Cisco Headend Digital Broadband Delivery System HTTP Response-Splitting Vulnerability

A vulnerability in the Cisco Headend Digital Broadband Delivery System could allow an unauthenticated, remote attacker to conduct HTTP response-splitting attacks. The vulnerability is due to improper sanitization on user input performed by the HTTP Header Handler within the affected software...

CVE-2015-0724

Multiple cross-site scripting XSS vulnerabilities in dncs 7.0.0.12 in Cisco Headend Digital Broadband Delivery System allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in a 1 GET or 2 POST request, aka Bug ID CSCur25604...

CVE-2015-0724

CVE-2015-0724 affects Cisco Headend Digital Broadband Delivery System (dncs 7.0.0.12). The issue is cross-site scripting via HTTP GET/POST parameters due to improper input validation. Impact is that remote attackers can inject arbitrary script/HTML, with potential session-related consequences; CV...

PT-2015-4839

Name of the Vulnerable Software and Affected Versions Cisco Headend Digital Broadband Delivery System dncs version 7.0.0.12 Description The issue allows remote attackers to inject arbitrary web script or HTML via unspecified parameters in a GET or POST request. Recommendations For version 7.0.0.1...

CVE-2015-0724: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in dncs 7.0.0.12 in Cisco Headend Digital Broadband Delivery System allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in a 1 GET or 2 POST request, aka Bug ID CSCur25604...

Cisco Headend Digital Broadband Delivery System Cross-Site Scripting Vulnerability

The Cisco Headend Digital Broadband Delivery System is a front-end broadband digital delivery system. A cross-site scripting vulnerability exists in the Cisco Headend Digital Broadband Delivery System. Because the program's WEB management interface fails to correctly filter user-submitted input, ...

PT-2015-5920

Name of the Vulnerable Software and Affected Versions Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway versions prior to 10.5 Build 53.9 through 55.8 Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway versions 10.5.e prior to Build 53-9010.e...

CVE-2015-2829: Undefined Security Weakness

Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway before 10.5 Build 53.9 through 55.8 and 10.5.e Build 53-9010.e allow remote attackers to cause a denial of service reboot via unspecified vectors...

FreeBSD : mailman -- path traversal vulnerability (a5f160fa-deee-11e4-99f8-080027ef73ec)

Mark Sapiro reports : A path traversal vulnerability has been discovered and fixed. This vulnerability is only exploitable by a local user on a Mailman server where the suggested Exim transport, the Postfix postfixtomailman.py transport or some other programmatic MTA delivery not using aliases is...

Multiple Cross-Site Scripting Vulnerabilities in Ericsson Drutt Mobile Service Delivery Platform

Ericsson Drutt Mobile Service Delivery Platform is a business support system for Service Delivery Platforms SDPs for on-site and off-portal services from Ericsson, Sweden. Multiple cross-site scripting vulnerabilities exist in Ericsson Drutt Mobile Service Delivery Platform 4, 5, and 6, which cou...

Ericsson Drutt Mobile Service Delivery Platform Directory Traversal Vulnerability

Ericsson Drutt Mobile Service Delivery Platform MSDP is a business support system from Ericsson, Sweden, that supports Service Delivery Platforms SDPs for on-site and off-portal services. A directory traversal vulnerability exists in Instance Monitor in Ericsson Drutt MSDP. A remote attacker coul...

Ericsson Drutt Mobile Service Delivery Platform Open Redirect Vulnerability

Ericsson Drutt Mobile Service Delivery Platform MSDP is a business support system from Ericsson, Sweden, that supports Service Delivery Platforms SDPs for on-site and off-portal services. An open redirection vulnerability exists in the 3PI Manager of the Ericsson Drutt MSDP, which stems from the...

CVE-2015-2167

Open redirect vulnerability in the 3PI Manager in Ericsson Drutt Mobile Service Delivery Platform MSDP 4, 5, and 6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter to jsp/start-3pi-manager.jsp...

Open redirect

Open redirect vulnerability in the 3PI Manager in Ericsson Drutt Mobile Service Delivery Platform MSDP 4, 5, and 6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter to jsp/start-3pi-manager.jsp...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Report Viewer in Ericsson Drutt Mobile Service Delivery Platform MSDP 4.x, 5.x, and 6.x allow remote attackers to inject arbitrary web script or HTML via the 1 portal, 2 fromDate, 3 toDate, 4 fromTime, 5 toTime, 6 kword, 7 uname, 8 pname, 9...

Directory traversal

Directory traversal vulnerability in the Instance Monitor in Ericsson Drutt Mobile Service Delivery Platform MSDP 4, 5, and 6 allows remote attackers to read arbitrary files via a ..%2f dot dot encoded slash in the default URI...

CVE-2015-2165

Multiple cross-site scripting XSS vulnerabilities in the Report Viewer in Ericsson Drutt Mobile Service Delivery Platform MSDP 4.x, 5.x, and 6.x allow remote attackers to inject arbitrary web script or HTML via the 1 portal, 2 fromDate, 3 toDate, 4 fromTime, 5 toTime, 6 kword, 7 uname, 8 pname, 9...

CVE-2015-2167

Open redirect vulnerability in the 3PI Manager in Ericsson Drutt Mobile Service Delivery Platform MSDP 4, 5, and 6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter to jsp/start-3pi-manager.jsp...

CVE-2015-2167

Summary: CVE-2015-2167 is an open redirect vulnerability in Ericsson Drutt MSDP 3PI Manager (versions 4, 5, and 6). The issue arises from inadequate filtering of the url parameter in jsp/start-3pi-manager.jsp, enabling remote attackers to redirect users to arbitrary sites and potentially facilita...

CVE-2015-2165: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Report Viewer in Ericsson Drutt Mobile Service Delivery Platform MSDP 4.x, 5.x, and 6.x allow remote attackers to inject arbitrary web script or HTML via the 1 portal, 2 fromDate, 3 toDate, 4 fromTime, 5 toTime, 6 kword, 7 uname, 8 pname, 9...