Design/Logic Flaw

Trend Micro Deep Discovery Inspector DDI on Deep Discovery Threat appliances with software before 3.5.1477, 3.6.x before 3.6.1217, 3.7.x before 3.7.1248, 3.8.x before 3.8.1263, and other versions allows remote attackers to obtain sensitive information or change the configuration via a direct...

CVE-2015-2872

Multiple cross-site scripting XSS vulnerabilities in Trend Micro Deep Discovery Inspector DDI on Deep Discovery Threat appliances with software before 3.5.1477, 3.6.x before 3.6.1217, 3.7.x before 3.7.1248, 3.8.x before 3.8.1263, and other versions allow remote attackers to inject arbitrary web...

CVE-2015-2873

CVE-2015-2873 affects Trend Micro Deep Discovery Inspector (DDI) on Deep Discovery Threat appliances. The root cause is improper authorization checks on direct access to critical management URLs (system log, whitelist, blacklist). An unauthenticated, non-admin user could view or modify sensitive ...

CVE-2015-2872

Trend Micro Deep Discovery Inspector (DDI) on Deep Discovery Threat appliances is affected by CVE-2015-2872 through input handling flaws in the web interface: crafted input to index.php and the widget feature can trigger cross-site scripting. Documented impact: unauthenticated remote injection of...

PT-2015-5954

Name of the Vulnerable Software and Affected Versions Trend Micro Deep Discovery Inspector DDI versions prior to 3.5.1477 Trend Micro Deep Discovery Inspector DDI versions 3.6.x prior to 3.6.1217 Trend Micro Deep Discovery Inspector DDI versions 3.7.x prior to 3.7.1248 Trend Micro Deep Discovery...

PT-2015-5953

Name of the Vulnerable Software and Affected Versions Trend Micro Deep Discovery Inspector DDI versions prior to 3.5.1477 Trend Micro Deep Discovery Inspector DDI versions 3.6.x prior to 3.6.1217 Trend Micro Deep Discovery Inspector DDI versions 3.7.x prior to 3.7.1248 Trend Micro Deep Discovery...

CVE-2015-2872: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Trend Micro Deep Discovery Inspector DDI on Deep Discovery Threat appliances with software before 3.5.1477, 3.6.x before 3.6.1217, 3.7.x before 3.7.1248, 3.8.x before 3.8.1263, and other versions allow remote attackers to inject arbitrary web...

CVE-2015-2873: Direct Request

Trend Micro Deep Discovery Inspector DDI on Deep Discovery Threat appliances with software before 3.5.1477, 3.6.x before 3.6.1217, 3.7.x before 3.7.1248, 3.8.x before 3.8.1263, and other versions allows remote attackers to obtain sensitive information or change the configuration via a direct...

Trend Micro Deep Discovery Inspector Authentication Bypass Vulnerability

Trend Micro Deep Discovery Inspector is a set of protection products from Trend Micro that can detect and identify undetectable threats in real time and propose solutions. An authentication bypass vulnerability exists in Trend Micro Deep Discovery Inspector. An attacker could use this vulnerabili...

Trend Micro Deep Discovery Inspector Cross-Site Scripting Vulnerability

Trend Micro Deep Discovery Inspector is a set of protection products from Trend Micro that can detect and identify hard-to-find threats in real time and propose solutions. A cross-site scripting vulnerability exists in Trend Micro Deep Discovery Inspector, which arises from the program's failure ...

Device Inspector 1.5 Command Injection

Document Title: =============== Device Inspector v1.5 iOS - Command Inject Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1558 Release Date: ============= 2015-08-07 Vulnerability Laboratory ID VL-ID: ====================================...

Device Inspector v1.5 iOS - Command Inject Vulnerabilities

Document Title: =============== Device Inspector v1.5 iOS - Command Inject Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1558 Release Date: ============= 2015-08-07 Vulnerability Laboratory ID VL-ID: ====================================...

SAP Afaria - Stored XSS

Application: SAP Afaria 7 Vendor URL: http://www.sap.com Bugs: XSS Reported: 18.02.2015 Vendor response: 18.02.2015 Date of Public Advisory: 11.08.2015 Reference: SAP Security Note 2152669 Authors: Dmitry Chastukhin ERPScan Vulnerability information Class: XML External Entity CWE-79 Impact: Store...

PT-2014-7083

Name of the Vulnerable Software and Affected Versions IBM Business Process Manager BPM versions 8.0.x through 8.0.1.3 IBM Business Process Manager BPM versions 8.5.x through 8.5.5 Description A cross-site scripting XSS issue exists in the Process Inspector component, allowing remote authenticated...

CVE-2014-6173: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Process Inspector in IBM Business Process Manager BPM 8.0.x through 8.0.1.3 and 8.5.x through 8.5.5 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

Chinese Attackers Hack NOAA's Systems

Systems belonging to the National Oceanic and Atmospheric Administration NOAA were recently compromised, purportedly by Chinese hackers. The NOAA confirmed that four of the scientific agency’s websites were targeted and compromised in an “internet-sourced attack” earlier this fall, in a statement...

[SECURITY] Fedora 20 Update: seamonkey-2.30-1.fc20

SeaMonkey is an all-in-one Internet application suite. It includes a browser, mail/news client, IRC client, JavaScript debugger, and a tool to inspect the DOM for web pages. It is derived from the application formerly known as Mozilla Application Suite...

U.S. Nuclear Regulator Hacked Three Times in Three Years

Hackers hit the U.S. Nuclear Regulatory Commission NRC three separate times during the past three years, duping employees of the agency into spreading malware and clicking through phishing links intended to harvest log-in credentials. A NextGov report on Monday said hackers in an unnamed foreign...

NOAA, Satellite Data, Riddled with Vulnerabilities

The informational systems that the National Oceanic and Atmospheric Administration NOAA run are fraught with vulnerabilities and what the U.S. Department of Commerce deems “significant security deficiencies” that could leave it vulnerable to cyber attacks. That’s according to the findings of an...

MG-SOFT Net Inspector 6.5.0.826 - Multiple Remote Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/28266/info Net Inspector is prone to multiple remote vulnerabilities, including: - A format-string vulnerability - A directory-traversal vulnerability - Multiple denial-of-service vulnerabilities An attacker can exploit...