EUVD-2012-3321

Malware in sbrugna...

EUVD-2012-2550

Malware in sbrugna...

EUVD-2012-2551

Malware in sbrugna...

CVE-2012-2565

Bloxx Web Filtering before 5.0.14 does not use a salt during calculation of a password hash, which makes it easier for context-dependent attackers to determine cleartext passwords via a rainbow-table approach...

CVE-2012-2564

Multiple cross-site request forgery CSRF vulnerabilities in the administrative interface in Bloxx Web Filtering before 5.0.14 allow remote attackers to hijack the authentication of administrators for requests that perform administrative actions...

CVE-2012-2566

Bloxx Web Filtering before 5.0.14 does not properly interpret X-Forwarded-For headers during access-control and logging operations for HTTPS connection attempts, which allows remote attackers to bypass intended IP address and domain restrictions, and trigger misleading log entries, via a crafted...

CVE-2012-2563

Multiple cross-site scripting XSS vulnerabilities in Bloxx Web Filtering before 5.0.14 allow 1 remote attackers to inject arbitrary web script or HTML via web traffic that is examined within the Bloxx Reports component, and allow 2 remote authenticated administrators to inject arbitrary web scrip...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the administrative interface in Bloxx Web Filtering before 5.0.14 allow remote attackers to hijack the authentication of administrators for requests that perform administrative actions...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Microdasys before 3.5.1-B708, as used in Bloxx Web Filtering before 5.0.14 and other products, allows remote attackers to hijack the authentication of arbitrary users for requests that trigger error pages containing XSS sequences, a different...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Bloxx Web Filtering before 5.0.14 allow 1 remote attackers to inject arbitrary web script or HTML via web traffic that is examined within the Bloxx Reports component, and allow 2 remote authenticated administrators to inject arbitrary web scrip...

CVE-2012-2565: Undefined Security Weakness

Bloxx Web Filtering before 5.0.14 does not use a salt during calculation of a password hash, which makes it easier for context-dependent attackers to determine cleartext passwords via a rainbow-table approach...

PT-2012-4106

Name of the Vulnerable Software and Affected Versions Bloxx Web Filtering versions prior to 5.0.14 Description The issue allows context-dependent attackers to determine cleartext passwords more easily via a rainbow-table approach because it does not use a salt during the calculation of a password...

PT-2012-4105

Name of the Vulnerable Software and Affected Versions Bloxx Web Filtering versions prior to 5.0.14 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities in the administrative interface. These vulnerabilities allow remote attackers to hijack the authentication of...

PT-2012-4107

Name of the Vulnerable Software and Affected Versions Bloxx Web Filtering versions prior to 5.0.14 Description The issue allows remote attackers to bypass intended IP address and domain restrictions, and trigger misleading log entries, via a crafted X-Forwarded-For header during access-control an...

PT-2012-4104

Name of the Vulnerable Software and Affected Versions Bloxx Web Filtering versions prior to 5.0.14 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via web traffic examined within...

CVE-2012-2563: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Bloxx Web Filtering before 5.0.14 allow 1 remote attackers to inject arbitrary web script or HTML via web traffic that is examined within the Bloxx Reports component, and allow 2 remote authenticated administrators to inject arbitrary web scrip...

CVE-2012-2566: Undefined Security Weakness

Bloxx Web Filtering before 5.0.14 does not properly interpret X-Forwarded-For headers during access-control and logging operations for HTTPS connection attempts, which allows remote attackers to bypass intended IP address and domain restrictions, and trigger misleading log entries, via a crafted...

CVE-2012-2564: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the administrative interface in Bloxx Web Filtering before 5.0.14 allow remote attackers to hijack the authentication of administrators for requests that perform administrative actions...

CVE-2012-3343: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Microdasys before 3.5.1-B708, as used in Bloxx Web Filtering before 5.0.14 and other products, allows remote attackers to hijack the authentication of arbitrary users for requests that trigger error pages containing XSS sequences, a different...

PT-2012-4656

Name of the Vulnerable Software and Affected Versions Microdasys versions prior to 3.5.1-B708 Bloxx Web Filtering versions prior to 5.0.14 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of arbitrary users for requests that trigger error...