FTP Sprite v1.2.1 iOS - Persistent Web Vulnerability

Title: ====== FTP Sprite v1.2.1 iOS - Persistent Web Vulnerability Date: ===== 2013-07-12 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1007 VL-ID: ===== 1007 Common Vulnerability Scoring System: ==================================== 3.7 Introduction: ============= FTP...

Dell Kace 1000 SMA v5.4.70402 - Persistent Vulnerabilities

Title: ====== Dell Kace 1000 SMA v5.4.70402 - Persistent Vulnerabilities Date: ===== 2013-07-16 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=833 VL-ID: ===== 833 Common Vulnerability Scoring System: ==================================== 3.5 Introduction: =============...

Dell Kace 1000 SMA 5.4.70402 - Persistent Cross-Site Scripting

Dell Kace 1000 SMA 5.4.70402 - Persistent Cross-Site Scripting Title: ====== Dell Kace 1000 SMA v5.4.70402 - Persistent Vulnerabilities Date: ===== 2013-07-16 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=833 VL-ID: ===== 833 Common Vulnerability Scoring System:...

Dell PacketTrap MSP RMM 6.6.x - Multiple Vulnerabilities

Document Title: =============== Dell PacketTrap MSP RMM 6.6.x - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=791 Release Date: ============= 2013-07-16 Vulnerability Laboratory ID VL-ID: ==================================== 79...

Dell Kace 1000 SMA v5.4.70402 - Persistent Vulnerabilities

Document Title: =============== Dell Kace 1000 SMA v5.4.70402 - Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=833 Release Date: ============= 2013-07-15 Vulnerability Laboratory ID VL-ID: ====================================...

[Foreground Security 2013-001]: Joomla AICONTACTSAFE 2.0.19 Extension Cross-Site Scripting (XSS) vulnerability

Joomla AICONTACTSAFE 2.0.19 Extension Cross-Site Scripting XSS vulnerability ============================================================ FOREGROUND SECURITY, SECURITY ADVISORY 2013-001 - Original release date: July 10, 2013 - Discovered by: Adam Willard Software Security Analyst at Foreground...

Barracuda CudaTel 2.6.02.040 - CS Cross Site Vulnerability

Document Title: =============== Barracuda CudaTel 2.6.02.040 - CS Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=776 BARRACUDA NETWORK SECURITY ID: BNSEC-807 Release Date: ============= 2013-07-14 Vulnerability Laboratory ID...

Barracuda CudaTel 2.6.02.040 - CS Cross Site Vulnerability

Document Title: =============== Barracuda CudaTel 2.6.02.040 - CS Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=776 BARRACUDA NETWORK SECURITY ID: BNSEC-807 Release Date: ============= 2013-07-14 Vulnerability Laboratory ID...

Oracle Linux 5 : tomcat (ELSA-2009-1164)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-1164 advisory. - add patch for CVE-2007-5333 Resolves: rhbz427779 - add patch for CVE-2008-5515 Resolves: rhbz504758 - add patch for CVE-2009-0033 - add patch for...

Information disclosure

An unspecified third-party component in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 uses short session ID values, which makes it easier for remote attackers to hijack sessions, and consequently obtain sensitive information, via a brute-force attack...

CVE-2013-0456

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to hijack sessions via a modified cookie path...

CVE-2013-0456

CVE-2013-0456 affects IBM Sterling B2B Integrator (5.1/5.2) and IBM Sterling File Gateway (2.1/2.2). The connected IBM Security Bulletin confirms a session hijacking risk via a modified cookie path, describing it as an authenticated remote-access issue. Public details list affected products/versi...

CVE-2013-0539

The CVE-2013-0539 entry involves an insufficient Session-ID length in a third-party component used by IBM Sterling B2B Integrator (versions 5.0–5.2) and IBM Sterling File Gateway (versions 2.0–2.2). Root cause: short session identifiers enable brute-force session guessing, allowing potential sess...

CVE-2013-4732

The administrative web server on the Digital Alert Systems DASDEC EAS device through 2.0-2 and the Monroe Electronics R189 One-Net EAS device through 2.0-2 uses predictable session ID values, which makes it easier for remote attackers to hijack sessions by sniffing the network. NOTE: VU662676...

Code injection

The administrative web server on the Digital Alert Systems DASDEC EAS device through 2.0-2 and the Monroe Electronics R189 One-Net EAS device through 2.0-2 uses predictable session ID values, which makes it easier for remote attackers to hijack sessions by sniffing the network. NOTE: VU662676...

CVE-2013-4732

The administrative web server on the Digital Alert Systems DASDEC EAS device through 2.0-2 and the Monroe Electronics R189 One-Net EAS device through 2.0-2 uses predictable session ID values, which makes it easier for remote attackers to hijack sessions by sniffing the network. NOTE: VU662676...

PT-2013-5165 · Monroe Electronics +1 · R189 One-Net +1

Name of the Vulnerable Software and Affected Versions: Digital Alert Systems DASDEC EAS device versions 2.0-2 through 2.0-2 Monroe Electronics R189 One-Net EAS device versions 2.0-2 through 2.0-2 Description: The administrative web server uses predictable session ID values, making it easier for...

Barracuda CudaTel Communication Server 2.6.002.040 XSS

Title: ====== Barracuda CudaTel 2.6.02.04 - Multiple Web Vulnerabilities Date: ===== 2013-06-25 References: =========== http://vulnerability-lab.com/getcontent.php?id=778 BARRACUDA NETWORK SECURITY ID: BNSEC-811 VL-ID: ===== 778 Common Vulnerability Scoring System:...

Barracuda CudaTel 2.6.02.04 - Multiple Web Vulnerabilities

Document Title: =============== Barracuda CudaTel 2.6.02.04 - Multiple Web Vulnerabilities References Source: ==================== http://vulnerability-lab.com/getcontent.php?id=778 BARRACUDA NETWORK SECURITY ID: BNSEC-811 Release Date: ============= 2013-06-24 Vulnerability Laboratory ID VL-ID:...

CVE-2012-6571

The HTTP module in the 1 Branch Intelligent Management System BIMS and 2 web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, and S7800 switches uses predictable Session ID values, which makes it easier for remote attackers to hijack sessions via a...