matches found
IBM WebSphere Service Registry and Repository 6.3 < 6.3.0.5 Multiple Vulnerabilities
The version of IBM WebSphere Service Registry and Repository WSRR is version 6.3 prior to 6.3.0.5. It is therefore, affected by multiple vulnerabilities : - An unspecified DOM based cross-site scripting XSS vulnerability in the WSRR web UI. CVE-2014-6132 - WSSR web interface issues a cookie that ...
Alienvault OSSIM/USM Command Execution Vulnerability
Details ======= Product: Alienvault OSSIM/USM Vulnerability: Command Execution Author: Peter Lapp, [email protected] CVE: None assigned Vulnerable Versions: =4.14.X Fixed Version: 4.15.0 Summary ======= Alienvault OSSIM is an open source SIEM solution designed to collect and correlate log data. T...
CVE-2015-0862
CVE-2015-0862 affects RabbitMQ’s management plugin before 3.4.3, where multiple XSS vectors exist in the management UI. An authenticated user could inject arbitrary script/HTML via (1) message details when unqueued, (2) policy names, (3) AMQP client details, (4) usernames, (5) cluster name, or (6...
CVE-2015-0862
Multiple cross-site scripting XSS vulnerabilities in the management web UI in the RabbitMQ management plugin before 3.4.3 allow remote authenticated users to inject arbitrary web script or HTML via 1 message details when a message is unqueued, such as headers or arguments; 2 policy names, which a...
PT-2015-4923
Name of the Vulnerable Software and Affected Versions RabbitMQ management plugin versions prior to 3.4.3 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the management web UI of the RabbitMQ management plugin. These vulnerabilities allow remote authenticated...
CVE-2015-0862: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the management web UI in the RabbitMQ management plugin before 3.4.3 allow remote authenticated users to inject arbitrary web script or HTML via 1 message details when a message is unqueued, such as headers or arguments; 2 policy names, which a...
Alienvault OSSIM/USM 4.14.X Command Execution
Details ======= Product: Alienvault OSSIM/USM Vulnerability: Command Execution Author: Peter Lapp, [email protected] CVE: None assigned Vulnerable Versions: =4.14.X Fixed Version: 4.15.0 Summary ======= Alienvault OSSIM is an open source SIEM solution designed to collect and correlate log data. T...
Alienvault OSSIM/USM 4.14.X Command Execution Vulnerability
Alienvault OSSIM/USM versions 4.14.x and below suffer from a remote command execution vulnerability. Proof of concept included. Details ======= Product: Alienvault OSSIM/USM Vulnerability: Command Execution Author: Peter Lapp, email protected CVE: None assigned Vulnerable Versions: =4.14.X Fixed...
rabbitmq -- Security issues in management plugin
The RabbitMQ project reports: Some user-controllable content was not properly HTML-escaped before being presented to a user in the management web UI: When a user unqueued a message from the management UI, message details header names, arguments, etc. were displayed unescaped. An attacker could...
CVE-2014-6132
CVE-2014-6132 is a DOM-based cross-site scripting (XSS) vulnerability in the Web UI of IBM WebSphere Service Registry and Repository (WSRR). Affected are WSRR versions: 6.3 (up to 6.3.0.5), 7.0.x (up to 7.0.0.5), 7.5.x (up to 7.5.0.4), 8.0.x (before 8.0.0.3), and 8.5.x (before 8.5.0.1). The issue...
PT-2014-7088
Name of the Vulnerable Software and Affected Versions IBM WebSphere Service Registry and Repository WSRR versions 7.5.x through 7.5.0.3 IBM WebSphere Service Registry and Repository WSRR versions 8.0.x through 8.0.0.1 Description A cross-site scripting XSS issue exists in the Web UI, allowing...
PT-2014-7059
Name of the Vulnerable Software and Affected Versions IBM WebSphere Service Registry and Repository WSRR versions 6.3 through 6.3.0.5 IBM WebSphere Service Registry and Repository WSRR versions 7.0.x through 7.0.0.5 IBM WebSphere Service Registry and Repository WSRR versions 7.5.x through 7.5.0.4...
PT-2014-7089
Name of the Vulnerable Software and Affected Versions IBM WebSphere Service Registry and Repository WSRR versions 7.0.0 through 7.0.0.4 IBM WebSphere Service Registry and Repository WSRR versions 7.5.0 through 7.5.0.0 Description A cross-site scripting XSS issue exists in the Web UI, allowing...
PT-2014-7072
Name of the Vulnerable Software and Affected Versions IBM WebSphere Service Registry and Repository WSRR versions 6.3.x through 6.3.0.5 IBM WebSphere Service Registry and Repository WSRR versions 7.0.x through 7.0.0.5 IBM WebSphere Service Registry and Repository WSRR versions 7.5.x through 7.5.0...
CVE-2014-6180: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Web UI in IBM WebSphere Service Registry and Repository WSRR 7.0.x before 7.0.0.5 and 7.5.x before 7.5.0.1 allows remote authenticated users to inject arbitrary web script or HTML via the HTTP User-Agent header...
CVE-2014-6132: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Web UI in IBM WebSphere Service Registry and Repository WSRR 6.3 through 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x through 7.5.0.4, 8.0.x before 8.0.0.3, and 8.5.x before 8.5.0.1 allows remote authenticated users to inject arbitrary web script or HTML via...
CVE-2014-6179: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Web UI in IBM WebSphere Service Registry and Repository WSRR 7.5.x before 7.5.0.4 and 8.0.x before 8.0.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-6153: Undefined Security Weakness
The Web UI in IBM WebSphere Service Registry and Repository WSRR 6.3.x through 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x through 7.5.0.4, 8.0.x before 8.0.0.3, and 8.5.x before 8.5.0.1 does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture...
Visual Mining NetCharts Server Default Credentials (Web UI)
It is possible to log into the remote Visual Mining NetCharts Server installation by providing the default credentials. A remote, unauthenticated attacker can exploit this to gain administrative control. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...