Lucene search
+L

782 matches found

NVD
NVD
added 2013/08/19 11:55 p.m.45 views

CVE-2013-4236

VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become "unavailable to the managment server" via invalid XML characters in a guest agent response. NOTE: this issue is due to an incomplete fix for CVE-2013-0167...

2.7CVSS6.2AI score0.00557EPSS
SaveExploits0References3
Prion
Prion
added 2013/08/19 11:55 p.m.33 views

Design/Logic Flaw

VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become "unavailable to the managment server" via invalid XML characters in a guest agent response. NOTE: this issue is due to an incomplete fix for CVE-2013-0167...

2.7CVSS6.7AI score0.00562EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2013/08/19 11:55 p.m.6 views

CVE-2013-0167

VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become "unavailable to the managment server" via guestInfo dictionaries with "unexpected fields."...

2.7CVSS5.5AI score0.00562EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2013/08/19 11:00 p.m.56 views

CVE-2013-4236

VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become "unavailable to the managment server" via invalid XML characters in a guest agent response. NOTE: this issue is due to an incomplete fix for CVE-2013-0167...

6.2AI score0.00557EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2013/08/19 11:00 p.m.55 views

CVE-2013-0167

VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become "unavailable to the managment server" via guestInfo dictionaries with "unexpected fields."...

6.2AI score0.00562EPSS
SaveExploits0References3
NVD
NVD
added 2013/07/31 1:20 p.m.36 views

CVE-2013-4674

Cross-site scripting XSS vulnerability in the Web Email Protection component in Symantec Encryption Management Server formerly Symantec PGP Universal Server before 3.3.0 MP2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted encrypted e-mail attachment...

4.3CVSS5.1AI score0.00886EPSS
SaveExploits0References6
Prion
Prion
added 2013/07/31 1:20 p.m.20 views

Cross site scripting

Cross-site scripting XSS vulnerability in the Web Email Protection component in Symantec Encryption Management Server formerly Symantec PGP Universal Server before 3.3.0 MP2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted encrypted e-mail attachment...

4.3CVSS5.5AI score0.00886EPSS
SaveExploits0References6Affected Software2
CVE
CVE
added 2013/07/31 10:00 a.m.49 views

CVE-2013-4674

CVE-2013-4674 is an XSS vulnerability in Symantec Encryption Management Server (formerly PGP Universal Server), specifically in the Web Email Protection component. The issue affects versions before 3.3.0 MP2 where remote authenticated users could inject arbitrary web script or HTML via a crafted ...

4.3CVSS5.3AI score0.00886EPSS
SaveExploits0References6Affected Software2
Cvelist
Cvelist
added 2013/07/31 10:00 a.m.34 views

CVE-2013-4674

Cross-site scripting XSS vulnerability in the Web Email Protection component in Symantec Encryption Management Server formerly Symantec PGP Universal Server before 3.3.0 MP2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted encrypted e-mail attachment...

5.1AI score0.00886EPSS
SaveExploits0References6
Symantec
Symantec
added 2013/07/22 8:00 a.m.42 views

Symantec Encryption Management Server Web Email Protection XSS

SUMMARY Symantec's Encryption Management Server, previously PGP Universal Server, is susceptible to a cross-site scripting XSS issue, in the web management interface of the server. The XSS issue is in the Web Email Protection component. This issue could allow an authenticated Web Email Protection...

4.3CVSS0.4AI score0.00886EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2013/06/28 11:55 p.m.21 views

CVE-2013-4095

plain/actionsets.html in the SecureSphere Operations Manager SOM Management Server in Imperva SecureSphere 9.0.0.5 allows remote authenticated users to execute arbitrary commands via a task with a command.value field in conjunction with an arguments.value field...

6.5CVSS7.1AI score0.05885EPSS
SaveExploits1References2
NVD
NVD
added 2013/06/28 11:55 p.m.33 views

CVE-2013-4094

The Key Management feature in the SecureSphere Operations Manager SOM Management Server in Imperva SecureSphere 9.0.0.5 allows remote authenticated users to upload executable files via the 1 privatekey or 2 publickey parameter in a T/keyManagement request to plain/settings.html, as demonstrated b...

6.5CVSS6.3AI score0.05629EPSS
SaveExploits1References2
Prion
Prion
added 2013/06/28 11:55 p.m.17 views

Design/Logic Flaw

The SecureSphere Operations Manager SOM Management Server in Imperva SecureSphere 9.0.0.5 allows remote attackers to obtain sensitive information via 1 a direct request to dwr/call/plaincall/AsyncOperationsContainer.getOperationState.dwr, which reveals the installation path in the s0.filePath...

5CVSS6.7AI score0.06883EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2013/06/28 11:00 p.m.47 views

CVE-2013-4095

Imperva SecureSphere SOM Management Server (v9.0.0.5) is affected by CVE-2013-4095. Remote authenticated users can execute arbitrary commands via a task payload using a [command].value field together with an [arguments].value field. The description is consistent across multiple sources (NVD/Red H...

6.5CVSS7.3AI score0.05885EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2013/06/28 11:00 p.m.49 views

CVE-2013-4092

The CVE-2013-4092 entry concerns Imperva SecureSphere SOM (Management Server) version 9.0.0.5. The issue enables context‑dependent attackers to obtain sensitive information by exploiting (1) a session ID in the jsessionid field to access secsphLogin.jsp or (2) credentials in the j_password parame...

5CVSS6.2AI score0.04865EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2013/06/28 11:00 p.m.54 views

CVE-2013-4093

CVE-2013-4093 affects Imperva SecureSphere SOM 9.0.0.5 (Management Server). The vulnerability allows remote attackers to leak sensitive information through two paths: (1) direct access to dwr/call/plaincall/AsyncOperationsContainer.getOperationState.dwr reveals the installation path in s0.filePat...

5CVSS6.4AI score0.06883EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2013/06/28 11:00 p.m.30 views

CVE-2013-4093

The SecureSphere Operations Manager SOM Management Server in Imperva SecureSphere 9.0.0.5 allows remote attackers to obtain sensitive information via 1 a direct request to dwr/call/plaincall/AsyncOperationsContainer.getOperationState.dwr, which reveals the installation path in the s0.filePath...

6.2AI score0.06883EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
added 2013/06/10 8:18 p.m.44 views

Moderate: Red Hat Security Advisory: rhev 3.2 - vdsm security and bug fix update

Updated vdsm packages that fix one security issue and various bugs are now available. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available from the C...

2.7CVSS5.8AI score0.00562EPSS
SaveExploits0References53
RedHat Linux
RedHat Linux
added 2013/06/10 8:18 p.m.8 views

vdsm: unfiltered guestInfo dictionary DoS

VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become "unavailable to the managment server" via guestInfo dictionaries with "unexpected fields."...

2.7CVSS5.8AI score0.00562EPSS
SaveExploits0References4
myhack58
myhack58
added 2012/12/07 12:00 a.m.21 views

Ruijie Application Control engine of the management server can increase user-vulnerability warning-the black bar safety net

Ruijie Application Control engine of the management server, the RG-ACE series Application Control engine of the management server V3. 1. 3 6. 0 0 1, The Official Website of the connection http://www.ruijie.com.cn/service/down-search.aspx the display is the latest version according to not authorit...

0.5AI score
SaveExploits0
Rows per page
Query Builder