5186 matches found
CVE-2009-3565: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in intruvert/jsp/module/Login.jsp in McAfee IntruShield Network Security Manager NSM before 5.1.11.6 allow remote attackers to inject arbitrary web script or HTML via the 1 iaction or 2 node parameter...
McAfee Network Security Manager Login.jsp页面跨站脚本漏洞
BUGTRAQ ID: 37003 CVE ID: CVE-2009-3565 McAfee Network Security Manager是一款功能强大的入侵防护解决方案。 McAfee Network Security Manager没有正确地验证提交给管理控制台Login.jsp页面的iaction和node参数便在动态生成的Web内容中返回给了用户，远程攻击者可以通过跨站脚本攻击在用户的浏览器会话中注入并执行任意HTML或脚本代码。 0 McAfee Network Security Manager 5.1.7.7 厂商补丁： McAfee ------...
McAfee Network Security Manager <= 5.1.11.8.1 Multiple CSS
Exploit for jsp platform in category web applications ========================================================================================= McAfee Network Security Manager alert'XSS'8b3283a1e57...
McAfee Network Security Manager <= 5.1.11.8.1 Information Disclosure
Exploit for jsp platform in category web applications ================================================================================== McAfee Network Security Manager = 5.1.11.8.1 Information Disclosure Vulnerability...
McAfee Network Security Manager <5.1.11.8.1 Multiple Cross Site Scripting Vulnerabilities
No description provided by source. Attackers can exploit these issues by enticing an unsuspecting victim into following a malicious URI. The following example URIs are available:...
McAfee Network Security Manager <5.1.11.8.1 Information Disclosure Vulnerability
No description provided by source. To exploit this issue, an attacker must entice an unsuspecting user to view a malicious webpage. The following proof of concept uses a cross-site scripting attack to leverage this issue:...
McAfee Network Security Manager < 5.1.11.8.1 - Information Disclosure
To exploit this issue, an attacker must entice an unsuspecting user to view a malicious webpage. The following proof of concept uses a cross-site scripting attack to leverage this issue: https://www.example.com/intruvert/jsp/module/Login.jsp?password=&Login%2bID=&node=&iaction=precreatefcb1...
McAfee Network Security Manager < 5.1.11.8.1 - Multiple Cross-Site Scripting Vulnerabilities
Attackers can exploit these issues by enticing an unsuspecting victim into following a malicious URI. The following example URIs are available: https://www.example.com/intruvert/jsp/module/Login.jsp?password=&Login%2bID=&node=&iaction=precreatefcb14"alert'XSS'8b3283a1e57...
McAfee Network Security Manager 5.1.11.8.1 - Information Disclosure
McAfee Network Security Manager 5.1.11.8.1 - Information Disclosure To exploit this issue, an attacker must entice an unsuspecting user to view a malicious webpage. The following proof of concept uses a cross-site scripting attack to leverage this issue:...
McAfee Network Security Manager 5.1.11.8.1 - Multiple Cross-Site Scripting Vulnerabilities
McAfee Network Security Manager 5.1.11.8.1 - Multiple Cross-Site Scripting Vulnerabilities Attackers can exploit these issues by enticing an unsuspecting victim into following a malicious URI. The following example URIs are available:...
[SWRX-2009-001] McAfee Network Security Manager Cross-Site Scripting (XSS) Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 SecureWorks Security Advisory SWRX-2009-001 McAfee Network Security Manager Cross-Site Scripting XSS Vulnerability Advisory Information Title: McAfee Network Security Manager Cross-Site Scripting XSS Vulnerability Advisory ID: SWRX-2009-001 Advisory...
McAfee Network Security Manager multiple security vulnerabilities
Authentication bypass, session hijacking, crossite scripting...
[SWRX-2009-002] McAfee Network Security Manager Authentication Bypass and Session Hijacking Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 SecureWorks Security Advisory SWRX-2009-002 McAfee Network Security Manager Authentication Bypass and Session Hijacking Vulnerability Advisory Information Title: McAfee Network Security Manager Authentication Bypass and Session Hijacking Vulnerabili...
McAfee Network Security Manager 5.1.7 - Information Disclosure
source: https://www.securityfocus.com/bid/37004/info McAfee Network Security Manager is prone to an information-disclosure vulnerability because it fails to properly protect sensitive cookie data with the 'HTTPOnly' protection mechanism. A successful exploit may allow attackers to steal...
McAfee Network Security Manager 5.1.7 - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/37003/info McAfee Network Security Manager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...
McAfee Network Security Manager 5.1.7 - Information Disclosure
McAfee Network Security Manager 5.1.7 - Information Disclosure...
McAfee Network Security Manager 5.1.7 - Multiple Cross-Site Scripting Vulnerabilities
McAfee Network Security Manager 5.1.7 - Multiple Cross-Site Scripting Vulnerabilities...
Mcafee FreeScan Information Disclosure and Application Denial of Service (CVE-2004-1908)
A design flaw within the virus scanning software is the cause of the information disclosure vulnerability. To properly scan remote targets, the installed software must receive file system information from the remote machine. A Malicious usage of the CoMcFreeScan class, can cause paths for various...
McAfee ePO Agent Detection (HTTP)
HTTP based detection of the McAfee ePO Agent. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
McAfee generic PDF detection bypass
No description provided by source. McAfee multiple products - Generic PDF detection bypass Cheap plug : If you are interested in client side vulnerabilities visit HACK.LU starting tomorrow 28-30 Oct with : Workshop: Bypassing the Perimeter: Client Side Exploitation - Nitesh Dhanjani, Billy K Rios...