Websense multiple product Settings module credential disclosure vulnerability-vulnerability warning-the black bar safety net

Affected system: Websense Web Filter 7. x Websense Web Security Gateway 7. x Description: CVECAN ID: CVE-2 0 1 4-0 3 4 7 Websense is a global leader in integrated Web, information and datasecuritysolutions provider. Multiple Websense products processing Settings module of the Log Database or User...

Important security and stability enhancements for Security Gateway

...

F-Secure Messaging Security Gateway 7.5.0.892 Cross Site Scripting

F-Secure Messaging Security Gateway version 7.5.0.892 suffers from a reflective cross site scripting vulnerability. I. VULNERABILITY ------------------------- Reflected XSS Attacks vulnerabilities F-Secure Messaging Security Gateway V7.5.0.892 II. BACKGROUND ------------------------- F-Secure...

Websense Triton 7.7.3 < 7.7.3 Hotfix 31 Information Disclosure

The remote application is running Websense Triton Unified Security Center, a component of the commercial suite of web filtering products. The remote instance of Websense Triton Unified Security Center fails to sanitize user-supplied input data in the 'Log Database' and 'User Directories' areas of...

Design/Logic Flaw

The Settings module in Websense Triton Unified Security Center 7.7.3 before Hotfix 31, Web Filter 7.7.3 before Hotfix 31, Web Security 7.7.3 before Hotfix 31, Web Security Gateway 7.7.3 before Hotfix 31, and Web Security Gateway Anywhere 7.7.3 before Hotfix 31 allows remote authenticated users to...

CVE-2014-0347

The Settings module in Websense Triton Unified Security Center 7.7.3 before Hotfix 31, Web Filter 7.7.3 before Hotfix 31, Web Security 7.7.3 before Hotfix 31, Web Security Gateway 7.7.3 before Hotfix 31, and Web Security Gateway Anywhere 7.7.3 before Hotfix 31 allows remote authenticated users to...

多个Check Point产品未明安全漏洞

Bugtraq ID:66598 CVE ID:CVE-2013-7350 Check Point Security Gateway是一款网络安全网关产品。 Check Point Security Gateway存在多个未明安全漏洞，目前没有详细漏洞细节提供。 0 Check Point Security Gateway 80 R71.x Check Point Security Gateway 80 R75.20.x Check Point Security Gateway 600 R75.20.x Check Point Security Gateway 1100 R75.20.x...

Websense Triton Unified Security Center 7.7.3 information disclosure vulnerability

Overview Websense Triton Unified Security Center 7.7.3 and possibly earlier versions contains an information disclosure vulnerability which could allow an authenticated attacker to view stored credentials of a possibly higher privileged user. Description CWE-200: Information ExposureWhen logged...

CVE-2013-7350

Multiple unspecified vulnerabilities in Check Point Security Gateway 80 R71.x before R71.45 730159141 and R75.20.x before R75.20.4 and 600 and 1100 appliances R75.20.x before R75.20.42 have unknown impact and attack vectors related to "important security fixes."...

Design/Logic Flaw

Multiple unspecified vulnerabilities in Check Point Security Gateway 80 R71.x before R71.45 730159141 and R75.20.x before R75.20.4 and 600 and 1100 appliances R75.20.x before R75.20.42 have unknown impact and attack vectors related to "important security fixes."...

CVE-2013-7350

Check Point Security Gateway 80 R71.x (before R71.45) and R75.20.x (before R75.20.4) as well as 600 and 1100 appliances (R75.20.x before R75.20.42) are associated with CVE-2013-7350. The available records describe multiple unspecified vulnerabilities with unknown impact and attack vectors tied to...

Security enhancements for 600 / 1100 / Security Gateway 80 Appliances

...

CVE-2014-1672

Check Point R75.47 Security Gateway and Management Server does not properly enforce Anti-Spoofing when the routing table is modified and the "Get - Interfaces with Topology" action is performed, which allows attackers to bypass intended access restrictions...

Spoofing

Check Point R75.47 Security Gateway and Management Server does not properly enforce Anti-Spoofing when the routing table is modified and the "Get - Interfaces with Topology" action is performed, which allows attackers to bypass intended access restrictions...

CVE-2014-1672

Check Point R75.47 Security Gateway and Management Server does not properly enforce Anti-Spoofing when the routing table is modified and the "Get - Interfaces with Topology" action is performed, which allows attackers to bypass intended access restrictions...

CVE-2014-1672

CVE-2014-1672 affects Check Point R75.47 Security Gateway and Management Server. The issue is improper enforcement of anti-spoofing when the routing table is modified and the Get - Interfaces with Topology action is used, enabling attackers to bypass intended access restrictions. The NVD entry li...

Anti-Spoofing might be enforced incorrectly in specific scenarios on R75.47 Security Gateway

...

CVE-2013-5556

The license-installation module on the Cisco Nexus 1000V switch 4.21SV15.2b and earlier for VMware vSphere, Cisco Nexus 1000V switch 5.21SM15.1 for Microsoft Hyper-V, and Cisco Virtual Security Gateway 4.21VSG11 for Nexus 1000V switches allows local users to gain privileges and execute arbitrary...

Code injection

The license-installation module on the Cisco Nexus 1000V switch 4.21SV15.2b and earlier for VMware vSphere, Cisco Nexus 1000V switch 5.21SM15.1 for Microsoft Hyper-V, and Cisco Virtual Security Gateway 4.21VSG11 for Nexus 1000V switches allows local users to gain privileges and execute arbitrary...

CVE-2013-5556

The license-installation module on the Cisco Nexus 1000V switch 4.21SV15.2b and earlier for VMware vSphere, Cisco Nexus 1000V switch 5.21SM15.1 for Microsoft Hyper-V, and Cisco Virtual Security Gateway 4.21VSG11 for Nexus 1000V switches allows local users to gain privileges and execute arbitrary...