3104 matches found
Quest Software Big Brother Arbitrary File Deletion and Overwriting
Two directory traversal vulnerabilities have been reported in Quest Software's Big Brother. Big Brother is a network monitoring software, which enables administrators to monitor their organization's network activity. These vulnerabilities exist due to improper input validation in the application...
Advanced Threats Are Not All the APT
By B.K. DeLong We have heard variations on the argument that within the context of information security, the “advanced persistent threat” APT is not really all that advanced or new, that it is being made too big a deal of or FUD and that it is no more than marketing hype though more of an effort...
Symantec Web Gateway Detection
Symantec Web Gateway was detected on the remote host. This application protects against web-based malware and data loss. The host may be configured as a Central Intelligence Unit, which provides centralized management for multiple gateways. Note: When HTTP credentials are configured, the anti-vir...
Buffer overflow
Buffer overflow in the Lotus Freelance Graphics PRZ file viewer in Autonomy KeyView, as used in Symantec Mail Security SMS 6.x through 8.x, Symantec Brightmail and Messaging Gateway before 9.5.1, and Symantec Data Loss Prevention DLP before 10.5.3 and 11.x before 11.1, allows remote attackers to...
CVE-2011-0548
Buffer overflow in the Lotus Freelance Graphics PRZ file viewer in Autonomy KeyView, as used in Symantec Mail Security SMS 6.x through 8.x, Symantec Brightmail and Messaging Gateway before 9.5.1, and Symantec Data Loss Prevention DLP before 10.5.3 and 11.x before 11.1, allows remote attackers to...
CVE-2011-0548
CVE-2011-0548 concerns a buffer overflow in the Lotus Freelance Graphics PRZ file viewer component of Autonomy KeyView, used in Symantec Mail Security (SMS) 6.x–8.x, Symantec Brightmail and Messaging Gateway pre-9.5.1, and Symantec DLP pre-10.5.3 and 11.x pre-11.1. The vulnerability allows a remo...
CVE-2011-0548
Buffer overflow in the Lotus Freelance Graphics PRZ file viewer in Autonomy KeyView, as used in Symantec Mail Security SMS 6.x through 8.x, Symantec Brightmail and Messaging Gateway before 9.5.1, and Symantec Data Loss Prevention DLP before 10.5.3 and 11.x before 11.1, allows remote attackers to...
Trend Micro Data Loss Prevention Virtual Appliance Web Console Detection
The remote web server hosts an instance of Trend Micro Data Loss Prevention DLP Web Console. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid55455; scriptversion"1.9";...
Trend Micro Data Loss Prevention Virtual Appliance Encoded Traversal Arbitrary File Access
The instance of Trend Micro Data Loss Prevention Web Console listening on this port allows an unauthenticated, remote attacker to retrieve arbitrary files through its web server using specially crafted requests with encoded directory traversal sequences. This can result in the disclosure of...
Trend Micro Data Loss Prevention Detection
This host is running Trend Micro Data Loss Prevention, a network and endpoint-based data loss prevention DLP solution. OpenVAS Vulnerability Test $Id: gbtrendmicrodatalosspreventiondetect.nasl 6032 2017-04-26 09:02:50Z teissa $ Trend Micro Data Loss Prevention Detection Authors: Michael Meyer...
Trend Micro Data Loss Prevention Directory Traversal Vulnerability
Trend Micro Data Loss Prevention is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user- supplied input. A remote attacker could exploit this vulnerability using directory- traversal strings such as '../' to gain access to arbitrary files on the targeted...
Trend Micro Data Loss Prevention Detection
This host is running Trend Micro Data Loss Prevention, a network and endpoint-based data loss prevention DLP solution. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Trend Micro Data Loss Prevention 5.5 Directory Traversal Vulnerability
Trend Micro Data Loss Prevention is prone to a directory traversal vulnerability because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective righ...
Trend Micro Data Loss Prevention Virtual Appliance 5.5 - Directory Traversal
Trend Micro Data Loss Prevention Virtual Appliance 5.5 - Directory Traversal Software: Trend Micro Data Loss Prevention Virtual Appliance 5.5 Vulnerability: Directory Traversal Threat Level: Serious 5/5 Download: http://support.trendmicro.com.cn/TM- Product/Product/DLP/5.5/Manager/5.5GM/DLPVA-...
Trend Micro Data Loss Prevention Virtual Appliance 5.5 - Directory Traversal
Software: Trend Micro Data Loss Prevention Virtual Appliance 5.5 Vulnerability: Directory Traversal Threat Level: Serious 5/5 Download: http://support.trendmicro.com.cn/TM- Product/Product/DLP/5.5/Manager/5.5GM/DLPVA- 5.5.1294-i386-DVD.iso Discovery Date: 27/05/2011 Remote: Yes Author Site Email:...
Multi-Vendor Autonomy Verity Keyview PRZ Reader Filter Overflow
SUMMARY Symantec products that ship with the Verity KeyView Filter have updated the module to address a security issue being reported in the content filter processing of specifically crafted document formats. AFFECTED PRODUCTS Product | Version | Build | Solutions ---|---|---|--- Symantec Mail...
CVE-2011-1423
Cross-site scripting XSS vulnerability in RSA Data Loss Prevention DLP Enterprise Manager 8.x before 8.5 SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in RSA Data Loss Prevention DLP Enterprise Manager 8.x before 8.5 SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2011-1423
CVE-2011-1423 is a cross-site scripting (XSS) vulnerability in RSA Data Loss Prevention (DLP) Enterprise Manager 8.x, caused by improper input validation. It affects RSA DLP Enterprise Manager versions 8.x prior to 8.5 SP1 and allows remote attackers to inject arbitrary web script or HTML via uns...
