214 matches found
Cisco Releases Security Updates
Cisco has released security updates to address vulnerabilities in several products. Exploitation of some of these vulnerabilities could allow a remote attacker to take control of an affected system. Users and administrators are encouraged to review the following Cisco Security Advisories and appl...
Cisco Fog Director for IOx Arbitrary File Write Vulnerability
A vulnerability in the Cisco Fog Director for IOx could allow an authenticated, remote attacker to write a file to arbitrary locations. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by uploading a crafted file via the Cartridge interface. ...
FOG has multiple vulnerabilities
FOG is a free, open source, computer cloning and management solution. FOG has multiple vulnerabilities that allow input from certain unauthenticated users since parameters in the library function in the FOGManagerController.class.php file are not sanitized. An attacker can leverage this...
Cisco Fog Director Cross-Site Scripting Vulnerability
Cisco Fog Director is an automated management platform for centralized management of multiple applications running at the network edge. The platform enables control of application settings and lifecycles, and supports access to and monitoring of large-scale IoT deployments. A cross-site scripting...
CVE-2016-1306
Multiple cross-site scripting XSS vulnerabilities in Cisco Fog Director 1.00 allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug ID CSCux80466...
CVE-2016-1306
Multiple cross-site scripting XSS vulnerabilities in Cisco Fog Director 1.00 allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug ID CSCux80466...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Cisco Fog Director 1.00 allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug ID CSCux80466...
CVE-2016-1306
Multiple cross-site scripting XSS vulnerabilities in Cisco Fog Director 1.00 allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug ID CSCux80466...
CVE-2016-1306
CVE-2016-1306 covers multiple cross-site scripting (XSS) vulnerabilities in Cisco Fog Director 1.0(0). Attackers can inject arbitrary script or HTML by manipulating a crafted parameter in the web interface, enabling potential session hijacking or information disclosure when the malicious data is ...
Cisco Fog Director Cross-Site Scripting Vulnerability
A vulnerability in the Cisco Fog Director web framework could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of the affected software. The vulnerability is due to insufficient input validation for some of the parameters...
CVE-2014-3111
Multiple cross-site scripting XSS vulnerabilities in FOG 0.27 through 0.32 allow remote authenticated users to inject arbitrary web script or HTML via the 1 Printer Model field to the Printer Management page, 2 Image Name field to the Image Management page, 3 Storage Group Name field to the Stora...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in FOG 0.27 through 0.32 allow remote authenticated users to inject arbitrary web script or HTML via the 1 Printer Model field to the Printer Management page, 2 Image Name field to the Image Management page, 3 Storage Group Name field to the Stora...
CVE-2014-3111
Multiple cross-site scripting XSS vulnerabilities in FOG 0.27 through 0.32 allow remote authenticated users to inject arbitrary web script or HTML via the 1 Printer Model field to the Printer Management page, 2 Image Name field to the Image Management page, 3 Storage Group Name field to the Stora...
CVE-2014-3111
CVE-2014-3111 affects the FOG Imaging System (versions 0.27–0.32). The vulnerability is a multiple stored XSS impacting several management pages (Printer Management, Image Management, Storage Management, User Cleanup, Directory Cleaner). Vulnerable input points include fields like Printer Model, ...
Fog Creek Software FogBugz 4.0 29 Default.ASP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16216/info FogBugz is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script...
FOG Forum 0.8.1 - Multiple Local File Inclusion Vulnerabilities
No description provided by source. ======================================================= FOG Forum 0.8.1 Local File Inclusion Vulnerabilities ======================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Te...
Multiple Stored XSS in FOG Image deployment system - FD
Vulnerability title: Multiple Stored Cross-Site scripting CVE: CVE-2014-3111 Vendor: FOG Project Product: FOG Imaging system Affected version: 0.27 – 0.32latest Fixed version: N/A Reported by: Dolev Farhi ---------------------------- VULNERABILITY Details: ---------------------------- Latest and...
Fog Imaging System 0.32 Cross Site Scripting
Vulnerability title: Multiple Stored Cross-Site scripting CVE: CVE-2014-3111 Vendor: FOG Project Product: FOG Imaging system Affected version: 0.27 0.32latest Fixed version: N/A Reported by: Dolev Farhi ---------------------------- VULNERABILITY Details: ---------------------------- Latest and...