NGS00138 Technical Advisory: Websense Triton 7.6 - authentication bypass in report management UI

======= Summary ======= Name: Websense Triton 7.6 Authentication-bypass in report management UI Release Date: 30 April 2012 Reference: NGS00138 Discoverer: Ben Williams [email protected] Vendor: Websense Vendor Reference: Systems Affected: Risk: High Status: Published ======== TimeLine...

Failover or Surebackup Starts a Virtual Machine With an Incorrect Ethernet Interface

Article Applicability The issue discussed in this article is strictly related to the use of VMXNET3 network adapters with the following vSphere VM guest operating systems: Windows 7 Windows 7 SP1 Server 2008 R2 Server 2008 R2 SP1 Challenge When you back up/replicate/copy/clone a vSphere VM runnin...

ESA-2012-018: EMC Data Protection Advisor Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-018: EMC Data Protection Advisor Multiple Vulnerabilities EMC Identifier: ESA-2012-018, DPA-14718 CVE Identifier: CVE-2012-0406 CVE Identifier: CVE-2012-0407 Severity Rating: CVSS v2 Base Score: See below for CVSS Base Scores for individual...

XSS in Kaseya version 6.2.0.0 web interface

Summary The Kaseya version 6.2.0.0 web interface and possibly other versions is vulnerable to Cross-Site Scripting in the "adminName" variable. 2. Description By submitting malicious input such as the following, it is possible to render javascript in the security context of the Kaseya server:...

Kaseya 6.2.0.0 Cross Site Scripting

Summary The Kaseya version 6.2.0.0 web interface and possibly other versions is vulnerable to Cross-Site Scripting in the "adminName" variable. 2. Description By submitting malicious input such as the following, it is possible to render javascript in the security context of the Kaseya server:...

SOL13519 - Multiple PHP vulnerabilities

Vulnerability Recommended Actions To mitigate this vulnerability, expose the administrative interface only on trusted networks and limit login access to trusted users. Impact of action: None. Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957:...

Microsoft Windows DirectWrite Denial of Service Vulnerability (2665364)

This host has moderate security update missing according to Microsoft Bulletin MS12-019. OpenVAS Vulnerability Test $Id: secpodms12-019.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows DirectWrite Denial of Service Vulnerability 2665364 Authors: Antu Sanadi Copyright: Copyright c 2012 SecPo...

Microsoft Windows DNS Server Denial of Service Vulnerability (2647170)

This host is missing an important security update according to Microsoft Bulletin MS12-017. OpenVAS Vulnerability Test $Id: secpodms12-017.nasl 5351 2017-02-20 08:03:12Z mwiegand $ Microsoft Windows DNS Server Denial of Service Vulnerability 2647170 Authors: Antu Sanadi Copyright: Copyright c 201...

Windows Kernel-Mode Drivers Privilege Elevation Vulnerability (2641653)

This host is missing an important security update according to Microsoft Bulletin MS12-018. OpenVAS Vulnerability Test $Id: secpodms12-018.nasl 5346 2017-02-19 08:43:11Z cfi $ Windows Kernel-Mode Drivers Privilege Elevation Vulnerability 2641653 Authors: Antu Sanadi Copyright: Copyright c 2012...

SQL-Injection (Error-Patching) - Basic Lesson #1

Document Title: =============== SQL-Injection Error-Patching - Basic Lesson 1 References: =========== Download: http://www.vulnerability-lab.com/resources/videos/446.wmv View: http://www.youtube.com/watch?v=Yd6fu0X9epQ Release Date: ============= 2012-02-26 Vulnerability Laboratory ID VL-ID:...

Microsoft IIS IP Address/Internal Network Name Disclosure Vulnerability

The host is running Microsoft IIS Webserver and is prone to IP address disclosure vulnerability. OpenVAS Vulnerability Test $Id: secpodmsiisinternalipaddrdiscvuln.nasl 5698 2017-03-23 14:04:51Z cfi $ Microsoft IIS IP Address/Internal Network Name Disclosure Vulnerability Authors: Madhuri D...

Microsoft IIS IP Address/Internal Network Name Disclosure Vulnerability - Active Check

Microsoft Internet Information Services IIS Webserver is prone to an IP address disclosure vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Emerson DeltaV Multiple Vulnerabilities

Overview ICS-CERT originally released Advisory ICSA-12-138-01P to the US-CERT secure portal on May 17, 2012, and released Update A on May 21, 2012. This web page release including Update A was delayed to allow users time to download and install the update. Researcher Kuang-Chun Hung of the Securi...

Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 / 11.10 : update-manager regression (USN-1284-2)

USN-1284-1 fixed vulnerabilities in Update Manager. One of the fixes introduced a regression for Kubuntu users attempting to upgrade to a newer Ubuntu release. This update fixes the problem. We apologize for the inconvenience. David Black discovered that Update Manager incorrectly extracted the...

USN-1284-2: Update Manager regression

USN-1284-1 fixed vulnerabilities in Update Manager. One of the fixes introduced a regression for Kubuntu users attempting to upgrade to a newer Ubuntu release. This update fixes the problem. We apologize for the inconvenience. Original advisory details: David Black discovered that Update Manager...

MS Windows Indeo Codec Remote Code Execution Vulnerability (2661637)

This host is missing an important security update according to Microsoft Bulletin MS12-014. OpenVAS Vulnerability Test $Id: secpodms12-014.nasl 5341 2017-02-18 16:59:12Z cfi $ MS Windows Indeo Codec Remote Code Execution Vulnerability 2661637 Authors: Madhuri D Copyright: Copyright c 2012 SecPod,...

Microsoft Internet Explorer Multiple Vulnerabilities (2647516)

This host is missing a critical security update according to Microsoft Bulletin MS12-010. OpenVAS Vulnerability Test $Id: secpodms12-010.nasl 6526 2017-07-05 05:43:52Z cfischer $ Microsoft Internet Explorer Multiple Vulnerabilities 2647516 Authors: Rachana Shetty Copyright: Copyright c 2012 SecPo...

HP OpenView Network Node Manager ov.dll _OVBuildPath Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'HEAD', :uri =...

SOL13279 - PHP vulnerability CVE-2009-4017

Recommended Action None Supplemental Information Note: This link will take you to a resource outside of AskF5, and it is possible that the document may be removed without our knowledge. SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view n...

Microsoft Windows Kernel Security Feature Bypass Vulnerability (2644615)

This host is missing an important security update according to Microsoft Bulletin MS12-001. OpenVAS Vulnerability Test $Id: secpodms12-001.nasl 8724 2018-02-08 15:02:56Z cfischer $ Microsoft Windows Kernel Security Feature Bypass Vulnerability 2644615 Authors: Madhuri D Copyright: Copyright c 201...