CVE-2013-7318

Cross-site scripting XSS vulnerability in BusinessFlow/login in AlgoSec Firewall Analyzer 6.4 allows remote attackers to inject arbitrary web script or HTML via the message parameter...

CVE-2013-5092

Cross-site scripting XSS vulnerability in afa/php/Login.php in AlgoSec Firewall Analyzer 6.1-b86 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

Cross site scripting

Cross-site scripting XSS vulnerability in afa/php/Login.php in AlgoSec Firewall Analyzer 6.1-b86 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

Cross site scripting

Cross-site scripting XSS vulnerability in BusinessFlow/login in AlgoSec Firewall Analyzer 6.4 allows remote attackers to inject arbitrary web script or HTML via the message parameter...

CVE-2013-5092

Cross-site scripting XSS vulnerability in afa/php/Login.php in AlgoSec Firewall Analyzer 6.1-b86 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

CVE-2013-7318

AlgoSec Firewall Analyzer 6.4 has an XSS vulnerability in the BusinessFlow/login path, exploitable via the message parameter to inject arbitrary script/HTML. The root cause is an XSS condition in the login flow; remote attackers could induce script execution in a victim’s browser. The provided do...

CVE-2013-5092

CVE-2013-5092 is a reported XSS vulnerability in the file afa/php/Login.php of AlgoSec Firewall Analyzer 6.1-b86 . The vulnerability allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO parameter. The NVD entry lists a Medium base score (CVSS 2.0: 4.3) with network att...

PT-2014-2904

Name of the Vulnerable Software and Affected Versions AlgoSec Firewall Analyzer version 6.1-b86 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. This is achieved via the PATH INFO. Recommendations For AlgoSec Firewall Analyzer version...

PT-2014-3360

Name of the Vulnerable Software and Affected Versions AlgoSec Firewall Analyzer version 6.4 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the message parameter in the BusinessFlow/login endpoint. Recommendations For AlgoS...

CVE-2013-5092: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in afa/php/Login.php in AlgoSec Firewall Analyzer 6.1-b86 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

CVE-2013-7318: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in BusinessFlow/login in AlgoSec Firewall Analyzer 6.4 allows remote attackers to inject arbitrary web script or HTML via the message parameter...

ManageEngine EventLog Analyzer "j_username"跨站脚本漏洞

ManageEngine EventLog Analyzer是安全信息和事件管理软件。 ManageEngine EventLog Analyzer 8.6及其他版本没有正确过滤event/jsecuritycheck 当设置了"jpassword"后的"jusername" GET参数，这可导致在受影响站点用户浏览器会话中执行任意HTML和脚本代码。 0 ManageEngine EventLog Analyzer 8.6 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

GLSA-201401-20 : Cacti: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201401-20 Cacti: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Cacti. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could execute arbitrary SQL commands via...

Fedora Update for wireshark FEDORA-2013-17635

Check for the Version of wireshark OpenVAS Vulnerability Test Fedora Update for wireshark FEDORA-2013-17635 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ematStaticAlertTypes.jsp in the Alert Settings section in Dell SonicWALL Global Management System GMS, Analyzer, and UMA EM5000 7.1 SP1 before Hotfix 134235 allow remote authenticated users to inject arbitrary web script or HTML via the 1...

PT-2013-6245

Name of the Vulnerable Software and Affected Versions Dell SonicWALL Global Management System GMS, Analyzer, and UMA EM5000 version 7.1 SP1 before Hotfix 134235 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the ematStaticAlertTypes.jsp file within the Alert...

CVE-2013-7025: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in ematStaticAlertTypes.jsp in the Alert Settings section in Dell SonicWALL Global Management System GMS, Analyzer, and UMA EM5000 7.1 SP1 before Hotfix 134235 allow remote authenticated users to inject arbitrary web script or HTML via the 1...

CVE-2013-6374

Cross-site scripting XSS vulnerability in the Build Failure Analyzer plugin before 1.5.1 for Jenkins allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Build Failure Analyzer plugin before 1.5.1 for Jenkins allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6374

Cross-site scripting XSS vulnerability in the Build Failure Analyzer plugin before 1.5.1 for Jenkins allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...