EUVD-2012-2011

Malware in sbrugna...

EUVD-2012-2010

Malware in sbrugna...

[security bulletin] HPSBMU02770 SSRT100848 rev.1 - HP Insight Management Agents for Windows Server, Remote Cross Site Request Forgery (CSRF), Cross Site Scripting (XSS), URL Redirection, Unauthorized Modification, Denial of Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03301267 Version: 1 HPSBMU02770 SSRT100848 rev.1 - HP Insight Management Agents for Windows Server, Remote Cross Site Request Forgery CSRF, Cross Site Scripting XSS, URL Redirection, Unauthorized...

HP Insight Management Agents Multiple Vulnerabilities

According to its version, the installation of HP Insight Management Agents on the remote host has multiple unspecified vulnerabilities, including cross-site scripting, cross-site request forgery, denial of service, and unauthorized modification. C Tenable Network Security, Inc. include"compat.inc...

CVE-2012-2004

Open redirect vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2012-2003

Cross-site request forgery CSRF vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Code injection

Unspecified vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to modify data or cause a denial of service via unknown vectors...

CVE-2012-2006

CVE-2012-2006 applies to HP Insight Management Agents for Windows Server, affected on Windows Server 2003/2008 prior to version 9.0.0.0. The vulnerability allows remote modification of data or denial of service via unknown vectors. HP’s security bulletin HPSBMU02770/SSRT100848 rev.1 notes these i...

CVE-2012-2004

Open redirect vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2012-2005

CVE-2012-2005 corresponds to a cross-site scripting (XSS) vulnerability in HP Insight Management Agents for Windows Server, prior to version 9.0.0.0, running on Windows Server 2003/2008. The underlying issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. H...

CVE-2012-2003

CVE-2012-2003 describes a CSRF vulnerability in HP Insight Management Agents for Windows Server before v9.0.0.0, affecting Windows Server 2003/2008. The security bulletin and HP PS/Patches document the same CVE family and indicate the vulnerability could allow remote attackers to hijack user auth...

CVE-2012-2004

CVE-2012-2004 is an open redirect vulnerability in HP Insight Management Agents for Windows, affecting versions before 9.0.0.0 on Windows Server 2003/2008. The underlying issue allows remote attackers to redirect users to arbitrary sites, enabling phishing via unspecified vectors. Public referenc...

CVE-2012-2003

Cross-site request forgery CSRF vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Path traversal

HP Insight Management Agents before 8.6 allows remote attackers to obtain sensitive information via an unspecified request that triggers disclosure of the full path...

CVE-2010-4112

HP Insight Management Agents before 8.6 allows remote attackers to obtain sensitive information via an unspecified request that triggers disclosure of the full path...

CVE-2002-2422

CVE-2002-2422 is a cross-site scripting (XSS) vulnerability affecting Compaq Insight Management Agents in versions 2.0, 2.1, 3.6.0, 4.2 and 4.3.7. The issue allows a remote attacker to inject arbitrary web script or HTML by supplying a crafted URL, which causes the script to appear in the resulti...

CVE-2002-2422

Cross-site scripting XSS vulnerability in Compaq Insight Management Agents 2.0, 2.1, 3.6.0, 4.2 and 4.3.7 allows remote attackers to inject arbitrary web script or HTML via a URL, which inserts the script into the resulting error message...