EUVD-2012-2550

Malware in sbrugna...

EUVD-2012-3321

Malware in sbrugna...

EUVD-2012-2551

Malware in sbrugna...

CVE-2012-2565

Bloxx Web Filtering before 5.0.14 does not use a salt during calculation of a password hash, which makes it easier for context-dependent attackers to determine cleartext passwords via a rainbow-table approach...

CVE-2012-2563

Multiple cross-site scripting XSS vulnerabilities in Bloxx Web Filtering before 5.0.14 allow 1 remote attackers to inject arbitrary web script or HTML via web traffic that is examined within the Bloxx Reports component, and allow 2 remote authenticated administrators to inject arbitrary web scrip...

CVE-2012-2564

Multiple cross-site request forgery CSRF vulnerabilities in the administrative interface in Bloxx Web Filtering before 5.0.14 allow remote attackers to hijack the authentication of administrators for requests that perform administrative actions...

CVE-2012-2566

Bloxx Web Filtering before 5.0.14 does not properly interpret X-Forwarded-For headers during access-control and logging operations for HTTPS connection attempts, which allows remote attackers to bypass intended IP address and domain restrictions, and trigger misleading log entries, via a crafted...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Microdasys before 3.5.1-B708, as used in Bloxx Web Filtering before 5.0.14 and other products, allows remote attackers to hijack the authentication of arbitrary users for requests that trigger error pages containing XSS sequences, a different...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Bloxx Web Filtering before 5.0.14 allow 1 remote attackers to inject arbitrary web script or HTML via web traffic that is examined within the Bloxx Reports component, and allow 2 remote authenticated administrators to inject arbitrary web scrip...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the administrative interface in Bloxx Web Filtering before 5.0.14 allow remote attackers to hijack the authentication of administrators for requests that perform administrative actions...

CVE-2012-2566: Undefined Security Weakness

Bloxx Web Filtering before 5.0.14 does not properly interpret X-Forwarded-For headers during access-control and logging operations for HTTPS connection attempts, which allows remote attackers to bypass intended IP address and domain restrictions, and trigger misleading log entries, via a crafted...

CVE-2012-2563

Multiple cross-site scripting XSS vulnerabilities in Bloxx Web Filtering before 5.0.14 allow 1 remote attackers to inject arbitrary web script or HTML via web traffic that is examined within the Bloxx Reports component, and allow 2 remote authenticated administrators to inject arbitrary web scrip...

CVE-2012-2566

Bloxx Web Filtering before 5.0.14 does not properly interpret X-Forwarded-For headers during access-control and logging operations for HTTPS connection attempts, which allows remote attackers to bypass intended IP address and domain restrictions, and trigger misleading log entries, via a crafted...

PT-2012-4656

Name of the Vulnerable Software and Affected Versions Microdasys versions prior to 3.5.1-B708 Bloxx Web Filtering versions prior to 5.0.14 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of arbitrary users for requests that trigger error...

CVE-2012-3343

CVE-2012-3343 describes a CSRF vulnerability in Microdasys prior to 3.5.1-B708, used in Bloxx Web Filtering prior to 5.0.14 and other products. The issue allows remote attackers to hijack the authentication of arbitrary users by triggering requests that lead to error pages containing XSS sequence...

PT-2012-4107

Name of the Vulnerable Software and Affected Versions Bloxx Web Filtering versions prior to 5.0.14 Description The issue allows remote attackers to bypass intended IP address and domain restrictions, and trigger misleading log entries, via a crafted X-Forwarded-For header during access-control an...

PT-2012-4104

Name of the Vulnerable Software and Affected Versions Bloxx Web Filtering versions prior to 5.0.14 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via web traffic examined within...

CVE-2012-3343

Cross-site request forgery CSRF vulnerability in Microdasys before 3.5.1-B708, as used in Bloxx Web Filtering before 5.0.14 and other products, allows remote attackers to hijack the authentication of arbitrary users for requests that trigger error pages containing XSS sequences, a different...

CVE-2012-2565: Undefined Security Weakness

Bloxx Web Filtering before 5.0.14 does not use a salt during calculation of a password hash, which makes it easier for context-dependent attackers to determine cleartext passwords via a rainbow-table approach...

CVE-2012-3343: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Microdasys before 3.5.1-B708, as used in Bloxx Web Filtering before 5.0.14 and other products, allows remote attackers to hijack the authentication of arbitrary users for requests that trigger error pages containing XSS sequences, a different...