UBUNTU-CVE-2013-5321

Multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management OSSIM 4.1 allow remote attackers to execute arbitrary SQL commands via the 1 sensor parameter in a Query action to forensics/baseqrymain.php; the 2 tcpflags or 3 tcpport04 parameter to...

BYOD Gives Vulnerable Devices Corporate Network Access

Policies allowing employees to bring their own devices to work BYOD have the unintended consequence of increasing the total number of vulnerable devices connecting to corporate networks and accessing corporate data, a report released today by Rapid 7 said. While the general consensus says that BY...

Cisco Content Security Management Appliance Web Detection

The web management interface for Cisco Content Security Management Appliance SMA was detected on the remote host. SMA provides centralized management for Cisco Email Security and Web Security Appliances. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid69077;...

FAA Civil Aviation Registry Vulnerable to Data Breach

The Federal Aviation Administration’s FAA Civil Aviation Registry lacks proper security controls to prevent unauthorized access to its systems, according to a report based on a recent audit undertaken by the Office of the Inspector General OIG for the United States Department of Transportation Do...

CVE-2013-3395

CVE-2013-3395 describes a CSRF flaw in the web framework of Cisco IronPort products (Web Security Appliance, Email Security Appliance, Content Security Management Appliance). The vulnerability allows remote attackers to hijack the authentication of arbitrary users by inducing them to perform unwa...

CVE-2013-3395

Cross-site request forgery CSRF vulnerability in the web framework on Cisco IronPort Web Security Appliance WSA devices, Email Security Appliance ESA devices, and Content Security Management Appliance SMA devices allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs...

Cisco Web Security Appliance Web框架任意命令执行漏洞(CVE-2013-3384)

CVECAN ID: CVE-2013-3384 Cisco Web Security Appliance是安全的Web网关，在一个平台上集成了恶意软件防护、应用可视化控制、策略控制等。Cisco IronPort AsyncOS是电子邮件安全设备。 Cisco Web Security Appliance设备上的IronPort AsyncOS在Web框架的实现上，以及Content Security Management Appliance设备和Email Security...

McAfee ePolicy Orchestrator Installed (credentialed check)

McAfee ePolicy Orchestrator, a centralized security management application, is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid67119; scriptversion"1.15"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10";...

Cisco June 2013 Security Updates

Cisco’s Product Security Incident Response Team pushed out software updates for four different network security products. The fixes contain workarounds that can help users mitigate multiple denial-of-service and command-injection vulnerabilities recently found in Cisco’s software. The holes exist...

CVE-2013-3384

The web framework in IronPort AsyncOS on Cisco Web Security Appliance devices before 7.1.3-013, 7.5 before 7.5.0-838, and 7.7 before 7.7.0-550; Email Security Appliance devices before 7.1.5-104, 7.3 before 7.3.2-026, 7.5 before 7.5.2-203, and 7.6 before 7.6.3-019; and Content Security Management...

Code injection

The IronPort Spam Quarantine ISQ component in the web framework in IronPort AsyncOS on Cisco Email Security Appliance devices before 7.1.5-106 and 7.3, 7.5, and 7.6 before 7.6.3-019 and Content Security Management Appliance devices before 7.9.1-102 and 8.0 before 8.0.0-404 allows remote attackers...

CVE-2013-3385

CVE-2013-3385 affects Cisco IronPort AsyncOS management GUI across multiple Cisco devices (WSA, ESA, CMA). The vulnerability allows remote attackers to cause a denial of service (system hang) by sending a series of HTTP or HTTPS requests to the management interface. Affected versions include WSA ...

CVE-2013-3385

The management GUI in the web framework in IronPort AsyncOS on Cisco Web Security Appliance devices before 7.1.3-013, 7.5 before 7.5.0-838, and 7.7 before 7.7.0-602; Email Security Appliance devices before 7.1.5-106 and 7.3, 7.5, and 7.6 before 7.6.3-019; and Content Security Management Appliance...

CVE-2013-3396

Cross-site scripting XSS vulnerability in the web framework in Cisco Content Security Management on Security Management Appliance SMA devices allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuh24749...

Cross site scripting

Cross-site scripting XSS vulnerability in the web framework in Cisco Content Security Management on Security Management Appliance SMA devices allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuh24749...

CVE-2013-3396

CVE-2013-3396 is a reflected XSS vulnerability in Cisco Content Security Management Appliance (SMA) web framework. OpenVAS notes Cisco IronPort SMA XSS/CSRF issues, with CVE-2013-3396 listed and the OpenVAS payload pointing to a lack of output escaping in the default error 500 page, causing refle...

CVE-2013-3396

Cross-site scripting XSS vulnerability in the web framework in Cisco Content Security Management on Security Management Appliance SMA devices allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuh24749...

Alienvault Open Source SIEM (OSSIM) 4.1 - Multiple SQL Injection Vulnerabilities

Title: Alienvault OSSIM Open Source SIEM 4.1 Multiple SQL Vulnerabilities Date: February 15, 2013 Author: Glafkos Charalambous Vendor: AlienVault Vendor URL: http://www.alienvault.com Reported: February 17, 2013 Timeline: --------- 17 Feb 2013: Vulnerability Reported to AlienVault 19 Feb 2013:...

Alienvault OSSIM SIEM 4.1 SQL Injection Vulnerability

Alienvault OSSIM open source SIEM version 4.1 suffers from multiple remote SQL injection vulnerabilities. Title: Alienvault OSSIM Open Source SIEM 4.1 Multiple SQL Vulnerabilities Date: February 15, 2013 Author: Glafkos Charalambous Vendor: AlienVault Vendor URL: http://www.alienvault.com Reporte...

Alienvault OSSIM SIEM 4.1 SQL Injection

Title: Alienvault OSSIM Open Source SIEM 4.1 Multiple SQL Vulnerabilities Date: February 15, 2013 Author: Glafkos Charalambous Vendor: AlienVault Vendor URL: http://www.alienvault.com Reported: February 17, 2013 Timeline: --------- 17 Feb 2013: Vulnerability Reported to AlienVault 19 Feb 2013:...