CVE-2014-1473

McAfee Vulnerability Manager (Enterprise Manager) is affected by CVE-2014-1473, with multiple CSRF issues leading to hijacking of user authentication for HTML-modifying requests. The affected versions include MVM 7.0.x prior to 7.0.11.05002, 7.5.x prior to 7.5.4, 7.5.4 prior to 7.5.4.05007, and 7...

PT-2014-4200

Name of the Vulnerable Software and Affected Versions McAfee Vulnerability Manager MVM versions 7.5.5 and earlier Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the Enterprise Manager component. These vulnerabilities allow remote attackers to inject arbitrary...

CVE-2014-1473: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the Enterprise Manager in McAfee Vulnerability Manager MVM 7.5.5 and earlier allow remote attackers to hijack the authentication of users for requests that modify HTML via unspecified vectors related to the "response web page."...

PT-2014-4201

Name of the Vulnerable Software and Affected Versions McAfee Vulnerability Manager MVM versions 7.5.5 and earlier Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities in the Enterprise Manager of McAfee Vulnerability Manager. These vulnerabilities allow remote...

CVE-2014-1472: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Enterprise Manager in McAfee Vulnerability Manager MVM 7.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

OpenVAS / Greenbone Vulnerability Manager Detection (OMP/GMP)

OpenVAS Management Protocol OMP / Greenbone Management Protocol GMP based detection of an OpenVAS Manager openvasmd or Greebone Vulnerability Manager gmvd. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Debian Security Advisory DSA 2701-1 (krb5 - denial of service)

It was discovered that the kpasswd service running on UDP port 464 could respond to response packets, creating a packet loop and a denial of service condition. OpenVAS Vulnerability Test $Id: deb2701.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from advisory DSA 2701-1 using nvtgen 1....

McAfee Vulnerability Manager cert_cn Parameter XSS

The version of McAfee Vulnerability Manager installed on the remote host is affected by a cross-site scripting vulnerability in the 'certcn' parameter of the 'index.exp' script. By exploiting this flaw, a remote, unauthenticated attacker could execute arbitrary script code in a user's browser...

McAfee Vulnerability Manager Detect

McAfee Vulnerability Manager, a web-based vulnerability manager, is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid65737; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate", value:"2020/09/22"; scriptxrefname:"IAVT"...

McAfee Vulnerability Manager - cert_cn Cross-Site Scripting

McAfee Vulnerability Manager - certcn Cross-Site Scripting source: https://www.securityfocus.com/bid/58401/info McAfee Vulnerability Manager is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting use...

McAfee Vulnerability Manager 7.5 Cross Site Scripting

================================================================================================================================================================ McAfee® Vulnerability Manager 7.5 cross-site scripting XSS Vulnerability...

McAfee Vulnerability Manager - 'cert_cn' Cross-Site Scripting

source: https://www.securityfocus.com/bid/58401/info McAfee Vulnerability Manager is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the...

Microsoft ASP.NET ValidateRequest Filters Bypass

According to the HTTP headers received from the remote host, the web server is configured to use the ASP.NET framework. This framework includes the ValidateRequest feature, which is used by ASP.NET web applications to filter user input in an attempt to prevent cross-site scripting attacks. Howeve...