1009 matches found
Barracuda Control Center 620 - Multiple Web Vulnerabilities
Exploit for jsp platform in category web applications Introduction: ============= Barracuda Networks - Worldwide leader in email and Web security. Control Center Application of Barracuda Networks Copy of the Vendor Homepage: http://www.barracudanetworks.com/ns/products/ Abstract: =========...
Barracuda Control Center 620 - Cross-Site Scripting / HTML Injection
source: https://www.securityfocus.com/bid/51156/info Barracuda Control Center 620 is prone to an HTML injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and scri...
Cross site scripting
Cross-site scripting XSS vulnerability in the Admin Control Center in Sentinel HASP Run-time Environment 5.95 and earlier in SafeNet Sentinel HASP formerly Aladdin HASP SRM run-time installer before 6.x and SDK before 5.11, as used in 7 Technologies 7T IGSS 7 and other products, when Firefox 2.0 ...
CVE-2011-3339
The CVE-2011-3339 entry describes an XSS vulnerability in the Admin Control Center of SafeNet Sentinel HASP/SRM, affecting HASP Run-time Environment 5.95 and earlier, with installers before 6.x and SDKs before 5.11. The issue arises from inadequate input validation in the web application, which c...
Report: Technical Glitch Takes ICMBs Offline
A report in The Atlantic claims that a technical glitch at Warren Air Force Base in Wyoming took 50 nuclear intercontinental ballistic missiles ICBMs offline for around 45 minutes on Saturday – a serious breach of national security. The causes of the disruption are still in dispute, but the loss ...
CVE-2009-0063
Cross-site scripting XSS vulnerability in the Control Center in Symantec Brightmail Gateway Appliance before 8.0.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
Design/Logic Flaw
Multiple unspecified vulnerabilities in the Control Center in Symantec Brightmail Gateway Appliance before 8.0.1 allow remote authenticated users to gain privileges, and possibly obtain sensitive information or hijack sessions of arbitrary users, via vectors involving 1 administrative scripts or ...
Cross site scripting
Cross-site scripting XSS vulnerability in the Control Center in Symantec Brightmail Gateway Appliance before 8.0.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
CVE-2009-0064
Symantec Brightmail Gateway and related appliances are affected by CVE-2009-0064, which involves cross-site scripting and elevation of privilege in the Control Center. The issue stems from improper filtering of external input in the web management console, allowing remote authenticated users to p...
CVE-2009-0064
Multiple unspecified vulnerabilities in the Control Center in Symantec Brightmail Gateway Appliance before 8.0.1 allow remote authenticated users to gain privileges, and possibly obtain sensitive information or hijack sessions of arbitrary users, via vectors involving 1 administrative scripts or ...
Symantec Brightmail Gateway and Mail Security Appliance Cross-site Scripting and Elevation of Privil
SUMMARY Symantec Brightmail Gateways Control Center is susceptible to cross-site scripting and elevation of privilege vulnerabilities. AFFECTED PRODUCTS Product | Version | Solutions ---|---|--- Symantec Brightmail Gateway Appliance 8300 | All prior to 8.0.1 | Upgrade to 8.0.1 or later Symantec...
MDVA-2008:159 : curl
An idiosyncratic feature of the Turkish language is that the letter 'i' in Turkish is not the lower-case version of the letter 'I'. This issue breaks standard POSIX string case comparison on strings containing the character 'i'. This issue affected the curl package shipped with Mandriva Linux 200...
CVE-2008-5420
The SAN Manager Master Agent service aka msragent.exe in EMC Control Center before 6.1 does not properly authenticate SSTSENDFILE requests, which allows remote attackers to read arbitrary files...
CVE-2008-5419
Stack-based buffer overflow in SAN Manager Master Agent service aka msragent.exe in EMC Control Center 5.2 SP5 and 6.0 allows remote attackers to execute arbitrary code via multiple SSTCTGTRANS requests...
Design/Logic Flaw
The SAN Manager Master Agent service aka msragent.exe in EMC Control Center before 6.1 does not properly authenticate SSTSENDFILE requests, which allows remote attackers to read arbitrary files...
Stack overflow
Stack-based buffer overflow in SAN Manager Master Agent service aka msragent.exe in EMC Control Center 5.2 SP5 and 6.0 allows remote attackers to execute arbitrary code via multiple SSTCTGTRANS requests...
CVE-2008-5420
CVE-2008-5420 concerns EMC Control Center prior to 6.1, where the SAN Manager Master Agent (msragent.exe) fails to authenticate SST_SENDFILE requests. This allows remote attackers to read arbitrary files by exploiting a flaw in the SST_SENDFILE handling (service listens on TCP port 10444). The vu...
CVE-2008-5420
The SAN Manager Master Agent service aka msragent.exe in EMC Control Center before 6.1 does not properly authenticate SSTSENDFILE requests, which allows remote attackers to read arbitrary files...
CVE-2008-5419
EMC Control Center contains a stack-based buffer overflow in the Master Agent service (msragent.exe) that can be triggered by SST_CTGTRANS requests. Affects EMC Control Center 5.2 SP5 and 6.0; the vulnerable component is the Master Agent (msragent.exe) listening on TCP port 10444. Exploitation al...
