9316 matches found
Cisco Identity Services Engine Software Administration Panel Cross-Site Scripting Vulnerability
A vulnerability in the search form of the Cisco ISE administration/monitoring panel could allow an unauthenticated, remote attacker to send a malicious script to an unsuspecting user. The vulnerability is due to improper input validation. An attacker could exploit this vulnerability by convincing...
Cisco Secure Access Control System Admin/View Page Cross-Site Request Forgery Vulnerability
A vulnerability in the Cisco Access Control System ACS Administration and View pages could allow an unauthenticated, remote attacker to perform a cross-site request forgery CSRF attack. The vulnerability is due to insufficient CSRF protections. An attacker could exploit this vulnerability by...
PT-2013-4490
Name of the Vulnerable Software and Affected Versions Wave EMBASSY Remote Administration Server ERAS affected versions not specified Description The issue allows remote authenticated users to execute arbitrary SQL commands via the ct100$4MainController$TextBoxSearchValue parameter, which is the...
CVE-2013-3578: Improper Neutralization of Special Elements used in an OS Command
SQL injection vulnerability in the Help Desk application in Wave EMBASSY Remote Administration Server ERAS allows remote authenticated users to execute arbitrary SQL commands via the ct100$4MainController$TextBoxSearchValue parameter aka the search field, leading to execution of operating-system...
Linksys routers security vulnerabilities
Crossite request forgery, XSS, code execution in web administration interface...
PT-2013-4489
Name of the Vulnerable Software and Affected Versions Wave EMBASSY Remote Administration Server ERAS affected versions not specified Description A SQL injection issue in the Help Desk application of Wave EMBASSY Remote Administration Server ERAS allows remote attackers to execute arbitrary SQL...
CVE-2013-3577: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Help Desk application in Wave EMBASSY Remote Administration Server ERAS allows remote attackers to execute arbitrary SQL commands via the ct100$4MainController$TextBoxSearchValue parameter aka the search field...
CVE-2013-3422
Cross-site scripting XSS vulnerability in Administration pages in Cisco Secure Access Control System ACS allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud75165...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in Administration and View pages in Cisco Secure Access Control System ACS allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCud75177...
Cross site scripting
Cross-site scripting XSS vulnerability in Administration pages in Cisco Secure Access Control System ACS allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud75165...
CVE-2013-3422
Cross-site scripting XSS vulnerability in Administration pages in Cisco Secure Access Control System ACS allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud75165...
CVE-2013-3424
Cross-site request forgery CSRF vulnerability in Administration and View pages in Cisco Secure Access Control System ACS allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCud75177...
PT-2013-4379
Name of the Vulnerable Software and Affected Versions Cisco Secure Access Control System ACS affected versions not specified Description A cross-site scripting XSS issue exists in the Administration pages, allowing remote attackers to inject arbitrary web script or HTML via an unspecified...
CVE-2013-3422: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Administration pages in Cisco Secure Access Control System ACS allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud75165...
PT-2013-4381
Name of the Vulnerable Software and Affected Versions Cisco Secure Access Control System ACS affected versions not specified Description A cross-site request forgery CSRF issue affects Administration and View pages, allowing remote attackers to hijack the authentication of arbitrary users...
Wave EMBASSY Remote Administration Server SQL injection vulnerabilities
Overview The Wave EMBASSY Remote Administration Server ERAS contains the ERAS Help Desk application that fails to filter user input allowing for the exploitation of SQL injection vulnerabilities. These vulnerabilities may allow a remote authenticated attacker to execute procedures or SQL queries...
CVE-2013-3424: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in Administration and View pages in Cisco Secure Access Control System ACS allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCud75177...
FAA Civil Aviation Registry Vulnerable to Data Breach
The Federal Aviation Administration’s FAA Civil Aviation Registry lacks proper security controls to prevent unauthorized access to its systems, according to a report based on a recent audit undertaken by the Office of the Inspector General OIG for the United States Department of Transportation Do...
Linksys EA - 2700, 3500, 4200, 4500 w/ Lighttpd 1.4.28 Unauthenticated Remote Administration Access
Vulnerable products : Linksys EA2700, EA3500, E4200, EA4500 using lighttpd 1.4.28 and Utopia on Linux 2.6.22 Firmware Version: 1.0.14 EA2700 Firmware Version: 1.0.30 EA3500 Firmware Version: 2.0.36 E4200 Firmware Version: 2.0.36 EA4500 Impact: - Major Timeline: - Still awaiting word back from...
[SECURITY] Fedora 17 Update: glpi-0.83.9.1-1.fc17
GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...