3141 matches found
CVE-2014-3408
Cisco Prime Optical 10’s web framework is affected by CVE-2014-3408, a reflected XSS in the web framework via an unspecified parameter (Bug ID CSCuq80763). The NVD entry lists a CVSSv2 base score of 6.8 (Network, medium complexity, no auth, partial impacts). Cisco’s advisory states that software ...
Cisco Prime Optical Cross-Site Scripting Vulnerability
A vulnerability in the web framework code of Cisco Prime Optical could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack. The vulnerability is due to insufficient validation of a parameter. An attacker could exploit this vulnerability by persuading a...
U.S. Air Force Aiming to Raise Cyber Awareness on Networks with MAMA
The United States Air Force is attempting to enhance what the military service branch is calling cyber situational awareness in order to contend with “increasingly sophisticated” threats to its networks and systems. The Air Force Research Laboratory’s Information Directorate announced it was...
Cisco Prime Data Center Network Manager 6.x XSS (credentialed check)
According to its self-reported version number, the version of Cisco Prime Data Center Network Manager DCNM installed on the remote host is affected by a cross-site scripting vulnerability due to insufficient validation of input parameters by its web server component. Using a specially crafted URL...
Cisco Prime Data Center Network Manager 6.x XSS (uncredentialed check)
According to its self-reported version number, the version of Cisco Prime Data Center Network Manager DCNM installed on the remote host is affected by a cross-site scripting vulnerability due to insufficient validation of input parameters by its web server component. Using a specially crafted URL...
CVE-2014-3329
Cross-site scripting XSS vulnerability in the web-server component in Cisco Prime Data Center Network Manager DCNM 6.32 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCum86620...
Cross site scripting
Cross-site scripting XSS vulnerability in the web-server component in Cisco Prime Data Center Network Manager DCNM 6.32 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCum86620...
CVE-2014-3329
Cross-site scripting XSS vulnerability in the web-server component in Cisco Prime Data Center Network Manager DCNM 6.32 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCum86620...
CVE-2014-3329
Cisco Prime Data Center Network Manager (DCNM) 6.x (including 6.3(2) and earlier) is affected by a cross-site scripting (XSS) vulnerability in the DCNM web-server component. The root cause is insufficient validation of input parameters, which allows a remote attacker to inject arbitrary web scrip...
Cisco Prime Data Center Network Manager Cross-Site Scripting Vulnerability
A vulnerability in the web server hosting the Cisco Prime Data Center Network Manager could allow an unauthenticated, remote attacker to perform a cross-site scripting XSS attack against the user of the web interface. The issue is due to insufficient input validation of parameters by the web...
AJ HYIP PRIME (welcome.php id) Blind SQL Injection Vulnerability
No description provided by source...
Cisco Prime Data Center Network Manager - Arbitrary File Upload
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClient include...
Cisco Prime Security Manager Cross-Site Scripting (CVE-2014-2118)
A cross-site scripting vulnerability has been reported in Cisco Prime Security Manager. The vulnerability is due to lack of sanitation on URL parameters. A remote attacker can exploit this vulnerability by sending a specially crafted request to an affected server...
Cisco Prime Security Manager跨站脚本漏洞
BUGTRAQ ID: 66488 CVECAN ID: CVE-2014-2118 Cisco Prime Security Manager是集中管理Cisco ASA 5500-X系列防火墙的工具。 Cisco Prime Security Manager 即PRSM 9.2.1-2及之前版本在仪表盘相关的HTML文档内存在多个跨站脚本漏洞，这可使远程攻击者注入远程Web脚本或HTML。 0 Cisco Prime Security Manager 9.2.1-2 目前厂商还没有提供补丁或者升级程序： http://www.cisco.com/go/psirt...
CVE-2014-2118
Multiple cross-site scripting XSS vulnerabilities in dashboard-related HTML documents in Cisco Prime Security Manager aka PRSM 9.2.1-2 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCun50687...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in dashboard-related HTML documents in Cisco Prime Security Manager aka PRSM 9.2.1-2 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCun50687...
CVE-2014-2118
Cisco Prime Security Manager (PRSM) prior to and including version 9.2(.1-2) contains multiple cross-site scripting (XSS) vulnerabilities in dashboard-related HTML pages. The root cause is insufficient input validation in several dashboard HTML parameters, allowing remote attackers to inject arbi...
Cisco Prime Security Manager Cross-Site Scripting Vulnerability
A vulnerability in the web framework of Cisco Prime Security Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface on the affected system. The vulnerability is due to insufficient input validation of several...
Cisco Prime Data Center Network Manager DownloadServlet Information Disclosure (CVE-2013-5487)
An information disclosure vulnerability exists in Cisco Prime Data Center Network Manager. The vulnerability is due to lack of authentication and insufficient input validation in DownloadServlet when processing HTTP requests. A remote unauthenticated attacker can download arbitrary files from...
