Vanilla Forums 2.0.18.8 - Multiple Vulnerabilities

Vanilla Forums 2.0.18.8 - Multiple Vulnerabilities Exploit Title: Vanilla Forums Insecure Permissions Vulnerability Date: 15/5/13 Exploit Author: Henry Hoggard Author Website: http://henryhoggard.co.uk Vendor Homepage: http://vanillaforums.org Software Link: http://vanillaforums.org Version:...

[WAF-FLE] Web application firewall: fast log and event console

WAF-FLE is a OpenSource Console for ModSecurity, it allow the modsec admin to view and search events sent by mlogc modsecurity event log handler. Features : Central event console Support Modsecurity in “traditional” and “Anomaly Scoring” Able to receive events sent from mlogc in real time or in...

CVE-2013-0584

The Data Replication Dashboard component in IBM InfoSphere Replication Server 9.7 and 10.x before 10.2.0.0-b113 allows remote attackers to obtain a list of all user accounts, along with information about whether each account requires a password, via unspecified vectors...

Design/Logic Flaw

The Data Replication Dashboard component in IBM InfoSphere Replication Server 9.7 and 10.x before 10.2.0.0-b113 allows remote attackers to obtain a list of all user accounts, along with information about whether each account requires a password, via unspecified vectors...

CVE-2013-0584

Summary (CVE-2013-0584): The IBM InfoSphere Data Replication Dashboard (InfoSphere Replication Server) is affected in versions 9.7 and 10.x up to 10.2.0.0-b113. A remote, unauthenticated attacker can enumerate user accounts and whether each account requires a password via unspecified vectors. Rem...

CVE-2013-0584

The Data Replication Dashboard component in IBM InfoSphere Replication Server 9.7 and 10.x before 10.2.0.0-b113 allows remote attackers to obtain a list of all user accounts, along with information about whether each account requires a password, via unspecified vectors...

IBM InfoSphere Data Replication Dashboard Unpassworded User Enumeration

The version of IBM InfoSphere Data Replication Dashboard hosted on the remote web server displays its list of users that can authenticate without using a password. A remote, unauthenticated attacker could use this information to gain unauthorized access to the application. %NASLMINLEVEL 70300 C...

IBM InfoSphere Data Replication Dashboard Detection

IBM InfoSphere Data Replication Dashboard, a component of InfoSphere Data Replication, is hosted on the remote web server. This web application monitors the health of replication and event publishing. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid65892;...

IBM InfoSphere Data Replication Dashboard User Enumeration

The version of IBM InfoSphere Data Replication Dashboard hosted on the remote web server displays its list of users without requiring authentication. A remote, unauthenticated attacker could use this information to mount further attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Scheduled automatic dashboard delivery fails

Challenge In certaing scenarios, scheduled dashboard delivery in Veeam ONE Reporter fails and reports the 'Dashboard Capturing Failed' error in the reporting task session log. Cause This issue is usually related to the configured permissions of the Veeam ONE Service account, which makes the...

CVE-2012-4861

IBM InfoSphere Data Replication Dashboard (InfoSphere Replication Server) is affected by CVE-2012-4861: the dashboard web server can disclose directory listings when a specific directory URL is requested. Affected versions are 9.7 and 10.1 up to 10.1.0.4. The root cause is a directory listing vul...

CVE-2013-2290

Cross-site scripting XSS vulnerability in the dashboard of the ArubaOS Administration WebUI in Aruba Networks ArubaOS 6.2.x before 6.2.0.3, 6.1.3.x before 6.1.3.7, 6.1.x-FIPS before 6.1.4.3-FIPS, and 6.1.x-AirGroup before 6.1.3.6-AirGroup, as used by Mobility Controller, allows remote wireless...

CVE-2013-2290

CVE-2013-2290 is a Cross-site Scripting (XSS) vulnerability in the ArubaOS Administration WebUI dashboard used by Mobility Controller. The issue allows an attacker to inject arbitrary web script or HTML via a crafted SSID, affecting ArubaOS 6.2.x before 6.2.0.3; 6.1.3.x before 6.1.3.7; 6.1.x-FIPS...

Sonicwall OEM Scrutinizer v9.5.2 - Multiple Vulnerabilities

Title: ====== Sonicwall OEM Scrutinizer v9.5.2 - Multiple Vulnerabilities Date: ===== 2013-02-14 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=786 VL-ID: ===== 786 Common Vulnerability Scoring System: ==================================== 5.2 Introduction: ============...

Sonar 3.4.1 Cross Site Scripting Vulnerability

Sonar version 3.4.1 suffers from a cross site scripting vulnerability. Sonar v.3.4.1 = XSS CWE-79 + Vendor info http://www.sonarsource.com/ Dork : intext:"Powered by SonarSource" ========================================================= + Author: devilteam.pl + WWW: http://devilteam.pl/...

Low: Red Hat Security Advisory: python-django-horizon security update

Updated python-django-horizon packages that fix one security issue are now available for Red Hat OpenStack Essex. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

DEBIAN-CVE-2012-4448

Cross-site request forgery CSRF vulnerability in wp-admin/index.php in WordPress 3.4.2 allows remote attackers to hijack the authentication of administrators for requests that modify an RSS URL via a dashboardincominglinks edit action...

CVE-2012-4448

Cross-site request forgery CSRF vulnerability in wp-admin/index.php in WordPress 3.4.2 allows remote attackers to hijack the authentication of administrators for requests that modify an RSS URL via a dashboardincominglinks edit action...

Ubuntu: Security Advisory (USN-1565-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for horizon USN-1565-1

Ubuntu Update for Linux kernel vulnerabilities USN-1565-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN15651.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for horizon USN-1565-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...