PT-2011-4574

Name of the Vulnerable Software and Affected Versions Tembria Server Monitor versions prior to 6.0.5 Build 2252 Description The issue allows remote attackers to inject arbitrary web script or HTML via various parameters to different ASP pages, including siteid to multiple pages, action to...

CVE-2011-3685: Undefined Security Weakness

Tembria Server Monitor before 6.0.5 Build 2252 uses a substitution cipher to encrypt application credentials, which allows local users to obtain sensitive information by leveraging read access to 1 authentication.dat or 2 XML files in the Exports directory...

CVE-2011-3684: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Tembria Server Monitor before 6.0.5 Build 2252 allow remote attackers to inject arbitrary web script or HTML via 1 the siteid parameter to logbook.asp, 2 the siteid parameter to monitor-events.asp, 3 the siteid parameter to...

Cisco Security Advisory: Cisco Unified Service Monitor and Cisco Unified Operations Manager Remote Code Execution Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco Unified Service Monitor and Cisco Unified Operations Manager Remote Code Execution Vulnerabilities Advisory ID: cisco-sa-20110914-cusm Revision 1.0 For Public Release 2011 September 14 1600 UTC GMT...

Cisco Unified Service Monitor / Cisco Unified Operations Manager / CiscoWorks LAN Management / EMC Ionix buffer overflow

Buffer overflow on TCP/9002 network packet parsing...

SolarWinds Orion NPM Multiple Cross Site Scripting Vulnerabilities

This host is running SolarWinds Orion NPM and is prone to cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gborionnpmmultxssvuln.nasl 7044 2017-09-01 11:50:59Z teissa $ SolarWinds Orion NPM Multiple Cross Site Scripting Vulnerabilities Authors: Antu Sanadi Copyright: Copyrigh...

Cisco Security Advisory: CiscoWorks LAN Management Solution Remote Code Execution Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: CiscoWorks LAN Management Solution Remote Code Execution Vulnerabilities Advisory ID: cisco-sa-20110914-lms Revision 1.0 For Public Release 2011 September 14 1600 UTC GMT...

CVE-2011-2738

Multiple unspecified vulnerabilities in Cisco Unified Service Monitor before 8.6, as used in Unified Operations Manager before 8.6 and CiscoWorks LAN Management Solution 3.x and 4.x before 4.1; and multiple EMC Ionix products including Application Connectivity Monitor Ionix ACM 2.3 and earlier,...

CVE-2011-2738

CVE-2011-2738 is a buffer overflow remote code execution vulnerability affecting Cisco Unified Service Monitor and Cisco Unified Operations Manager (and associated EMC Ionix products). Exploitation occurs by sending crafted packets to TCP port 9002, taking advantage of a flaw in handling SMARTS/ ...

PT-2011-4050

Name of the Vulnerable Software and Affected Versions Cisco Unified Service Monitor versions prior to 8.6 CiscoWorks LAN Management Solution versions 3.x and 4.x prior to 4.1 EMC Ionix Application Connectivity Monitor Ionix ACM version 2.3 and earlier EMC Ionix Adapter for Alcatel-Lucent 5620 SAM...

CVE-2011-2738: Undefined Security Weakness

Multiple unspecified vulnerabilities in Cisco Unified Service Monitor before 8.6, as used in Unified Operations Manager before 8.6 and CiscoWorks LAN Management Solution 3.x and 4.x before 4.1; and multiple EMC Ionix products including Application Connectivity Monitor Ionix ACM 2.3 and earlier,...

Cisco Unified Service Monitor and Cisco Unified Operations Manager Remote Code Execution Vulnerabilities

...

Orion Network Performance Monitor 10.1.3 - CustomChart.aspx Cross-Site Scripting

Orion Network Performance Monitor 10.1.3 - CustomChart.aspx Cross-Site Scripting source: https://www.securityfocus.com/bid/49614/info Orion Network Performance Monitor is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can explo...

Orion Network Performance Monitor 10.1.3 - 'CustomChart.aspx' Cross-Site Scripting

source: https://www.securityfocus.com/bid/49614/info Orion Network Performance Monitor is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary script code in the browser of an unsuspecting...

WebWatchBot Monitor 5.1.16 - Divide Zero Vulnerability

Document Title: =============== WebWatchBot Monitor 5.1.16 - Divide Zero Vulnerability Release Date: ============= 2011-09-05 Vulnerability Laboratory ID VL-ID: ==================================== 7 Common Vulnerability Scoring System: ==================================== 3.5 Product & Service...

Apache Tomcat 6.0.x < 6.0.33 Multiple Vulnerabilities

Binary data 6018.pasl...

PT-2011-1764

Name of the Vulnerable Software and Affected Versions SolarWinds Orion Network Performance Monitor NPM version 10.1 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via specific...

CVE-2010-4828: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in SolarWinds Orion Network Performance Monitor NPM 10.1 allow remote attackers to inject arbitrary web script or HTML via the 1 Title parameter to MapView.aspx; NetObject parameter to 2 NodeDetails.aspx and 3 InterfaceDetails.aspx; and the 4...

Apache Tomcat 7.0.x < 7.0.20 'jsvc' Information Disclosure

Binary data 6007.pasl...

Sybase Adaptive Server Backup and Monitor Server Translation Array Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sybase Adaptive Server Enterprise. Authentication is not required to exploit this vulnerability. The specific flaw exists within the way Sybase Backup and Monitor servers handle certain data in the...