D-Link Router 2760N Cross Site Scripting

Advisory: D-Link Router 2760N DSL-2760U-BN Multiple XSS Author: Liad Mizrachi Vendor URL: http://www.dlink.com Status: Fixed CVE-ID: CVE-2013-5223 ========================== Vulnerability Description ========================== Multiple Cross-Site Scripting XSS vulnerabilities present in D-Link...

Juniper Networks Junos OS Detection (SNMP)

SNMP based detection of Juniper Networks Junos OS. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Cisco Small Business 300 Series Managed Switch Detection (SNMP)

This script performs SNMP based detection of Cisco Small Business 300 Series Managed Switch. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective righ...

Cisco NX-OS Detection (SNMP)

SNMP based detection of Cisco NX-OS. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.103799";...

Multiple Vulnerabilities in Cisco NX-OS-Based Products (cisco-sa-20130424-nxosmulti)

Multiple Cisco NX-OS-Based products are prone to multiple remote buffer-overflow vulnerabilities because they fail to perform adequate boundary-checks on user-supplied data. Copyright C 2013 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are...

Multiple Vulnerabilities in Cisco Wireless LAN Controllers (cisco-sa-20130123-wlc)

The remote Cisco Wireless LAN Controller WLC is affected by one or more of the following vulnerabilities : - Wireless Intrusion Prevention System wIPS Denial of Service Vulnerability CSCtx80743 - Session Initiation Protocol Denial of Service Vulnerability CSCts87659 - Remote Code Execution...

Cisco Wireless LAN Controller (WLC) Version

The remote host is running Cisco Wireless LAN Controller WLC, an operating system for Cisco switches. It is possible to read the WLC version by connecting to the switch using SSH, SNMP, and/or CAPWAP. TRUSTED...

Fedora Update for cacti FEDORA-2013-15444

Check for the Version of cacti OpenVAS Vulnerability Test Fedora Update for cacti FEDORA-2013-15444 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

Cisco TANDBERG MXP < 9.0 SNMP Packet Handling DoS

The remote host is running TANDBERG MXP Endpoint, an application used for video conferencing. According to the version number identified in the telnet banner, the TANDBERG MXP Endpoint version running on the remote host is less than F9.0. As such, the install is potentially affected by a remote...

Apple AirPort Base Station (802.11n) Firmware < 7.6.4 Remote DoS (APPLE-SA-2013-09-06-1)

According to the firmware version collected via SNMP, the remote AirPort Extreme Base Station / AirPort Express Base Station / Apple Time Capsule reportedly does not properly parse small frames with incorrect lengths. An associated client might be able to leverage this vulnerability to cause a...

[SECURITY] Fedora 19 Update: cacti-0.8.8b-2.fc19

Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven. Along with being able to maintain graphs, data sources, and round robin archives in a database, Cacti also...

[SECURITY] Fedora 18 Update: cacti-0.8.8b-2.fc18

Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven. Along with being able to maintain graphs, data sources, and round robin archives in a database, Cacti also...

Amazon Linux AMI : net-snmp (ALAS-2012-97)

An array index error, leading to an out-of-bounds buffer read flaw, was found in the way the net-snmp agent looked up entries in the extension table. A remote attacker with read privileges to a Management Information Base MIB subtree handled by the 'extend' directive in '/etc/snmp/snmpd.conf' cou...

Debian Security Advisory DSA 2747-1 (cacti - several vulnerabilities)

Two vulnerabilities were discovered in Cacti, a web interface for graphing of monitoring systems: CVE-2013-5588 install/index.php and cacti/host.php suffered from Cross-Site Scripting vulnerabilities. CVE-2013-5589 cacti/host.php contained an SQL injection vulnerability, allowing an attacker to...

Cisco Ironport Cross Site Request Forgery / Cross Site Scripting

Cisco IronPort Security Management Appliance M170 version 7.9.1-030 suffers from cross site scripting and cross site request forgery vulnerabilities. Tittle: Cisco IronPort Security Management Appliance - Multiple issues Risk: Medium Date: 20.May.2013 Author: Pedro Andujar Twitter: @pandujar .:...

Cisco Ironport Cross Site Request Forgery / Cross Site Scripting

=============================== - Advisory - =============================== Tittle: Cisco IronPort Security Management Appliance - Multiple issues Risk: Medium Date: 20.May.2013 Author: Pedro Andujar Twitter: @pandujar .: INTRO :. The Cisco Security Management Appliance helps to enable flexible...

DEBIAN-CVE-2013-1435

1 snmp.php and 2 rrd.php in Cacti before 0.8.8b allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors...

CVE-2013-1435

1 snmp.php and 2 rrd.php in Cacti before 0.8.8b allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors...

CVE-2013-1435

1 snmp.php and 2 rrd.php in Cacti before 0.8.8b allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors...

Debian DSA-2739-1 : cacti - several vulnerabilities

Two security issues SQL injection and command line injection via SNMP settings were found in Cacti, a web interface for graphing of monitoring systems. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...