EUVD-2012-2010

Malware in sbrugna...

EUVD-2012-2011

Malware in sbrugna...

[security bulletin] HPSBMU02770 SSRT100848 rev.1 - HP Insight Management Agents for Windows Server, Remote Cross Site Request Forgery (CSRF), Cross Site Scripting (XSS), URL Redirection, Unauthorized Modification, Denial of Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03301267 Version: 1 HPSBMU02770 SSRT100848 rev.1 - HP Insight Management Agents for Windows Server, Remote Cross Site Request Forgery CSRF, Cross Site Scripting XSS, URL Redirection, Unauthorized...

HP Insight Management Agents Multiple Vulnerabilities

According to its version, the installation of HP Insight Management Agents on the remote host has multiple unspecified vulnerabilities, including cross-site scripting, cross-site request forgery, denial of service, and unauthorized modification. C Tenable Network Security, Inc. include"compat.inc...

CVE-2012-2004

Open redirect vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2012-2003

Cross-site request forgery CSRF vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Code injection

Unspecified vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to modify data or cause a denial of service via unknown vectors...

CVE-2012-2004

CVE-2012-2004 is an open redirect vulnerability in HP Insight Management Agents for Windows, affecting versions before 9.0.0.0 on Windows Server 2003/2008. The underlying issue allows remote attackers to redirect users to arbitrary sites, enabling phishing via unspecified vectors. Public referenc...

CVE-2012-2006

CVE-2012-2006 applies to HP Insight Management Agents for Windows Server, affected on Windows Server 2003/2008 prior to version 9.0.0.0. The vulnerability allows remote modification of data or denial of service via unknown vectors. HP’s security bulletin HPSBMU02770/SSRT100848 rev.1 notes these i...

CVE-2012-2005

CVE-2012-2005 corresponds to a cross-site scripting (XSS) vulnerability in HP Insight Management Agents for Windows Server, prior to version 9.0.0.0, running on Windows Server 2003/2008. The underlying issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. H...

CVE-2012-2003

CVE-2012-2003 describes a CSRF vulnerability in HP Insight Management Agents for Windows Server before v9.0.0.0, affecting Windows Server 2003/2008. The security bulletin and HP PS/Patches document the same CVE family and indicate the vulnerability could allow remote attackers to hijack user auth...

CVE-2012-2003

Cross-site request forgery CSRF vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2012-2004

Open redirect vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

PT-2012-3719

Name of the Vulnerable Software and Affected Versions HP Insight Management Agents versions prior to 9.0.0.0 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks. This is achieved via unspecified vectors, potentially affecting the...

PT-2012-3720

Name of the Vulnerable Software and Affected Versions HP Insight Management Agents versions prior to 9.0.0.0 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. This affects systems running on Windows Server 2003 and...

CVE-2012-2005: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2012-3721

Name of the Vulnerable Software and Affected Versions HP Insight Management Agents versions prior to 9.0.0.0 Description The issue allows remote attackers to modify data or cause a denial of service. The exact vectors used for the attack are not specified. Recommendations For versions prior to...

CVE-2012-2006: Undefined Security Weakness

Unspecified vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to modify data or cause a denial of service via unknown vectors...

CVE-2012-2003: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...