1486 matches found
CVE-2009-4420
Buffer overflow in the bd daemon in F5 Networks BIG-IP Application Security Manager ASM 9.4.4 through 9.4.7 and 10.0.0 through 10.0.1, and Protocol Security Manager PSM 9.4.5 through 9.4.7 and 10.0.0 through 10.0.1, allows remote attackers to cause a denial of service crash via unknown vectors...
CVE-2009-4420
Buffer overflow in the bd daemon in F5 Networks BIG-IP Application Security Manager ASM 9.4.4 through 9.4.7 and 10.0.0 through 10.0.1, and Protocol Security Manager PSM 9.4.5 through 9.4.7 and 10.0.0 through 10.0.1, allows remote attackers to cause a denial of service crash via unknown vectors...
McAfee Network Security Manager XSS
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 SecureWorks Security Advisory SWRX-2009-001 McAfee Network Security Manager Cross-Site Scripting XSS Vulnerability Advisory Information Title: McAfee Network Security Manager Cross-Site Scripting XSS Vulnerability Advisory ID: SWRX-2009-001 Advisory...
CVE-2009-3566
McAfee IntruShield Network Security Manager NSM before 5.1.11.8.1 does not include the HTTPOnly flag in the Set-Cookie header for the session identifier, which allows remote attackers to hijack a session by leveraging a cross-site scripting XSS vulnerability...
McAfee Network Security Manager Login.jsp页面跨站脚本漏洞
BUGTRAQ ID: 37003 CVE ID: CVE-2009-3565 McAfee Network Security Manager是一款功能强大的入侵防护解决方案。 McAfee Network Security Manager没有正确地验证提交给管理控制台Login.jsp页面的iaction和node参数便在动态生成的Web内容中返回给了用户，远程攻击者可以通过跨站脚本攻击在用户的浏览器会话中注入并执行任意HTML或脚本代码。 0 McAfee Network Security Manager 5.1.7.7 厂商补丁： McAfee ------...
McAfee Network Security Manager multiple security vulnerabilities
Authentication bypass, session hijacking, crossite scripting...
McAfee Network Security Manager <5.1.11.8.1 Information Disclosure Vulnerability
No description provided by source. To exploit this issue, an attacker must entice an unsuspecting user to view a malicious webpage. The following proof of concept uses a cross-site scripting attack to leverage this issue:...
McAfee Network Security Manager <5.1.11.8.1 Multiple Cross Site Scripting Vulnerabilities
No description provided by source. Attackers can exploit these issues by enticing an unsuspecting victim into following a malicious URI. The following example URIs are available:...
[SWRX-2009-001] McAfee Network Security Manager Cross-Site Scripting (XSS) Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 SecureWorks Security Advisory SWRX-2009-001 McAfee Network Security Manager Cross-Site Scripting XSS Vulnerability Advisory Information Title: McAfee Network Security Manager Cross-Site Scripting XSS Vulnerability Advisory ID: SWRX-2009-001 Advisory...
McAfee Network Security Manager <= 5.1.11.8.1 Multiple CSS
Exploit for jsp platform in category web applications ========================================================================================= McAfee Network Security Manager alert'XSS'8b3283a1e57...
McAfee Network Security Manager <= 5.1.11.8.1 Information Disclosure
Exploit for jsp platform in category web applications ================================================================================== McAfee Network Security Manager = 5.1.11.8.1 Information Disclosure Vulnerability...
McAfee Network Security Manager < 5.1.11.8.1 - Multiple Cross-Site Scripting Vulnerabilities
Attackers can exploit these issues by enticing an unsuspecting victim into following a malicious URI. The following example URIs are available: https://www.example.com/intruvert/jsp/module/Login.jsp?password=&Login%2bID=&node=&iaction=precreatefcb14"alert'XSS'8b3283a1e57...
McAfee Network Security Manager 5.1.7 - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/37003/info McAfee Network Security Manager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...
CVE-2009-1161
CVE-2009-1161 describes a directory traversal vulnerability in CiscoWorks Common Services (CWCS) 3.0.x–3.2.x on Windows when the TFTP service is enabled. An unauthenticated remote attacker could access arbitrary files via CWCS TFTP, affecting multiple Cisco products that rely on CWCS (e.g., Unifi...
Cisco Security Advisory: CiscoWorks TFTP Directory Traversal Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: CiscoWorks TFTP Directory Traversal Vulnerability Advisory ID: cisco-sa-20090520-cw http://www.cisco.com/warp/public/707/cisco-sa-20090520-cw.shtml Revision 1.0 For Public Release 2009 May 20 1600 UTC GMT Summary =======...
CVE-2009-1462
The Security Manager in razorCMS before 0.4 does not verify the permissions of every file owned by the apache user account, which is inconsistent with the documentation and allows local users to have an unspecified impact...
Design/Logic Flaw
The Security Manager in razorCMS before 0.4 does not verify the permissions of every file owned by the apache user account, which is inconsistent with the documentation and allows local users to have an unspecified impact...
CVE-2009-1462
The CVE-2009-1462 entry concerns razorCMS prior to version 0.4, where the Security Manager does not verify the permissions of every file owned by the Apache user, conflicting with documentation. This could enable local users to cause an unspecified impact. The provided documents do not detail the...
CVE-2009-1462
The Security Manager in razorCMS before 0.4 does not verify the permissions of every file owned by the apache user account, which is inconsistent with the documentation and allows local users to have an unspecified impact...
Cisco Security Manager IPS事件查看器远程非授权TCP端口访问漏洞
BUGTRAQ ID: 33381 CVECAN ID: CVE-2008-3820 Cisco Security Manager是企业级的管理应用，用于在Cisco网络和安全设备上配置防火墙、VPN和入侵保护安全服务。 Cisco Security Manager服务器中存在漏洞。在启动IPS事件查看器（IEV）时，会在Cisco Security Manager服务器和客户端打开几个远程可用的TCP端口，这些端口可能允许远程未经认证root访问IEV数据库和服务器并执行添加、删除等操作。在关闭IEV时，会关闭启动IEV的Cisco Security...