CVE-2014-2385: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the web UI in Sophos Anti-Virus for Linux before 9.6.1 allow local users to inject arbitrary web script or HTML via the 1 newListList:ExcludeFileOnExpression, 2 newListList:ExcludeFilesystems, or 3 newListList:ExcludeMountPaths parameter to...

PT-2014-4671

Name of the Vulnerable Software and Affected Versions Sophos Anti-Virus for Linux versions prior to 9.6.1 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the web UI. These vulnerabilities allow local users to inject arbitrary web script or HTML via specific...

Skype for Linux <= 2.1 Beta - Multiple Strange Behavior

No description provided by source. Title: Skype for Linux =2.1 Beta multiple strange behavior Author: Emanuele Gentili Emgent, Emanuele Acri Crossbower Contacts: [email protected], [email protected] Published: 2010-01-04 Software Link: http://www.skype.com/intl/it/download/skype/linux/...

PT-2014-2185

Name of the Vulnerable Software and Affected Versions SNARE for Linux agent versions prior to 1.7.0 Description A cross-site scripting XSS issue exists in the events page of the SNARE for Linux agent, allowing remote attackers to inject arbitrary web script or HTML via a logged shell command. Thi...

PT-2014-3697

Name of the Vulnerable Software and Affected Versions Novell Client for Linux in Novell Open Enterprise Server OES 11 Linux SP2 Description The issue arises from improper management of a certain array by the /opt/novell/ncl/bin/nwrights in Novell Client for Linux. This allows local users to obtai...

CVE-2014-0595: Improper Restriction of Operations within the Bounds of a Memory Buffer

/opt/novell/ncl/bin/nwrights in Novell Client for Linux in Novell Open Enterprise Server OES 11 Linux SP2 does not properly manage a certain array, which allows local users to obtain the S permission in opportunistic circumstances by leveraging the granting of the F permission by an administrator...

Fedora Update for samba FEDORA-2013-14355

Check for the Version of samba OpenVAS Vulnerability Test Fedora Update for samba FEDORA-2013-14355 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

Fedora Update for libupnp FEDORA-2013-1734

Check for the Version of libupnp OpenVAS Vulnerability Test Fedora Update for libupnp FEDORA-2013-1734 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for samba FEDORA-2013-1654

Check for the Version of samba OpenVAS Vulnerability Test Fedora Update for samba FEDORA-2013-1654 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Fedora Update for samba4 FEDORA-2013-0859

Check for the Version of samba4 OpenVAS Vulnerability Test Fedora Update for samba4 FEDORA-2013-0859 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Snare Agent Linux Password Disclosure / CSRF Vulnerabilities

Snare for Linux ships with a web interface that can be used for viewing log data and configuring the agent. In the web interface at /remote, a user is able to set a password for remote configuration of the agent. The rendered page contains the field "RemotePassword" with its input type set to...

Snare for Linux Cross-Site Request Forgery

Snare for Linux Cross-Site Request Forgery I. BACKGROUND ---------------------- Snare for Linux provides a 'C2' or 'CAPP' style audit subsystem for the Linux operating system. It can be used as a standalone auditing tool for Linux, or can send data to the Snare Server for analysis and storage. II...

[email protected]

Snare for Linux Cross-Site Scripting via Log Injection I. BACKGROUND ---------------------- Snare for Linux provides a 'C2' or 'CAPP' style audit subsystem for the Linux operating system. It can be used as a standalone auditing tool for Linux, or can send data to the Snare Server for analysis and...

Snare For Linux Cross Site Scripting

Snare for Linux Cross-Site Scripting via Log Injection I. BACKGROUND ---------------------- Snare for Linux provides a 'C2' or 'CAPP' style audit subsystem for the Linux operating system. It can be used as a standalone auditing tool for Linux, or can send data to the Snare Server for analysis and...

Fedora Update for samba4 FEDORA-2012-7317

Check for the Version of samba4 OpenVAS Vulnerability Test Fedora Update for samba4 FEDORA-2012-7317 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

PT-2012-3717

Name of the Vulnerable Software and Affected Versions HP SNMP Agents for Linux versions prior to 9.0.0 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks. Recommendations For versions prior to 9.0.0, update to version 9.0.0 or later...

PT-2012-3716

Name of the Vulnerable Software and Affected Versions HP SNMP Agents for Linux versions prior to 9.0.0 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For HP SNMP Agents for Linux versions prior t...

CVE-2012-2001: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HP SNMP Agents for Linux before 9.0.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-2002: Improper Input Validation

Open redirect vulnerability in HP SNMP Agents for Linux before 9.0.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2011-1535: Undefined Security Weakness

Unspecified vulnerability in HP Insight Control for Linux aka IC-Linux before 6.3 allows remote authenticated users to obtain sensitive information, modify data, or cause a denial of service via unknown vectors...