CVE-2015-2223

Multiple cross-site scripting XSS vulnerabilities in the web-based console management interface in Palo Alto Networks Traps formerly Cyvera Endpoint Protection 3.1.2.1546 allow remote attackers to inject arbitrary web script or HTML via the 1 Arguments, 2 FileName, or 3 URL parameter in a SOAP...

Cisco ASA FirePOWER Services and Cisco ASA CX Services Denial of Service Vulnerabilities

The Cisco Adaptive Security Appliance is an adaptive security appliance that provides modules for security and VPN services. A security vulnerability in the virtual layer of Cisco ASA FirePOWER Services and Cisco ASA CX Services allows an unauthenticated, remote attacker to exploit this...

CVE-2015-0678

The virtualization layer in Cisco ASA FirePOWER Software before 5.3.1.2 and 5.4.x before 5.4.0.1 and ASA Context-Aware CX Software before 9.3.2.1-9 allows remote attackers to cause a denial of service device reload by rapidly sending crafted packets to the management interface, aka Bug IDs...

SOL16393 - NTP vulnerability CVE-2014-9751

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

Cisco Intrusion Prevention System MainApp SSL/TLS DoS (cisco-sa-20150311-ips)

According to its self-reported version, the Cisco Intrusion Prevention System software running on the remote host is affected by a denial of service vulnerability within the SSL/TLS subsystem due to a race condition when handling multiple HTTPS requests on the management interface. A remote...

Design/Logic Flaw

The Management Interface on Cisco Content Services Switch CSS 11500 devices 8.20.4.02 and earlier allows remote attackers to bypass intended restrictions on local-network device access via crafted SSH packets, aka Bug ID CSCut14855...

Cisco Content Services Switch (11500) Unauthenticated Port Forwarding Vulnerability

A vulnerability in the Management Interface of the Cisco Content Services Switch 11500 could allow an unauthenticated, remote attacker to gain unauthorized access to other devices on the network. The vulnerability is due to improper handling of SSH packets. An attacker could exploit this...

Cisco Intrusion Prevention System (IPS) Software Competitive Conditions Vulnerability

Cisco Intrusion Prevention System IPS is the United States Cisco Cisco a set of intrusion prevention system. The system can instantly interrupt, adjust or isolate some abnormal or harmful network data transmission behavior. A competitive condition vulnerability exists in the TLS implementation of...

Sagem F@st 3304-V2 - Local File Inclusion

Title : Sagem F@st 3304-V2 Directory Traversal Vulnerability Vendor : http://www.sagemcom.com Severity : High Tested Router : Sagem F@st 3304-V2 3304, other versions may also be affected Date : 2015-03-01 Author : Loudiyi Mohamed Contact : [email protected] Blog :...

CVE-2015-0631

Cisco IPS CVE-2015-0631 is a race-condition vulnerability in the SSL/TLS subsystem used by the web management interface. During image upgrading, key/certificate regeneration can be disrupted by a rapid sequence of HTTPS connections to the management interface, allowing a remote attacker to cause ...

CrushFTP 7.2.0 - Multiple Vulnerabilities

CrushFTP 7.2.0 - Multiple Vulnerabilities ======================================================== I. Overview ======================================================== Multiple CSRF & Cross-Site Scripting XSS vulnerabilities have been identified in Crushftp 7.2.0 Web Interface on default...

Citrix NetScaler Unspecified Remote Unauthorized Access (CTX200254)

The remote Citrix NetScaler device is affected by an unspecified remote unauthorized access vulnerability in the management interface. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid81316; scriptversion"1.5";...

Fortinet FortiWeb Stored XSS Vulnerability (FG-IR-14-001)

Fortinet FortiWeb is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

SOL16016 - Linux kernel SCTP vulnerability CVE-2014-7841

Vulnerability Recommended Actions If the previous table lists a version in the Versions known to be not vulnerable column, you can eliminate this vulnerability by upgrading to the listed version. If the listed version is older than the version you are currently running, or if the table does not...

Honeypot Deployment Made Easy: Beeswarm

Beeswarm is an active IDS project that provides easy configuration, deployment and management of honeypots and clients. The system operates by luring the hacker into the honeypots by setting up a deception infrastructure where deployed drones communicate with honeypots and intentionally leak...

CVE-2014-3764

CVE-2014-3764 : A cross-site scripting (XSS) vulnerability exists in the web-based device management interface of Palo Alto Networks PAN-OS. The issue stems from improper input sanitization, allowing an attacker to inject arbitrary script/HTML via unspecified vectors. Affected PAN-OS versions are...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the web management interface in httpd/cgi-bin/shutdown.cgi in Smoothwall Express 3.1 and 3.0 SP3 and earlier allows remote attackers to hijack the authentication of administrators for requests that perform a reboot via a request to...

CVE-2011-5283

Cross-site scripting XSS vulnerability in the web management interface in httpd/cgi-bin/ipinfo.cgi in Smoothwall Express 3.1 and 3.0 SP3 and earlier allows remote attackers to inject arbitrary web script or HTML via the IP parameter in a Run action...

Cross site scripting

Cross-site scripting XSS vulnerability in the web management interface in httpd/cgi-bin/ipinfo.cgi in Smoothwall Express 3.1 and 3.0 SP3 and earlier allows remote attackers to inject arbitrary web script or HTML via the IP parameter in a Run action...

CVE-2011-5284

CVE-2011-5284 describes a Cross-site Request Forgery vulnerability in Smoothwall Express 3.1 and 3.0 SP3 and earlier, specifically in the web management interface’s httpd/cgi-bin/shutdown.cgi. The vulnerability allows an attacker to hijack an administrator’s authenticated session to perform reboo...