HP Insight Diagnostics Online Edition 8.4 - idstatusframe.php Multiple Cross-Site Scripting Vulnerabilities

HP Insight Diagnostics Online Edition 8.4 - idstatusframe.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/42888/info HP Insight Diagnostics Online Edition is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize...

HP Insight Diagnostics Online Edition 8.4 - custom.php?testmode Cross-Site Scripting

HP Insight Diagnostics Online Edition 8.4 - custom.php?testmode Cross-Site Scripting source: https://www.securityfocus.com/bid/42888/info HP Insight Diagnostics Online Edition is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An...

HP Insight Diagnostics Online Edition 8.4 - survey.php?category Cross-Site Scripting

HP Insight Diagnostics Online Edition 8.4 - survey.php?category Cross-Site Scripting source: https://www.securityfocus.com/bid/42888/info HP Insight Diagnostics Online Edition is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An...

HP Insight Diagnostics Online Edition 8.4 - globals.php?tabpage Cross-Site Scripting

HP Insight Diagnostics Online Edition 8.4 - globals.php?tabpage Cross-Site Scripting source: https://www.securityfocus.com/bid/42888/info HP Insight Diagnostics Online Edition is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An...

HP Insight Diagnostics Online Edition 8.4 - 'custom.php?testmode' Cross-Site Scripting

source: https://www.securityfocus.com/bid/42888/info HP Insight Diagnostics Online Edition is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of ...

HP Insight Diagnostics Online Edition 8.4 - 'parameters.php?device' Cross-Site Scripting

source: https://www.securityfocus.com/bid/42888/info HP Insight Diagnostics Online Edition is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of ...

HP Insight Diagnostics Online Edition 8.4 - 'globals.php?tabpage' Cross-Site Scripting

source: https://www.securityfocus.com/bid/42888/info HP Insight Diagnostics Online Edition is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of ...

HP Insight Diagnostics Online Edition 8.4 - 'idstatusframe.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/42888/info HP Insight Diagnostics Online Edition is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of ...

HP Insight Diagnostics Online Edition 8.4 - 'survey.php?category' Cross-Site Scripting

source: https://www.securityfocus.com/bid/42888/info HP Insight Diagnostics Online Edition is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of ...

HP Insight Diagnostics Online Edition 8.4 - parameters.php?device Cross-Site Scripting

HP Insight Diagnostics Online Edition 8.4 - parameters.php?device Cross-Site Scripting source: https://www.securityfocus.com/bid/42888/info HP Insight Diagnostics Online Edition is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An...

Hacktics Advisory Feb09: XSS in Oracle E-Business Suite

Hacktics Research Group Security Advisory http://www.hacktics.com/view=Resources7CAdvisory By Gil Cohen, Hacktics. 9-Feb-2010 =========== I. Overview =========== During a penetration test performed by Hacktics' experts, certain vulnerabilities were identified in an Oracle E-Business Suite...

IBM Tivoli Monitoring Service Console Detection

Tivoli Monitoring Service Console, a web interface for running system diagnostics, is hosted on the remote web server. This software is included with some IBM products, such as DB2. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid44394; scriptversion"1.10";...

AIX 530008 : U819171

The remote host is missing AIX PTF U819171 which is related to the security of the package devices.common.IBM.usb.diag You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

CVE-2008-3542

Unspecified vulnerability in HP Insight Diagnostics before 7.9.1.2402 allows remote attackers to read arbitrary files via unknown vectors...

Code injection

Unspecified vulnerability in HP Insight Diagnostics before 7.9.1.2402 allows remote attackers to read arbitrary files via unknown vectors...

CVE-2008-3542

CVE-2008-3542 affects HP Insight Diagnostics prior to version 7.9.1.2402 . The vulnerability allows a remote attacker to read arbitrary files via unknown vectors, with a base CVSS v2 of 7.8 (NETWORK, low attack complexity, no authentication). The HP Security Bulletin confirms the affected product...

CVE-2008-3542

Unspecified vulnerability in HP Insight Diagnostics before 7.9.1.2402 allows remote attackers to read arbitrary files via unknown vectors...

HP Insight Diagnostics unauthorized files access

No description provided...

[security bulletin] HPSBMA02373 SSRT071467 rev.1 - HP Insight Diagnostics, Remote Unauthorized Access to Files

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01561336 Version: 1 HPSBMA02373 SSRT071467 rev.1 - HP Insight Diagnostics, Remote Unauthorized Access to Files NOTICE: The information in this Security Bulletin should be acted upon as soon as...

Buffer overflow

Buffer overflow in the BrSmRcvAndCheck function in the RCHMGR module on IBM OS/400 V5R4M0, V5R4M5, and V6R1M0 allows local users to cause a denial of service task halt and main storage dump via unspecified vectors involving the running of diagnostics on a modem port. NOTE: there might be limited...