Microsoft Windows: MSS: Percentage threshold for security event log (show warning)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winmlwarninglevel.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for MSS: WarningLevel Percentage threshold for the security event log at which the system will generate a warning Authors: Emanuel Moss Copyright: Copyrigh...

Microsoft Windows: Service: Windows Event Collector

This test checks the setting for policy OpenVAS Vulnerability Test $Id: wineventcollector.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Windows Event Collector Wecsvc Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Citrix Licensing service is not running or properly installed on the License server

The Citrix Licensing service is not running, properly installed, registered on the machine, or the service permissions are not set correctly. The System Event Log may have traces of service-related issues...

DCSYNCMonitor - Monitors For DCSYNC And DCSHADOW Attacks And Create Custom Windows Events For These Events

This tool is an application/service that can be deployed on Domain controllers to alert on Domain Controller Syncronization attempts. When an attempt is detected, the tool will write an event to the Windows Event Log. These events can be correlated in a SIEM. In addition, this tool can take a lis...

Debian DSA-4160-1 : libevt - security update

It was discovered that insufficient input sanitising in libevt, a library to access the Windows Event Log EVT format, could result in denial of service if a malformed EVT file is processed. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

Debian: Security Advisory (DSA-4160-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Libevt Design Vulnerabilities

libevt is a tool for accessing the Windows event log. A security vulnerability in the 'libevtrecordvaluesreadevent' function in the libevtrecordvalues.c file in versions of libevt prior to 2018-03-17 stems from a failure of the program to properly perform a detection. A detailed vulnerability...

Invoke-Phant0m - Windows Event Log Killer

This script walks thread stacks of Event Log Service process spesific svchost.exe and identify Event Log Threads to kill Event Log Service Threads. So the system will not be able to collect logs and at the same time the Event Log Service will appear to be running. I have made this script for two...

Catalyst Mahara Information Disclosure Vulnerability

Catalyst Mahara is a social networking system from Catalyst IT in New Zealand. The system includes a blog, resume builder, file manager, and more. A security vulnerability exists in Catalyst Mahara that stems from the program storing passwords in plaintext in the eventlog form. An attacker could...

PT-2017-10857

Name of the Vulnerable Software and Affected Versions Mahara versions 15.04 through 15.04.12 Mahara versions 16.04 through 16.04.6 Mahara versions 16.10 through 16.10.3 Mahara versions 17.04 through 17.04.1 Description The issue allows plain text passwords to be recorded in the event log table...

VMware vCenter Server Information Disclosure

The vulnerability of the event log browser, distributed switch configuration settings, and the content library of the VMware vCenter Server management server is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability can allow a malicious actor to...

Zoho ManageEngine Event Log Analyzer Cross-Site Scripting Vulnerability (CNVD-2017-26267)

Zoho ManageEngine Event Log Analyzer is the United States ZhuoHao Zoho company's set of systems, event log analysis software. A cross-site scripting vulnerability exists in Zoho ManageEngine Event Log Analyzer versions 11.4 and 11.5, which originates from a password being displayed in a cookie wi...

Zoho ManageEngine Event Log Analyzer Cross-Site Scripting Vulnerability

Zoho ManageEngine Event Log Analyzer is the United States ZhuoHao Zoho company's set of systems, event log analysis software. A cross-site scripting vulnerability exists in the Event Log Parser function and the 'Display' function in Zoho ManageEngine Event Log Analyzer version 11.4 and 11.5. A...

Cross site scripting

Multiple Persistent cross-site scripting XSS vulnerabilities in Event log parsing and Display functions in Zoho ManageEngine Event Log Analyzer 11.4 and 11.5 allow remote attackers to inject arbitrary web script or HTML via syslog...

Cross site scripting

Zoho ManageEngine Event Log Analyzer 11.4 and 11.5 allows remote attackers to obtain an authenticated user's password via XSS vulnerabilities or sniffing non-SSL traffic on the network, because the password is represented in a cookie with a reversible encoding method...

CVE-2017-11687

Multiple Persistent cross-site scripting XSS vulnerabilities in Event log parsing and Display functions in Zoho ManageEngine Event Log Analyzer 11.4 and 11.5 allow remote attackers to inject arbitrary web script or HTML via syslog...

Cross site scripting

Multiple Reflective cross-site scripting XSS vulnerabilities in search and display of event data in Zoho ManageEngine Event Log Analyzer 11.4 and 11.5 allow remote attackers to inject arbitrary web script or HTML, as demonstrated by the fName parameter...

CVE-2017-11685

Multiple Reflective cross-site scripting XSS vulnerabilities in search and display of event data in Zoho ManageEngine Event Log Analyzer 11.4 and 11.5 allow remote attackers to inject arbitrary web script or HTML, as demonstrated by the fName parameter...

CVE-2017-11687

Multiple Persistent cross-site scripting XSS vulnerabilities in Event log parsing and Display functions in Zoho ManageEngine Event Log Analyzer 11.4 and 11.5 allow remote attackers to inject arbitrary web script or HTML via syslog...

CVE-2017-11686

Zoho ManageEngine Event Log Analyzer 11.4 and 11.5 allows remote attackers to obtain an authenticated user's password via XSS vulnerabilities or sniffing non-SSL traffic on the network, because the password is represented in a cookie with a reversible encoding method...