2964 matches found
Oracle Enterprise Manager Web Console Detection
The remote host appears to run Oracle Enterprise Manager; connections are allowed to the web console management. Letting attackers know that you are using this software will help them to focus their attack or will make them change their strategy. In addition to this, an attacker may attempt to se...
CVE-2005-0539
Unknown vulnerability in IBM Hardware Management Console HMC before 4.4 for POWER5 servers allows local users to gain privileges, related to the Guided Setup Wizard...
CVE-2005-0539: Undefined Security Weakness
Unknown vulnerability in IBM Hardware Management Console HMC before 4.4 for POWER5 servers allows local users to gain privileges, related to the Guided Setup Wizard...
CVE-2004-1477
CVE-2004-1477 refers to a cross-site scripting (XSS) vulnerability in the Management Console of Macromedia/JRun 4.0. The vulnerability allows remote attackers to inject arbitrary web script/HTML and potentially hijack a user’s session. Connected sources corroborate that this CVE is part of a set ...
CVE-2004-1477: Undefined Security Weakness
Cross-site scripting XSS vulnerability in the Management Console in JRun 4.0 allows remote attackers to execute arbitrary web script or HTML and possibly hijack a user's session...
CVE-2005-0248
The CVE-2005-0248 issue affects the Solaris Management Console (SMC) GUI on Solaris 8 and 9. When creating user accounts configured for password aging, the GUI creates accounts with a blank password. This allows remote or local attackers to break into those accounts. The available documents do no...
CVE-2005-0248
The Solaris Management Console SMC GUI for Solaris 8 and 9, when creating user accounts that are configured for password aging, creates the accounts with a blank password, which allows remote or local attackers to break into those accounts...
CVE-2005-0248: Undefined Security Weakness
The Solaris Management Console SMC GUI for Solaris 8 and 9, when creating user accounts that are configured for password aging, creates the accounts with a blank password, which allows remote or local attackers to break into those accounts...
CVE-2004-1354
The Solaris Management Console SMC in Sun Solaris 8 and 9 generates different 404 error messages when a file does not exist versus when a file exists but is otherwise inaccessible, which could allow remote attackers to obtain sensitive information in conjunction with a directory traversal .. atta...
CVE-2004-1354: Improper Limitation of a Pathname to a Restricted Directory
The Solaris Management Console SMC in Sun Solaris 8 and 9 generates different 404 error messages when a file does not exist versus when a file exists but is otherwise inaccessible, which could allow remote attackers to obtain sensitive information in conjunction with a directory traversal .. atta...
Sun Solaris SMC (Solaris Management Console) weak passwords
Under certain conditions user accouint configured with password aging is created with empty password...
CVE-2004-1477
Cross-site scripting XSS vulnerability in the Management Console in JRun 4.0 allows remote attackers to execute arbitrary web script or HTML and possibly hijack a user's session...
McAfee IntruShield Management Console Detection
If an attacker can log into the IntruShield Management Console on the remote host, the attacker will have the ability to modify sensor configuration. C Tenable Network Security, Inc. - modified by Josh Zlatin-Amishav to support newer versions of the product. include"compat.inc"; if description...
ACROS Security: HTML Injection in JRun Management Console
=====BEGIN-ACROS-REPORT===== PUBLIC ========================================================================= ACROS Security Problem Report 2004-10-14-1 ------------------------------------------------------------------------- ASPR 2004-10-14-1: HTML Injection in JRun Management Console...
ACROS Security: Session Fixation in JRun Management Console
=====BEGIN-ACROS-REPORT===== PUBLIC ========================================================================= ACROS Security Problem Report 2004-10-14-2 ------------------------------------------------------------------------- ASPR 2004-10-14-2: Session Fixation in JRun Management Console...
Macromedia JRun Server is vulnerable to a cross-site scripting attack
Overview A cross-site scripting vulnerability exists in the Macromedia JRun Server Management Console that may allow an attacker to execute arbitrary code. Description JRun is an application server that works with most popular web servers such as Apache and IIS. Macromedia states that JRun is...
[UNIX] Sun Management Console Directory Traversal Vulnerability
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
CVE-2004-1354
The Solaris Management Console SMC in Sun Solaris 8 and 9 generates different 404 error messages when a file does not exist versus when a file exists but is otherwise inaccessible, which could allow remote attackers to obtain sensitive information in conjunction with a directory traversal .. atta...
Symantec Gateway Security 5400 Series 2.0 - Error Page Cross-Site Scripting
source: https://www.securityfocus.com/bid/9755/info A vulnerability has been reported to exist in the Symantec Gateway Security Web based management console that may allow a remote user to launch cross-site scripting attacks. The issue is reported to exist due to improper sanitizing of...
CVE-2003-1341
The default installation of Trend Micro OfficeScan 3.0 through 3.54 and 5.x allows remote attackers to bypass authentication from cgiChkMasterPasswd.exe and gain access to the web management console via a direct request to cgiMasterPwd.exe...