CVE-2014-8471: Undefined Security Weakness

CA Cloud Service Management CSM before Summer 2014 allows remote attackers to conduct replay attacks via unspecified vectors...

CVE-2014-8474: Undefined Security Weakness

CA Cloud Service Management CSM before Summer 2014 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service CPU and memory consumption via an XML document containing an external entity declaration in conjunction with an entity reference...

CVE-2014-8472: Improper Authentication

CA Cloud Service Management CSM before Summer 2014 does not properly verify authentication tokens from an Identity Provider, which allows user-assisted remote attackers to bypass intended access restrictions via unspecified vectors...

PT-2014-8547

Name of the Vulnerable Software and Affected Versions CA Cloud Service Management CSM versions prior to Summer 2014 Description The issue allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service CPU and memory consumption via an XML...

WebWasher CSM 4.4.1 Build 752 Conf Script Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13037/info It is reported that the WebWasher 'conf' script is prone to a cross-site scripting vulnerability. A remote attacker may exploit this issue to have arbitrary script and HTML code executed in the browser of a...

CVE-2008-3364: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the ObjRemoveCtrl Class ActiveX control in OfficeScanRemoveCtrl.dll 7.3.0.1020 in Trend Micro OfficeScan Corp Edition OSCE Web-Deployment 7.0, 7.3 build 1343 Patch 4 and other builds, and 8.0; Client Server Messaging Security CSM 3.5 and 3.6; and Worry-Free Business Security WF...

Memory corruption

Memory leak in Cisco Content Switching Module CSM 4.23 up to 4.28 and Cisco Content Switching Module with SSL CSM-S 2.12 up to 2.17 allows remote attackers to cause a denial of service memory consumption via TCP segments with an unspecified combination of TCP flags...

CVE-2008-1749

The CVE-2008-1749 issue affects Cisco Content Switching Module (CSM) and CSM-S when configured for layer 7 load balancing. A memory leak is triggered while processing TCP segments with a specific combination of TCP flags, causing memory consumption and potential denial of service as the servers b...

Design/Logic Flaw

Cisco Content Switching Modules CSM 4.2 before 4.2.7, and Cisco Content Switching Module with SSL CSM-S 2.1 before 2.1.6, when service termination is enabled, allow remote attackers to cause a denial of service reboot via unspecified vectors related to high network utilization, aka CSCsh57876...

CVE-2007-4789

Cisco Content Switching Modules CSM 4.2 before 4.2.7, and Cisco Content Switching Module with SSL CSM-S 2.1 before 2.1.6, when service termination is enabled, allow remote attackers to cause a denial of service reboot via unspecified vectors related to high network utilization, aka CSCsh57876...

Code injection

Cisco Content Switching Modules CSM 4.2 before 4.2.3a, and Cisco Content Switching Module with SSL CSM-S 2.1 before 2.1.2a, allow remote attackers to cause a denial of service CPU consumption or reboot via sets of out-of-order TCP packets with unspecified characteristics, aka CSCsd27478...

CVE-2007-4788

CVE-2007-4788 affects Cisco Content Switching Modules (CSM) 4.2 prior to 4.2.3a and Cisco Content Switching Module with SSL (CSM-S) 2.1 prior to 2.1.2a. The vulnerability allows remote attackers to cause a denial of service through sets of out-of-order TCP packets with unspecified characteristics...

CVE-2007-4789

CVE-2007-4789 affects Cisco Content Switching Modules (CSM) 4.2 prior to 4.2.7 and Cisco Content Switching Module with SSL (CSM-S) 2.1 prior to 2.1.6. When service termination is enabled, remote attackers can cause a denial of service (reboot) through vectors related to high network utilization. ...

CVE-2006-6012

The CVE-2006-6012 entry describes a Cross-site scripting (XSS) vulnerability in MGinternet Car Site Manager (CSM), specifically in the file path csm/asp/listings.asp, exploitable via the p parameter. The affected component is the CSM web application; the underlying cause is improper handling of i...

CVE-2006-6012: Undefined Security Weakness

Cross-site scripting XSS vulnerability in csm/asp/listings.asp in MGinternet Car Site Manager CSM allows remote attackers to inject arbitrary web script or HTML via the p parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-5944

MGinternet Car Site Manager (CSM) is affected by an XSS vulnerability in csm/asp/listings.asp via the s parameter. The issue is documented across multiple sources identifying a cross-site scripting flaw in the API endpoint /csm/asp/listings.asp, which could allow remote attackers to inject arbitr...

CVE-2006-5944: Undefined Security Weakness

Cross-site scripting XSS vulnerability in csm/asp/listings.asp in MGinternet Car Site Manager CSM allows remote attackers to inject arbitrary web script or HTML via the s parameter...

CVE-2006-5945: Undefined Security Weakness

Multiple SQL injection vulnerabilities in MGinternet Car Site Manager CSM allow remote attackers to execute arbitrary SQL commands via the 1 p parameter to a csm/asp/detail.asp, or the 2 l, 3 typ, or 4 loc parameter to b csm/asp/listings.asp...

CVE-2006-5945

The CVE-2006-5945 entry details multiple SQL injection flaws in MGinternet Car Site Manager (CSM). The vulnerability enables remote execution of arbitrary SQL commands via the p parameter to csm/asp/detail.asp and via the l, typ, or loc parameters to csm/asp/listings.asp. Connected sources corrob...

CVE-2005-4514

The encapsulation script mechanism in Webwasher CSM Appliance Suite 5.x uses case-sensitive detection of malicious tokens, which allows attackers to bypass script detection by using tokens that can be upper or lower case. NOTE: the vendor has stated that this problem could not be reproduced, and...