CVE-2013-5572

Zabbix 2.0.5 allows remote authenticated users to discover the LDAP bind password by leveraging management-console access and reading the ldapbindpassword value in the HTML source code...

CVE-2013-5572

Zabbix 2.0.5 allows remote authenticated users to discover the LDAP bind password by leveraging management-console access and reading the ldapbindpassword value in the HTML source code...

CVE-2013-5572

Zabbix 2.0.5 allows remote authenticated users to discover the LDAP bind password by leveraging management-console access and reading the ldapbindpassword value in the HTML source code...

CVE-2013-5572

Zabbix 2.0.5 allows remote authenticated users to discover the LDAP bind password by leveraging management-console access and reading the ldapbindpassword value in the HTML source code...

Adobe JRun 4.0 Multiple Vulnerabilities (APSB09-12)

The remote host has a version of Adobe JRun installed that contains a version of jmc-app.ear that is affected by multiple vulnerabilities : - A directory traversal vulnerability exists in 'logviewer.jsp' in the Management Console that could allow an authenticated, remote attacker to read arbitrar...

Console: Stored cross-site scripting (XSS)

Multiple cross-site scripting XSS vulnerabilities in Fuse Management Console in Red Hat JBoss Fuse 6.0.0 before patch 3 and JBoss A-MQ 6.0.0 before patch 3 allow remote attackers to inject arbitrary web script or HTML via the 1 user field in the create user page or 2 profile version to the create...

Symantec Endpoint Protection Manager (SEPM) Buffer Overflow Vulnerability

The host is installed with Symantec Endpoint Protection Manager and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbsymantecepmbofvuln.nasl 6074 2017-05-05 09:03:14Z teissa $ Symantec Endpoint Protection Manager SEPM Buffer Overflow Vulnerability Authors: Thanga Praka...

CVE-2013-4676

Multiple cross-site scripting XSS vulnerabilities in Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 allow remote attackers to inject arbitrary web script or HTML via vectors involving a 1 custom-reports generation page, 2 Storage Devices creation page, or 3 jobs creation page...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 allow remote attackers to inject arbitrary web script or HTML via vectors involving a 1 custom-reports generation page, 2 Storage Devices creation page, or 3 jobs creation page...

CVE-2013-4676

Multiple cross-site scripting XSS vulnerabilities in Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 allow remote attackers to inject arbitrary web script or HTML via vectors involving a 1 custom-reports generation page, 2 Storage Devices creation page, or 3 jobs creation page...

CVE-2013-4672

The management console on the Symantec Web Gateway SWG appliance before 5.1.1 has an incorrect sudoers file, which allows local users to bypass intended access restrictions via a command...

CVE-2013-4670

Multiple cross-site scripting XSS vulnerabilities in the management console on the Symantec Web Gateway SWG appliance before 5.1.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-1616

The management console on the Symantec Web Gateway SWG appliance before 5.1.1 allows remote attackers to execute arbitrary commands by injecting a command into an application script...

CVE-2013-1617

Multiple SQL injection vulnerabilities in the management console on the Symantec Web Gateway SWG appliance before 5.1.1 allow remote authenticated administrators to execute arbitrary SQL commands via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the management console on the Symantec Web Gateway SWG appliance before 5.1.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the management console on the Symantec Web Gateway SWG appliance before 5.1.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Command injection

The management console on the Symantec Web Gateway SWG appliance before 5.1.1 allows remote attackers to execute arbitrary commands by injecting a command into an application script...

CVE-2013-4671

Cross-site request forgery CSRF vulnerability in the management console on the Symantec Web Gateway SWG appliance before 5.1.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...

CVE-2013-4671

Symantec Web Gateway (SWG) is affected by CVE-2013-4671, a CSRF vulnerability in the management console present before version 5.1.1. The issue allows an authenticated remote user to hijack the authentication of unspecified victims via unknown vectors, enabling potential unauthorized actions with...

CVE-2013-4670

Multiple cross-site scripting XSS vulnerabilities in the management console on the Symantec Web Gateway SWG appliance before 5.1.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...