5333 matches found
CVE-2014-3438
Multiple cross-site scripting XSS vulnerabilities in console interface scripts in Symantec Endpoint Protection Manager SEPM 12.1 before RU5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-3437
The management console in Symantec Endpoint Protection Manager SEPM 12.1 before RU5 allows remote attackers to read arbitrary files or send TCP requests to intranet servers via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External...
Symantec Endpoint Protection 12.1.4023.4080 - Multiple Vulnerabilities
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: XXE & XSS & Arbitrary File Write vulnerabilities product: Symantec Endpoint Protection vulnerable version: 12.1.4023.4080 fixed version: 12.1.5 RU 5 impact: Critical CVE...
Symantec Endpoint Protection 12.1.4023.4080 - Multiple Vulnerabilities
Symantec Endpoint Protection 12.1.4023.4080 - Multiple Vulnerabilities SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: XXE & XSS & Arbitrary File Write vulnerabilities product: Symantec Endpoint Protection vulnerable...
Symantec Endpoint Protection 12.1.4023.4080 XXE / XSS / Arbitrary File Write
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: XXE & XSS & Arbitrary File Write vulnerabilities product: Symantec Endpoint Protection vulnerable version: 12.1.4023.4080 fixed version: 12.1.5 RU 5 impact: Critical CVE...
Symantec Endpoint Protection 12.1.4023.4080 - Multiple Vulnerabilities
Exploit for jsp platform in category web applications title: XXE & XSS & Arbitrary File Write vulnerabilities product: Symantec Endpoint Protection vulnerable version: 12.1.4023.4080 fixed version: 12.1.5 RU 5 impact: Critical CVE number: CVE-2014-3437, CVE-2014-3438, CVE-2014-3439 homepage:...
Symantec Endpoint Protection Manager Multiple Issues
SUMMARY The management console for Symantec Endpoint Protection Manager SEPM is susceptible to multiple vulnerabilities including XML External Entity Injection, reflected cross-site scripting and the potential for arbitrary file write/overwrite. AFFECTED PRODUCTS Product | Version | Build |...
Symantec Endpoint Protection Manager bruteforce
Login attempts are not limited...
Web Login Bruteforce in Symantec Endpoint Protection Manager 12.1.4023.4080
We discovered a vulnerability in the Symantec Endpoint Protection Manager web application. Vulnerability Type: Login Bruteforce Original Release: June 20, 2014 Discovered by: Security Team - A2SECURE Artлm Tsvetkov [email protected] Sisco Barrera [email protected] Andrea Bodei...
Patch Management: Missing Updates from Symantec Altiris
Binary data symantecaltirisgetmissingupdates.nbin...
Patch Management: Symantec Altiris Settings
Binary data symantecaltirisinitinfo.nbin...
Patch Management: Symantec Altiris Computer Info Initialization
Binary data symantecaltirisgetcomputerinfo.nbin...
Patch Management: Symantec Altiris Report
Binary data symantecaltirisreport.nbin...
Symantec Web Gateway dbutils.php SQL Injection (CVE-2014-1651)
An SQL injection vulnerability exists in Symantec Web Gateway. The vulnerability is due to lack of proper sanitization of the "hostname" HTTP parameter passed to some PHP pages. A remote, authenticated attacker could exploit this vulnerability by sending a crafted HTTP request to the vulnerable...
Symantec Alert Management System Intel Alert Originator Service 缓冲区溢出漏洞
No description provided by source...
Symantec System Center Alert Management System xfr_exe 命令执行漏洞
No description provided by source...
Symantec System Center Alert Management System hndlrsvc_exe 远程命令执行漏洞
No description provided by source...
Symantec Endpoint Protection Manager 12.1 远程命令执行漏洞
No description provided by source...
Home Depot Data Breach Confirmed
Home Depot today finally confirmed that its payment systems have been breached, but a number of crucial questions remain unanswered by the giant home improvement retailer. In a statement released late this afternoon, Home Depot said customers using payment cards at its U.S. and Canada locations,...