CVE-2014-4831

IBM Security QRadar SIEM and QRadar Risk Manager 7.1 before MR2 Patch 9 and 7.2 before 7.2.4 Patch 1, and QRadar Vulnerability Manager 7.2 before 7.2.4 Patch 1, allow remote attackers to hijack sessions via unspecified vectors...

CVE-2014-4832

IBM Security QRadar SIEM and QRadar Risk Manager 7.1 before MR2 Patch 9 and 7.2 before 7.2.4 Patch 1, and QRadar Vulnerability Manager 7.2 before 7.2.4 Patch 1, allow remote attackers to obtain sensitive cookie information by sniffing the network during an HTTP session...

Debian Security Advisory DSA 3017-1 (php-cas - security update)

Marvin S. Addison discovered that Jasig phpCAS, a PHP library for the CAS authentication protocol, did not encode tickets before adding them to an URL, creating a possibility for cross site scripting. OpenVAS Vulnerability Test $Id: deb3017.nasl 6692 2017-07-12 09:57:43Z teissa $ Auto-generated...

McAfee Vulnerability Manager Detection

Detects the installed version of McAfee Vulnerability Manager. The script logs in via smb, searches for McAfee Vulnerability Manager in the registry and gets the version from registry. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, a...

McAfee Vulnerability Manager Multiple Vulnerabilities

McAfee Vulnerability Manager is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

McAfee Vulnerability Manager Enterprise Manager Multiple Vulnerabilities (SB10061)

The version of McAfee Vulnerability Manager installed is 7.0.x prior to 7.0.11.05002, 7.5.x earlier than 7.5.4, 7.5.4 prior to 7.5.4.05007, or 7.5.5 prior to 7.5.5.05002. It is, therefore, potentially affected by multiple cross-site scripting and cross-site request forgery vulnerabilities in the...

McAfee Vulnerability Manager Installed (credentialed check)

Binary data mcafeevulnerabilitymanagerinstalled.nbin...

CVE-2013-5094

Cross-site scripting XSS vulnerability in index.exp in McAfee Vulnerability Manager 7.5 allows remote attackers to inject arbitrary web script or HTML via the certcn cookie parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in index.exp in McAfee Vulnerability Manager 7.5 allows remote attackers to inject arbitrary web script or HTML via the certcn cookie parameter...

CVE-2013-5094

CVE-2013-5094 is an XSS vulnerability in McAfee Vulnerability Manager 7.5, caused by unsafe handling in the index.exp script via the cert_cn cookie parameter. The vulnerability allows a remote attacker to inject and execute arbitrary script in a user’s browser. Public references note this as a cr...

CVE-2013-5094

Cross-site scripting XSS vulnerability in index.exp in McAfee Vulnerability Manager 7.5 allows remote attackers to inject arbitrary web script or HTML via the certcn cookie parameter...

CVE-2014-1472

Multiple cross-site scripting XSS vulnerabilities in the Enterprise Manager in McAfee Vulnerability Manager MVM 7.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-1473

Multiple cross-site request forgery CSRF vulnerabilities in the Enterprise Manager in McAfee Vulnerability Manager MVM 7.5.5 and earlier allow remote attackers to hijack the authentication of users for requests that modify HTML via unspecified vectors related to the "response web page."...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Enterprise Manager in McAfee Vulnerability Manager MVM 7.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the Enterprise Manager in McAfee Vulnerability Manager MVM 7.5.5 and earlier allow remote attackers to hijack the authentication of users for requests that modify HTML via unspecified vectors related to the "response web page."...

CVE-2014-1473

McAfee Vulnerability Manager (Enterprise Manager) is affected by CVE-2014-1473, with multiple CSRF issues leading to hijacking of user authentication for HTML-modifying requests. The affected versions include MVM 7.0.x prior to 7.0.11.05002, 7.5.x prior to 7.5.4, 7.5.4 prior to 7.5.4.05007, and 7...

CVE-2014-1472

Multiple cross-site scripting XSS vulnerabilities in the Enterprise Manager in McAfee Vulnerability Manager MVM 7.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-1473

Multiple cross-site request forgery CSRF vulnerabilities in the Enterprise Manager in McAfee Vulnerability Manager MVM 7.5.5 and earlier allow remote attackers to hijack the authentication of users for requests that modify HTML via unspecified vectors related to the "response web page."...

OpenVAS / Greenbone Vulnerability Manager Detection (OMP/GMP)

OpenVAS Management Protocol OMP / Greenbone Management Protocol GMP based detection of an OpenVAS Manager openvasmd or Greebone Vulnerability Manager gmvd. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Debian Security Advisory DSA 2701-1 (krb5 - denial of service)

It was discovered that the kpasswd service running on UDP port 464 could respond to response packets, creating a packet loop and a denial of service condition. OpenVAS Vulnerability Test $Id: deb2701.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from advisory DSA 2701-1 using nvtgen 1....