Design/Logic Flaw

The web framework in Cisco WAAS Software before 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1; Cisco ACNS Software 4.x and 5.x before 5.5.29.2; Cisco ECDS Software 2.x before 2.5.6; Cisco CDS-IS Software 2.x before 2.6.3.b50 and 3.1.x before 3.1.2b54; Cisco VDS-IS Softwar...

CVE-2013-3444

The CVE-2013-3444 entry corresponds to an authenticated command-injection vulnerability in multiple Cisco products when configured in central-management mode. Affected software includes Cisco WAAS (before 4.x and certain 5.x lines), Cisco ACNS, ECDS, CDS-IS, VDS-IS, VDS-SB, VDS-OE, and VDS-OS in ...

PT-2013-4399

Name of the Vulnerable Software and Affected Versions Cisco WAAS Software versions prior to 4.x and 5.x before 5.0.3e Cisco WAAS Software versions 5.1.x before 5.1.1c Cisco WAAS Software versions 5.2.x before 5.2.1 Cisco ACNS Software versions 4.x and 5.x before 5.5.29.2 Cisco ECDS Software...

CVE-2013-3444: Improper Neutralization of Special Elements used in an OS Command

The web framework in Cisco WAAS Software before 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1; Cisco ACNS Software 4.x and 5.x before 5.5.29.2; Cisco ECDS Software 2.x before 2.5.6; Cisco CDS-IS Software 2.x before 2.6.3.b50 and 3.1.x before 3.1.2b54; Cisco VDS-IS Softwar...

CVE-2013-2242

Summary: CVE-2013-2242 affects Moodle versions up to 2.5.x, where the chat daemon could be accessed by remote authenticated users due to insufficient checks on mod/chat:chat capability before authorizing daemon-mode chat. This could bypass intended access restrictions via an HTTP session to a cha...

Multiple Vulnerabilities in Cisco Email Security Appliance (cisco-sa-20130626-esa)

According to its self-reported version, the Cisco AsyncOS running on the remote Cisco Email Security ESA appliance is affected by multiple vulnerabilities : - An unspecified vulnerability exists in the web framework that could allow a remote, authenticated attacker to execute arbitrary commands...

PT-2013-3617

Name of the Vulnerable Software and Affected Versions Moodle versions 2.1.10 and earlier, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1 Description The issue allows remote authenticated users to bypass intended access restrictions via an HTTP session to a chat...

[Facebook Password Decryptor v5.0] Facebook Password Recovery Software

Facebook Password Decryptor is the FREE software to instantly recover Facebook account passwords stored by popular Web Browsers and Messengers. It is one of our most popular software with over One Million downloads worldwide. It supports recovering of the stored Facebook login password from most ...

[MAC Address Scanner] Desktop Tool to Find MAC address of Remote Computers on Local Network

MAC Address Scanner is the free desktop tool to remotely scan and find MAC Address of all systems on your local network. It allows you to scan either a single host or range of hosts at a time. During the scan, it displays the current status for each host. After the completion, you can generate...

Winamp < 5.64 Multiple Vulnerabilities

The remote host is running Winamp, a media player for Windows. The version of Winamp installed on the remote host is earlier than 5.64 and is, therefore, reportedly affected by the following vulnerabilities : - A buffer overflow exists in the 'mllocal.dll' when passed GUI search fields. - A buffe...

CVE-2013-1615

The management console aka Java console on the Symantec Security Information Manager SSIM appliance 4.7.x and 4.8.x before 4.8.1 allows remote attackers to obtain sensitive information via unspecified web-GUI API calls...

Design/Logic Flaw

The management console aka Java console on the Symantec Security Information Manager SSIM appliance 4.7.x and 4.8.x before 4.8.1 allows remote attackers to obtain sensitive information via unspecified web-GUI API calls...

CVE-2013-1615

The management console aka Java console on the Symantec Security Information Manager SSIM appliance 4.7.x and 4.8.x before 4.8.1 allows remote attackers to obtain sensitive information via unspecified web-GUI API calls...

PT-2013-3278

Name of the Vulnerable Software and Affected Versions Symantec Security Information Manager appliance versions 4.7.x through 4.8.x Description The management console on the Symantec Security Information Manager appliance allows remote attackers to obtain sensitive information via unspecified...

CVE-2013-1615: Exposure of Sensitive Information to an Unauthorized Actor

The management console aka Java console on the Symantec Security Information Manager SSIM appliance 4.7.x and 4.8.x before 4.8.1 allows remote attackers to obtain sensitive information via unspecified web-GUI API calls...

Winamp 5.63 - Stack Buffer Overflow

Inshell Security Advisory http://www.inshell.net 1. ADVISORY INFORMATION ----------------------- Product: WinAmp Vendor URL: www.winamp.com Type: Stack-based Buffer Overflow CWE-121 Date found: 2013-06-05 Date published: 2013-07-01 CVSSv2 Score: Bug 1: 7,5 AV:N/AC:L/Au:N/C:P/I:P/A:P Bug 2: 3,7...

Design/Logic Flaw

The management GUI in the web framework in IronPort AsyncOS on Cisco Web Security Appliance devices before 7.1.3-013, 7.5 before 7.5.0-838, and 7.7 before 7.7.0-602; Email Security Appliance devices before 7.1.5-106 and 7.3, 7.5, and 7.6 before 7.6.3-019; and Content Security Management Appliance...

CVE-2013-0497: IBM SONAS and Storwize V7000 GUI authentication session hijacking

The IBM SONAS GUI vulnerability CVE-2013-0497 stems from not invalidating the session cookie after a user logs out, enabling a potentially authenticated session holder to access the GUI even after termination. Affected products include SONAS, specifically all 1.3.x.x and 1.4.0.x releases. The iss...

PT-2013-4343

Name of the Vulnerable Software and Affected Versions Cisco Web Security Appliance versions prior to 7.1.3-013 Cisco Web Security Appliance versions prior to 7.5.0-838 Cisco Web Security Appliance versions prior to 7.7.0-602 Cisco Email Security Appliance versions prior to 7.1.5-106 Cisco Email...

Multiple Vulnerabilities in Cisco Email Security Appliance

Cisco IronPort AsyncOS Software for Cisco Email Security Appliance is affected by the following vulnerabilities: Web Framework Authenticated Command Injection Vulnerability IronPort Spam Quarantine Denial of Service Vulnerability Management GUI Denial of Service Vulnerability Successful...