17 matches found
EUVD-2011-2529
Malware in sbrugna...
EUVD-2011-2530
Malware in sbrugna...
Cisco SA 500 security vulnerabilities
SQL injection, privilege escalation...
CVE-2011-2547
The web-based management interface on Cisco SA 500 series security appliances with software before 2.1.19 allows remote authenticated users to execute arbitrary commands via crafted parameters to web forms, aka Bug ID CSCtq65681...
CVE-2011-2546
SQL injection vulnerability in the web-based management interface on Cisco SA 500 series security appliances with software before 2.1.19 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCtq65669...
Sql injection
SQL injection vulnerability in the web-based management interface on Cisco SA 500 series security appliances with software before 2.1.19 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCtq65669...
Design/Logic Flaw
The web-based management interface on Cisco SA 500 series security appliances with software before 2.1.19 allows remote authenticated users to execute arbitrary commands via crafted parameters to web forms, aka Bug ID CSCtq65681...
CVE-2011-2546
The CVE-2011-2546 issue affects Cisco SA 500 Series Security Appliances prior to firmware 2.1.19. The vulnerability is a SQL Injection in the web-based management interface that could allow an unauthenticated, remote attacker to execute arbitrary SQL commands and potentially obtain usernames and ...
CVE-2011-2547
The CVE-2011-2547 issue affects Cisco SA 500 Series Security Appliances running software before 2.1.19. The Privilege Escalation vulnerability allows an authenticated user to inject arbitrary commands into the underlying OS via crafted parameters in web forms, enabling execution with root-equival...
CVE-2011-2547
The web-based management interface on Cisco SA 500 series security appliances with software before 2.1.19 allows remote authenticated users to execute arbitrary commands via crafted parameters to web forms, aka Bug ID CSCtq65681...
PT-2011-3925
Name of the Vulnerable Software and Affected Versions Cisco SA 500 series security appliances versions prior to 2.1.19 Description A SQL injection issue exists in the web-based management interface, allowing remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to...
CVE-2011-2546: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the web-based management interface on Cisco SA 500 series security appliances with software before 2.1.19 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCtq65669...
CVE-2011-2547: Undefined Security Weakness
The web-based management interface on Cisco SA 500 series security appliances with software before 2.1.19 allows remote authenticated users to execute arbitrary commands via crafted parameters to web forms, aka Bug ID CSCtq65681...
PT-2011-3926
Name of the Vulnerable Software and Affected Versions Cisco SA 500 series security appliances versions prior to 2.1.19 Description The issue allows remote authenticated users to execute arbitrary commands via crafted parameters to web forms. Recommendations For versions prior to 2.1.19, update to...
Cisco Security Advisory: Cisco SA 500 Series Security Appliances Web Management Interface Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco SA 500 Series Security Appliances Web Management Interface Vulnerabilities Advisory ID: cisco-sa-20110720-sa500 Revision 1.0 For Public Release 2011 July 20 1600 UTC GMT...
Cisco SA 500 Series Security Appliances Web Management Interface SQL Injection Vulnerability
Cisco SA 500 Series Security Appliances firmware contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary SQL code on a system. The vulnerability is due to improper validation of user-supplied input to the Cisco SA 500 Security Appliance web-based...