7929 matches found
CVE-2015-2770
Cross-site request forgery CSRF vulnerability in the command line page in Websense TRITON V-Series appliances before 8.0.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
CVE-2014-9712
Websense TRITON V-Series appliances before 7.8.3 Hotfix 03 and 7.8.4 before Hotfix 01 allow remote administrators to read arbitrary files and obtain passwords via a crafted path...
Cross site scripting
Cross-site scripting XSS vulnerability in Websense TRITON AP-EMAIL before 8.0.0 and V-Series 7.7 appliances allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the command line page in Websense TRITON V-Series appliances before 8.0.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
Design/Logic Flaw
SVM in Websense TRITON V-Series appliances before 8.0.0 allows attackers to upload arbitrary files via unspecified vectors...
Design/Logic Flaw
The Mail Server in Websense TRITON AP-EMAIL and V-Series appliances before 8.0.0 uses plaintext credentials, which allows remote attackers to obtain sensitive information via unspecified vectors...
Path traversal
Websense TRITON V-Series appliances before 7.8.3 Hotfix 03 and 7.8.4 before Hotfix 01 allow remote administrators to read arbitrary files and obtain passwords via a crafted path...
Design/Logic Flaw
SVM in Websense TRITON V-Series appliances before 8.0.0 allows attackers to read arbitrary files via unspecified vectors...
CVE-2015-2773
SVM in Websense TRITON V-Series appliances before 8.0.0 allows attackers to read arbitrary files via unspecified vectors...
CVE-2014-9712
Websense TRITON V-Series appliances before 7.8.3 Hotfix 03 and 7.8.4 before Hotfix 01 allow remote administrators to read arbitrary files and obtain passwords via a crafted path...
CVE-2015-2772
SVM in Websense TRITON V-Series appliances before 8.0.0 allows attackers to upload arbitrary files via unspecified vectors...
CVE-2015-2773
Affected software: Websense TRITON V-Series appliances BEFORE version 8.0.0. Vulnerability: In the SVM component, reading of arbitrary local files via unspecified vectors is possible. This is corroborated by multiple sources (CVE-2015-2773 entry and CNVD-2015-02196) describing a directory/file re...
CVE-2015-2771
The CVE-2015-2771 entry affects Websense TRITON AP-EMAIL and V-Series appliances. The root cause is plaintext credentials storage in the Mail Server prior to version 8.0.0, enabling remote attackers to obtain sensitive information via unspecified vectors. Affected products include TRITON AP-WEB, ...
CVE-2015-2771
The Mail Server in Websense TRITON AP-EMAIL and V-Series appliances before 8.0.0 uses plaintext credentials, which allows remote attackers to obtain sensitive information via unspecified vectors...
CVE-2015-2772
The CVE-2015-2772 entry covers a vulnerability in Websense TRITON V-Series appliances (before 8.0.0) where the SVM component allows uploading arbitrary files via unspecified vectors. This could enable an attacker to place files on the appliance, with potential impact including partial confidentia...
CVE-2014-9712
CVE-2014-9712 affects Websense TRITON V-Series appliances prior to 7.8.3 Hotfix 03 and 7.8.4 prior to Hotfix 01, enabling remote admins to read arbitrary files and extract passwords via a crafted path (path traversal). Affected products include TRITON V-Series; remediation per sources is to updat...
CVE-2015-2770
Cross-site request forgery CSRF vulnerability in the command line page in Websense TRITON V-Series appliances before 8.0.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
CVE-2015-2768
CVE-2015-2768 is a cross-site scripting (XSS) vulnerability in Websense TRITON AP-EMAIL prior to 8.0.0 and Websense V-Series 7.7 appliances. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Affected products include Websense TRITON AP-EMAIL and TRI...
CVE-2015-2770
CVE-2015-2770 describes a Cross-site request forgery (CSRF) on the TRITON V-Series command line page, allowing remote attackers to hijack authentication on Websense TRITON V-Series appliances pre-8.0.0. Affected products are Websense TRITON V-Series appliances before 8.0.0. The vulnerability is s...