Microsoft Internet Explorer Drag and Drop TIF Folder Information Disclosure Vulnerability

Description Microsoft Internet Explorer is prone to an information-disclosure vulnerability. An attacker can exploit this issue to access sensitive information that may aid in further attacks. Technologies Affected Avaya Messaging Application Server Avaya S8100 Media Servers Avaya S8100 Media...

Google Search Appliance UTF-7跨站脚本执行漏洞

Google搜索工具是一款大型的企业级硬件搜索工具。 Google搜索工具在处理UTF-7编码的URI时存在跨站脚本漏洞，远程攻击者可能利用此漏洞执行恶意脚本或获取敏感信息。 oe=UTF-7参数用于命令搜索引擎将搜索字符串解释为UTF-7。如果适当地集成了“scriptalert"XSS"/script”字符串的话，就可能将其结合到搜索结果中，导致在用户浏览器会话中执行任意HTML和脚本代码。 Google Search Appliance Google Mini Search Appliance...

CVE-2006-6223

Cross-site scripting XSS vulnerability in Google Search Appliance and Google Mini allows remote attackers to inject arbitrary web script or HTML via a UTF-7 encoded q parameter...

CVE-2006-6223

The vulnerability CVE-2006-6223 affects Google Mini and Google Search Appliance. Both products fail to handle UTF-7 encoded URIs, which may allow a remote, unauthenticated attacker to inject arbitrary content (including script) into web pages, potentially reading or modifying page data and relate...

Windows Media Player ASX PlayList File Heap Overflow Vulnerability

Description Windows Media Player is prone to a heap-overflow issue. Successfully exploiting this issue allows remote attackers to execute arbitrary machine code in the context of the affected user. Failed exploit attempts likely result in application crashes. Technologies Affected Avaya Agent...

Microsoft Agent ActiveX Control Remote Code Execution Vulnerability

Description The Microsoft Agent ActiveX control is prone to remote code execution. An attacker could exploit this issue to execute code in the context of the user visiting a malicious web page. Technologies Affected Avaya S8100 Media Servers Avaya S8100 Media Servers R10 Avaya S8100 Media Servers...

Wireless Location Appliance default account

'root' account has dafult password...

Cisco Security Advisory: Default Password in Wireless Location Appliance

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Default Password in Wireless Location Appliance Advisory ID: cisco-sa-20061012-wla Revision 1.0 For Public Release 2006 October 12 1600 UTC GMT - ----------------------------------------------------------------------- Summary...

Default Password in Wireless Location Appliance

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Microsoft XML Core Services Information Disclosure Vulnerability

Description Microsoft XML Core Services is prone to an information-disclosure vulnerability. This vulnerability is caused by an error in how the affected component handles server redirects. An attacker can exploit this vulnerability by enticing a victim user into visiting a malicious web page...

Microsoft Windows XML Core Services XSLT Buffer Overrun Vulnerability

Description Microsoft Windows is prone to a remotely exploitable buffer-overrun condition in the XSLT implementation of XML core services. An attacker can exploit this issue to execute arbitrary code on an unsuspecting victim's computer. This may facilitate a remote compromise. Technologies...

[SA22059] Google Mini Search Appliance Path Disclosure Weakness

TITLE: Google Mini Search Appliance Path Disclosure Weakness SECUNIA ADVISORY ID: SA22059 VERIFY ADVISORY: http://secunia.com/advisories/22059/ CRITICAL: Not critical IMPACT: Exposure of system information WHERE: From remote REVISION: 1.1 originally posted 2006-09-29 OPERATING SYSTEM: Google Mini...

Google Mini Search Applicance Path Disclosure

aushack.com - Vulnerability Advisory ----------------------------------------------- Release Date: 22-Sep-2006 Software: Google Inc - Google Mini Search Appliance http://www.google.com.au/enterprise/mini/index.html "The Google Mini delivers cost-effective, high-quality search for your public...

Google Mini Search Appliance 4.4.102.M.36 - Information Disclosure

Google Mini Search Appliance 4.4.102.M.36 - Information Disclosure source: https://www.securityfocus.com/bid/20149/info The Google Mini Search Appliance is prone to an information-disclosure vulnerability. An attacker can exploit this vulnerability to reveal the location of a directory contained ...

Google Mini Search Appliance 4.4.102.M.36 - Information Disclosure

source: https://www.securityfocus.com/bid/20149/info The Google Mini Search Appliance is prone to an information-disclosure vulnerability. An attacker can exploit this vulnerability to reveal the location of a directory contained in the configured document root. Information harvested through...

CVE-2006-4909

Cisco Guard DDoS Mitigation Appliance (before 5.1(6)) contains a cross-site scripting (XSS) vulnerability that can be triggered when anti-spoofing is enabled. Remote attackers can inject arbitrary web script or HTML through certain URL character sequences that are mishandled during the appliance’...

Microsoft Publisher Font Parsing Remote Code Execution Vulnerability

Description Microsoft Publisher is prone to a code-execution vulnerability. This is due to a flaw when handling malformed PUB files. Successfully exploiting this issue allows attackers to corrupt process memory and to execute arbitrary code in the context of targeted users. Technologies Affected ...

Tippingpoint aplianca protection bypass

Attacker can force firewall to switch to layer 2 filtering mode...

CVE-2006-3663

Finjan Vital Security Appliance 5100/8100 NG 8.3.5 stores passwords in plaintext in a backup file, which allows local users to gain privileges. NOTE: the vendor has notified CVE that this issue was fixed in 8.3.6...

CVE-2006-3663

CVE-2006-3663 affects Finjan Vital Security Appliance 5100/8100 NG; 8.3.5 stores passwords in plaintext in a backup file, allowing local users to gain privileges. The vendor has notified CVE that this issue was fixed in 8.3.6. Remediation: upgrade to 8.3.6 (or later) to mitigate. The impact is lo...