SOL14712 - The BIG-IP APM access policy logout page may be vulnerable to XSS cookie tampering

Recommended action To eliminate this vulnerability, upgrade to a version that is listed in the Versions known to be not vulnerable column in the previous table. To mitigate this vulnerability, you can modify the logout web page to null the specific code identified at issue. To do so, perform the...

CVE-2013-0150

Directory traversal vulnerability in an unspecified signed Java applet in the client-side components in F5 BIG-IP APM 10.1.0 through 10.2.4 and 11.0.0 through 11.3.0, FirePass 6.0.0 through 6.1.0 and 7.0.0, and other products "when APM is provisioned," allows remote attackers to upload and execut...

Directory traversal

Directory traversal vulnerability in an unspecified signed Java applet in the client-side components in F5 BIG-IP APM 10.1.0 through 10.2.4 and 11.0.0 through 11.3.0, FirePass 6.0.0 through 6.1.0 and 7.0.0, and other products "when APM is provisioned," allows remote attackers to upload and execut...

CVE-2013-0150

Directory traversal vulnerability in an unspecified signed Java applet in the client-side components in F5 BIG-IP APM 10.1.0 through 10.2.4 and 11.0.0 through 11.3.0, FirePass 6.0.0 through 6.1.0 and 7.0.0, and other products "when APM is provisioned," allows remote attackers to upload and execut...

CVE-2013-0150

CVE-2013-0150 is a directory-traversal flaw in client-side signed components used by F5 BIG-IP APM (versions 10.1.0–10.2.4, 11.0.0–11.3.0) and FirePass (6.0.0–6.1.0, 7.0.0) when APM is provisioned. The vulnerability allows a remote attacker to upload and execute arbitrary files by supplying a fil...

CVE-2013-0150: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in an unspecified signed Java applet in the client-side components in F5 BIG-IP APM 10.1.0 through 10.2.4 and 11.0.0 through 11.3.0, FirePass 6.0.0 through 6.1.0 and 7.0.0, and other products "when APM is provisioned," allows remote attackers to upload and execut...

K10905 : NTP vulnerability - CVE-2009-3563

Security Advisory Description Note: Versions that are not listed in this article have not been evaluated for vulnerability to this security advisory. For information about the F5 security policy regarding evaluating older and unsupported versions of F5 products, refer to K4602: Overview of F5...

Design/Logic Flaw

Unspecified vulnerability in the APM - Application Performance Management component in Oracle Enterprise Manager Grid Control 6.5, 11.1, and 12.1.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Business Transaction Management...

CVE-2013-0396

Technical details about CVE-2013-0396 are not publicly available in the provided documents; monitor for updates.

CVE-2013-0359

CVE-2013-0359 affects the APM - Application Performance Management component in Oracle Enterprise Manager Grid Control (versions 6.5, 11.1, 12.1.0.2). The vulnerability is described as unspecified with impact to confidentiality, integrity, and availability via unknown vectors related to Business ...

CVE-2013-0360

Technical details for CVE-2013-0360 are not publicly disclosed in the provided documents. Monitor for updates; no affected product/version, exploit info, vectors, or remediation are specified here.

CVE-2013-0359: Undefined Security Weakness

Unspecified vulnerability in the APM - Application Performance Management component in Oracle Enterprise Manager Grid Control 6.5, 11.1, and 12.1.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Business Transaction Management...

CVE-2011-2405

The HP ProLiant SL Advanced Power Manager SL-APM with firmware before 1.20 does not properly validate users, which allows remote attackers to cause a denial of service via unspecified vectors...

Design/Logic Flaw

The HP ProLiant SL Advanced Power Manager SL-APM with firmware before 1.20 does not properly validate users, which allows remote attackers to cause a denial of service via unspecified vectors...

CVE-2011-2405

The vulnerability CVE-2011-2405 affects HP ProLiant SL Advanced Power Manager (SL-APM). Firmware versions before 1.20 fail to properly validate users, enabling remote attackers to cause a denial of service via unspecified vectors. The HP Security Bulletin HPSBHF02699 (SSRT100592) lists affected v...

CVE-2011-2405: Improper Input Validation

The HP ProLiant SL Advanced Power Manager SL-APM with firmware before 1.20 does not properly validate users, which allows remote attackers to cause a denial of service via unspecified vectors...

SOL12650 - PHP vulnerability CVE-2010-4645

The strtod.c function may allow context-dependent attackers to cause a denial-of-service via a certain floating-point value in scientific notation, which is not properly handled in x87 FPU registers. Information about this advisory is available at the following location: Note: The previous link...

MDVA-2008:091-1 : gnome-applets

The clock applet in GNOME could crash when using some specific locations or when using updated timezone data. The Recent Documents menu was not always able to start the right application for a specific document. Update: The previous gnome-applets package on x8664 was improperly built and included...

SOL2593 - Buffer overflow in zlib - CAN-2003-0107

Note: Versions that are not listed in this Solution have not been evaluated for vulnerability to this security advisory. For information about F5 Networks' security policy regarding evaluating older and unsupported versions of F5 Networks products, refer to SOL4602: Overview of F5 Networks securi...

CVE-2005-0542

The CVE-2005-0542 entry concerns Cyclades AlterPath Manager (APM) Console Server 1.2.1. The flaw allows local privilege escalation by setting the adminUser parameter to true in saveUser.do. No exploitation details or patch/version remediation are provided in the connected documents; exploitation ...