Fedora 16 : puppet-2.6.17-2.fc16 (2012-10897)

This is an upstream security release. It addresses a number of issues found in puppet-2.6.x. The Red Hat security team has rated this update as having low security impact. Refer to the upstream release notes and bugzilla entries for further details...

SolarWinds Orion Network Performance Monitor 10.2.2 - Multiple Vulnerabilities

SolarWinds Orion Network Performance Monitor 10.2.2 - Multiple Vulnerabilities / Exploit Title: SolarWinds Orion Network Performance Monitor 10.2.2 Multiple Vulnerabilities Date: Jul 21 2012 Author: muts Version: SolarWinds Orion Network Performance Monitor 10.2.2 Vendor URL:...

SolarWinds Orion Network Performance Monitor 10.2.2 - Multiple Vulnerabilities

/ Exploit Title: SolarWinds Orion Network Performance Monitor 10.2.2 Multiple Vulnerabilities Date: Jul 21 2012 Author: muts Version: SolarWinds Orion Network Performance Monitor 10.2.2 Vendor URL: http://www.solarwinds.com/ Timeline: 29 May 2012: Vulnerability reported to CERT 30 May 2012:...

Orion Browser Dumper v1.0 released

Orion Browser Dumper v1.0 released Jean-Pierre LESUEUR DarkCoderSc releases another Browser Forensic tool for Community called "Orion Browser Dumper v1.0". This software is an advanced local browser history extractor dumper, in less than few seconds like for Browser Forensic Tool it will extract...

SolarWinds Orion Data Storage Manager SQL Injection and XSS Vulnerabilities

This host is running SolarWinds Orion Data Storage Manager and is prone SQL injection and cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: secpodsolarwindsorionstoragemanagermultvuln.nasl 5956 2017-04-14 09:02:12Z teissa $ SolarWinds Orion Data Storage Manager SQL Injection a...

SolarWinds Orion Data Storage Manager SQLi and XSS Vulnerabilities

SolarWinds Orion Data Storage Manager is prone to SQL injection SQLi and cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

SolarWinds Orion NPM Multiple Cross Site Scripting Vulnerabilities

This host is running SolarWinds Orion NPM and is prone to cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gborionnpmmultxssvuln.nasl 7044 2017-09-01 11:50:59Z teissa $ SolarWinds Orion NPM Multiple Cross Site Scripting Vulnerabilities Authors: Antu Sanadi Copyright: Copyrigh...

Orion SolarWinds 10.1.2 Cross Site Scripting

Software : Orion SolarWinds 10.1.2 - SP1 XSS -----------------------------------------------------------------------------------------------------------------------------------------------------------------...

Orion Network Performance Monitor 10.1.3 - CustomChart.aspx Cross-Site Scripting

Orion Network Performance Monitor 10.1.3 - CustomChart.aspx Cross-Site Scripting source: https://www.securityfocus.com/bid/49614/info Orion Network Performance Monitor is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can explo...

Orion Network Performance Monitor 10.1.3 - 'CustomChart.aspx' Cross-Site Scripting

source: https://www.securityfocus.com/bid/49614/info Orion Network Performance Monitor is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary script code in the browser of an unsuspecting...

CVE-2010-4828

Multiple cross-site scripting XSS vulnerabilities in SolarWinds Orion Network Performance Monitor NPM 10.1 allow remote attackers to inject arbitrary web script or HTML via the 1 Title parameter to MapView.aspx; NetObject parameter to 2 NodeDetails.aspx and 3 InterfaceDetails.aspx; and the 4...

CVE-2010-4828

Multiple cross-site scripting XSS vulnerabilities in SolarWinds Orion Network Performance Monitor NPM 10.1 allow remote attackers to inject arbitrary web script or HTML via the 1 Title parameter to MapView.aspx; NetObject parameter to 2 NodeDetails.aspx and 3 InterfaceDetails.aspx; and the 4...

Multiple XSS in Solarwinds Orion NPM 10.1

Values placed in the URI of the browser are rendered correctly. Orion NPM 10.1 has just been released, so there is no known fix available as of yet. Examples: Most "variable=" that I've checked are vulnerable:...

SolarWinds Orion Network Performance Monitor (NPM) Multiple Cross Site Scripting Vulnerabilities

SolarWinds Orion NPM is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user- supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may le...

SolarWinds Orion Network Performance Monitor (NPM) 10.1 Multiple XSS Vulnerabilities

SolarWinds Orion NPM is prone to multiple cross-site-scripting XSS vulnerabilities because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Solarwinds Orion NPM 10.1 Cross Site Scripting

Values placed in the URI of the browser are rendered correctly. Orion NPM 10.1 has just been released, so there is no known fix available as of yet. Examples: Most "variable=" that I've checked are vulnerable:...

SolarWinds Orion Network Performance Monitor (NPM) 10.1 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/45257/info SolarWinds Orion NPM is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting...

SolarWinds Orion Network Performance Monitor (NPM) 10.1 - Multiple Cross-Site Scripting Vulnerabilities

SolarWinds Orion Network Performance Monitor NPM 10.1 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/45257/info SolarWinds Orion NPM is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input. An...

CVE-2009-4493

Orion Application Server 2.0.7 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator...

CVE-2009-4493

CVE-2009-4493 affects Orion Application Server 2.0.7. The Vulnerability arises from writing to logs without sanitizing non‑printable characters, enabling an attacker to send an HTTP request containing terminal escape sequences that could modify a window title or, in the worst case, execute arbitr...