CVE-2017-12308

CVE-2017-12308 affects Cisco Small Business 300/500 Series Managed Switches. The issue is an HTTP response splitting vulnerability caused by insufficient input validation in the web framework, enabling an unauthenticated remote attacker to coax a user into injecting code or to access browser-base...

CVE-2017-12308

A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation ...

CVE-2017-12307

CVE-2017-12307 affects Cisco Small Business 300/500 Series Managed Switches (including 300/500 Series, 350, 350X, 550X, ESW2) where the web interface’s input validation can be bypassed to trigger a reflected XSS. The root cause is insufficient input validation in parameters passed to the web serv...

PT-2018-5386

Name of the Vulnerable Software and Affected Versions: Cisco Small Business Managed Switches software affected versions not specified Description: A vulnerability in the web framework could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack against a user of th...

PT-2018-5385

Name of the Vulnerable Software and Affected Versions: Cisco Small Business 300 Series Managed Switches affected versions not specified Cisco Small Business 500 Series Stackable Managed Switches affected versions not specified Cisco 350 Series Managed Switches affected versions not specified Cisc...

CVE-2017-12308: Improper Neutralization of CRLF Sequences in HTTP Headers

A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation ...

CVE-2017-12307: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input...

Cisco Small Business 300 and 500 Series Managed Switches Cross-Site Scripting Vulnerability

A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input...

Unspecified Vulnerability in IBM MQ Managed File Transfer Agent

IBM MQ Managed File Transfer Agent is a suite of file transfer software from IBM in the United States. The software transfers files between systems in an auditable manner. A security vulnerability exists in IBM MQ Managed File Transfer Agent that arises from the program setting insecure permissio...

CVE-2017-1699

IBM MQ Managed File Transfer Agent 8.0 and 9.0 sets insecure permissions on certain files it creates. A local attacker could exploit this vulnerability to modify or delete data contained in the files with an unknown impact. IBM X-Force ID: 134391...

CVE-2017-1699

IBM MQ Managed File Transfer Agent 8.0 and 9.0 sets insecure permissions on certain files it creates. A local attacker could exploit this vulnerability to modify or delete data contained in the files with an unknown impact. IBM X-Force ID: 134391...

Code injection

IBM MQ Managed File Transfer Agent 8.0 and 9.0 sets insecure permissions on certain files it creates. A local attacker could exploit this vulnerability to modify or delete data contained in the files with an unknown impact. IBM X-Force ID: 134391...

CVE-2017-1699

IBM MQ Managed File Transfer Agent 8.0 and 9.0 sets insecure permissions on certain files it creates. A local attacker could exploit this vulnerability to modify or delete data contained in the files with an unknown impact. IBM X-Force ID: 134391...

“Ready Player One” – Are you Ready to Protect Your Endpoints from the Bad Guys?

At times it can feel like a game as you watch the cyber-breach scorecards. Yahoo 3 billion users, Equifax 143 million consumers, Uber 57 million users, Imgur 1.7 million users are just a sample of the companies that have released new information on large breaches in the last few months...

CVE-2017-1699: Incorrect Permission Assignment for Critical Resource

IBM MQ Managed File Transfer Agent 8.0 and 9.0 sets insecure permissions on certain files it creates. A local attacker could exploit this vulnerability to modify or delete data contained in the files with an unknown impact. IBM X-Force ID: 134391...

PT-2018-6370

Name of the Vulnerable Software and Affected Versions: IBM MQ Managed File Transfer Agent versions 8.0 through 9.0 Description: The issue allows a local attacker to potentially modify or delete data due to insecure file permissions set by the software. The exact impact of this exploitation is not...

Keyexchange error on Linux managed server after updating the kernel

Challenge Steps to correct Keyexchange errors on newly updated Linux managed server Cause Veeam SSH client caches both the Key and the encryption method. If the Linux kernel depreciates an encryption method when the kernel updates, connections to the managed server may fail with error such as...

CVE-2017-16836

Arris TG1682G devices with Comcast TG16822.0s7PRODse 10.0.59.SIP.PC20.CT software allow Unauthenticated Stored XSS via the actionHandler/ajaxmanagedservices.php service parameter...

CVE-2017-16836

Arris TG1682G devices with Comcast TG16822.0s7PRODse 10.0.59.SIP.PC20.CT software allow Unauthenticated Stored XSS via the actionHandler/ajaxmanagedservices.php service parameter...

PT-2017-14585

Name of the Vulnerable Software and Affected Versions Arris TG1682G devices with Comcast TG1682 2.0s7 PRODse 10.0.59.SIP.PC20.CT software Description The issue allows Unauthenticated Stored XSS via the actionHandler/ajax managed services.php service parameter. This affects Arris TG1682G devices...