PT-2014-3564

Name of the Vulnerable Software and Affected Versions FortiADC versions prior to 3.2.1 Description A cross-site scripting XSS issue exists in the web administration interface, allowing remote attackers to inject arbitrary web script or HTML via the locale parameter to the "gui partA/" endpoint...

CVE-2014-0731

The administration interface in Cisco Unified Communications Manager Unified CM 10.01 and earlier allows remote attackers to bypass authentication and read Java class files via a direct request, aka Bug ID CSCum46497...

PT-2014-3795

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager Unified CM versions 10.01 and earlier Description The administration interface in Cisco Unified Communications Manager allows remote attackers to bypass authentication and read Java class files via a direct...

Cisco Unified Communications Manager Java Class File Availability Vulnerability

A vulnerability in the administration interface of Cisco Unified Communications Manager Cisco Unified CM could allow an unauthenticated, remote attacker to access Java class files. The vulnerability is due to insufficient authentication enforcement. An attacker could exploit this vulnerability by...

CVE-2014-0724: Improper Input Validation

The bulk administration interface in Cisco Unified Communications Manager UCM 10.01 and earlier allows remote attackers to bypass authentication and read arbitrary files by using an unspecified prompt, aka Bug ID CSCum05340...

PT-2014-3788

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager UCM versions 10.01 and earlier Description The bulk administration interface in Cisco Unified Communications Manager allows remote attackers to bypass authentication and read arbitrary files. Recommendation...

Cisco Unified Communications Manager Arbitrary File Read Vulnerability

A vulnerability in the bulk administration interface of Cisco Unified Communications Manager UCM could allow an authenticated, remote attacker to read arbitrary files from the underlying file system. The vulnerability is due to insufficient input validation. An attacker could exploit this...

CVE-2014-1458: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web administration interface in FortiGuard FortiWeb 5.0.3 and earlier allows remote authenticated administrators to inject arbitrary web script or HTML via unspecified vectors...

PT-2014-4193

Name of the Vulnerable Software and Affected Versions FortiGuard FortiWeb versions 5.0.3 and earlier Description A cross-site scripting XSS issue exists in the web administration interface, allowing remote authenticated administrators to inject arbitrary web script or HTML. Recommendations For...

HP Intelligent Management Center Web Administration Interface Detection

Binary data hpimcwebinterfacedetect.nbin...

Cisco Identity Services Engine File Space Denial of Service Vulnerability

A vulnerability in the file upload management of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to upload multiple files to a specific location of the filesystem and exhaust disk space. The vulnerability is due to insufficient management of filesystem free space...

CVE-2013-5540

The file-upload feature in Cisco Identity Services Engine ISE allows remote authenticated users to cause a denial of service disk consumption and administration-interface outage by uploading many files, aka Bug ID CSCui67519...

Unrestricted file upload

The file-upload feature in Cisco Identity Services Engine ISE allows remote authenticated users to cause a denial of service disk consumption and administration-interface outage by uploading many files, aka Bug ID CSCui67519...

CVE-2013-5540

CVE-2013-5540 affects Cisco Identity Services Engine (ISE) file-upload management. The issue allows an authenticated remote attacker to upload multiple files, exhausting disk space and causing denial of service by making the administration interface unresponsive. Root cause is insufficient manage...

CVE-2013-5540: Undefined Security Weakness

The file-upload feature in Cisco Identity Services Engine ISE allows remote authenticated users to cause a denial of service disk consumption and administration-interface outage by uploading many files, aka Bug ID CSCui67519...

PT-2013-5621

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine ISE affected versions not specified Description The issue concerns the file-upload feature, which allows remote authenticated users to cause a denial of service. This can lead to disk consumption and an...

[SECURITY] Fedora 20 Update: glpi-0.84.2-1.fc20

GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...

Fedora Update for glpi FEDORA-2013-16601

Check for the Version of glpi OpenVAS Vulnerability Test Fedora Update for glpi FEDORA-2013-16601 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

[SECURITY] Fedora 20 Update: glpi-0.83.9.1-4.fc20

GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...

PineApp Mail-SeCure conflivelog.pl Command Injection

A command injection vulnerability exists in PineApp Mail-SeCure. The vulnerability is due to an input validation error in conflivelog.pl of the administration interface. A remote attacker can exploit this vulnerability by sending a specially crafted request to the vulnerable server. Successful...