GroundWork Monitor Enterprise Detection

Binary data 8003.prm...

Updated nagstamon package fixes security vulnerability

A user details information exposure flaw was found in the way Nagstamon performed automated requests to get information about available updates. Remote attackers could use this flaw to obtain user credentials for servers monitored by the desktop status monitor due to their improper base64...

PT-2013-4417

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS 6100 Fabric Interconnect devices affected versions not specified Description A memory leak issue exists in the CLI component of the affected devices. This issue can be triggered by local users under certain...

Nagios XI Network Monitor Graph Explorer Component Command Injection

A Command Injection vulnerability exists in Nagios XI Network Monitor Graph Explorer Component...

CiscoWorks Internetwork Performance Monitor CORBA GIOP Overflow

The version of CiscoWorks Internetwork Performance Monitor installed on the remote Windows host is less than or equal to 2.6. Such versions are potentially affected by a buffer overflow vulnerability when processing Common Object Request Broker Architecture GIOP requests. By exploiting this flaw,...

Fedora Update for nagstamon FEDORA-2013-12526

Check for the Version of nagstamon OpenVAS Vulnerability Test Fedora Update for nagstamon FEDORA-2013-12526 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

MGASA-2013-0243 Updated xymon package fixes security vulnerability.

A security vulnerability has been found in version 4.x of the Xymon Systems & Network Monitor tool The error permits a remote attacker to delete files on the server running the Xymon trend-data daemon "xymondrrd". File deletion is done with the privileges of the user that Xymon is running with, s...

CVE-2013-5098

Cross-site scripting XSS vulnerability in admin/admin.php in the Download Monitor plugin before 3.3.6.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the sort parameter, a different vulnerability than CVE-2013-3262...

CVE-2013-3262

Cross-site scripting XSS vulnerability in admin/admin.php in the Download Monitor plugin before 3.3.6.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the p parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in admin/admin.php in the Download Monitor plugin before 3.3.6.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the p parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in admin/admin.php in the Download Monitor plugin before 3.3.6.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the sort parameter, a different vulnerability than CVE-2013-3262...

CVE-2013-5098

Cross-site scripting XSS vulnerability in admin/admin.php in the Download Monitor plugin before 3.3.6.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the sort parameter, a different vulnerability than CVE-2013-3262...

CVE-2013-5098

CVE-2013-5098 is an XSS vulnerability in the Download Monitor WordPress plugin, reported for admin/admin.php. The issue allows remote attackers to inject arbitrary script/HTML via the sort parameter in versions before 3.3.6.2. Public references indicate an XSS flaw distinct from CVE-2013-3262, wi...

CVE-2013-5098

Cross-site scripting XSS vulnerability in admin/admin.php in the Download Monitor plugin before 3.3.6.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the sort parameter, a different vulnerability than CVE-2013-3262...

CVE-2013-3262

The CVE-2013-3262 entry concerns an XSS vulnerability in the WordPress Download Monitor plugin for admin/admin.php, exploitable via the p parameter. Affected version: Download Monitor before 3.3.6.2. Root cause: improper handling/sanitization of user-supplied input in the p parameter allows remot...

CVE-2013-3262

Cross-site scripting XSS vulnerability in admin/admin.php in the Download Monitor plugin before 3.3.6.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the p parameter...

PT-2013-5363

Name of the Vulnerable Software and Affected Versions Download Monitor plugin versions prior to 3.3.6.2 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the sort parameter in the admin/admin.php file...

PT-2013-4260

Name of the Vulnerable Software and Affected Versions Download Monitor plugin versions prior to 3.3.6.2 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the p parameter in the...

WordPress Download Monitor Plugin <= 3.3.6.1 - XSS #1

Because of this vulnerability in admin/admin.php, the attackers can inject arbitrary web script or HTML via the "sort" parameter. Solution Update the plugin...

CVE-2013-3262: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/admin.php in the Download Monitor plugin before 3.3.6.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the p parameter...