CVE-2012-2605

Multiple cross-site request forgery CSRF vulnerabilities in the administrative interface in Bradford Network Sentry before 5.3.3 allow remote attackers to hijack the authentication of administrators for requests that 1 insert XSS sequences or 2 send messages to clients...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in GuestAccess.jsp in the Guest/Contractor access component in the administrative interface in Bradford Network Sentry before 5.3.3 allow remote authenticated users to inject arbitrary web script or HTML via unspecified fields...

Authentication flaw

The agent in Bradford Network Sentry before 5.3.3 does not require authentication for messages, which allows remote attackers to trigger the display of arbitrary text on a workstation via a crafted packet to UDP port 4567, as demonstrated by a replay attack...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the administrative interface in Bradford Network Sentry before 5.3.3 allow remote attackers to hijack the authentication of administrators for requests that 1 insert XSS sequences or 2 send messages to clients...

CVE-2012-2604

Multiple cross-site scripting XSS vulnerabilities in GuestAccess.jsp in the Guest/Contractor access component in the administrative interface in Bradford Network Sentry before 5.3.3 allow remote authenticated users to inject arbitrary web script or HTML via unspecified fields...

CVE-2012-2606

The agent in Bradford Network Sentry before 5.3.3 does not require authentication for messages, which allows remote attackers to trigger the display of arbitrary text on a workstation via a crafted packet to UDP port 4567, as demonstrated by a replay attack...

CVE-2012-2604

CVE-2012-2604 corresponds to multiple XSS vulnerabilities in Bradford Network Sentry’s Administrative GuestAccess.jsp (Guest/Contractor access). The affected component is Bradford Network Sentry before version 5.3.3, where remote authenticated users can inject arbitrary web script or HTML via uns...

CVE-2012-2606

Bradford Network Sentry before 5.3.3 contains an authentication flaw in the agent listening on UDP port 4567. The lack of authentication allows a remote attacker to trigger the display of arbitrary text on a workstation via a crafted UDP packet, demonstrated by a replay attack. Affected product i...

CVE-2012-2605

Bradford Network Sentry

CVE-2012-2605

Multiple cross-site request forgery CSRF vulnerabilities in the administrative interface in Bradford Network Sentry before 5.3.3 allow remote attackers to hijack the authentication of administrators for requests that 1 insert XSS sequences or 2 send messages to clients...

PT-2012-4131

Name of the Vulnerable Software and Affected Versions Bradford Network Sentry versions prior to 5.3.3 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities in the administrative interface. These vulnerabilities allow remote attackers to hijack the authentication ...

PT-2012-4132

Name of the Vulnerable Software and Affected Versions Bradford Network Sentry versions prior to 5.3.3 Description The issue allows remote attackers to trigger the display of arbitrary text on a workstation via a crafted packet to "UDP port 4567", as demonstrated by a replay attack, due to the lac...

CVE-2012-2605: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the administrative interface in Bradford Network Sentry before 5.3.3 allow remote attackers to hijack the authentication of administrators for requests that 1 insert XSS sequences or 2 send messages to clients...

CVE-2012-2604: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in GuestAccess.jsp in the Guest/Contractor access component in the administrative interface in Bradford Network Sentry before 5.3.3 allow remote authenticated users to inject arbitrary web script or HTML via unspecified fields...

CVE-2012-2606: Improper Authentication

The agent in Bradford Network Sentry before 5.3.3 does not require authentication for messages, which allows remote attackers to trigger the display of arbitrary text on a workstation via a crafted packet to UDP port 4567, as demonstrated by a replay attack...

PT-2012-4130

Name of the Vulnerable Software and Affected Versions Bradford Network Sentry versions prior to 5.3.3 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the GuestAccess.jsp file within the Guest/Contractor access component of the administrative interface. These...

Bradford Network Sentry v5.3 NS500 appliance contains multiple vulnerabilities

Overview Bradford Network Sentry v5.3 NS500 appliance contains multiple vulnerabilities which could allow an attacker to execute arbitrary code with the privileges of the application. Description Bradford Network Sentry v5.3 NS500 appliance contains multiple vulnerabilities:CWE-79: Improper...

Stack overflow

Stack-based buffer overflow in the PTZCamPanelCtrl ActiveX control CamPanel.dll in RTS Sentry 2.1.0.2 allows remote attackers to execute arbitrary code via a long second argument to the ConnectServer method...

CVE-2008-4548

CVE-2008-4548 affects RTS Sentry 2.1.0.2 via the PTZCamPanelCtrl ActiveX (CamPanel.dll). The root cause is a stack-based buffer overflow triggered by a long second argument to ConnectServer, enabling remote code execution. Public references (NVD, CVE lists, exploit-db) confirm the vulnerability a...

CVE-2008-4548

Stack-based buffer overflow in the PTZCamPanelCtrl ActiveX control CamPanel.dll in RTS Sentry 2.1.0.2 allows remote attackers to execute arbitrary code via a long second argument to the ConnectServer method...