Solaris 10 (x86) : 147674-11 (deprecated)

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Oracle Java Web Console. The supported version that is affected is 10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise...

Scrutinizer 8.6.2 Bypass / Cross Site Scripting / SQL Injection

Trustwave SpiderLabs Security Advisory TWSL2012-008: Multiple Vulnerabilities in Scrutinizer NetFlow & sFlow Analyzer https://www.trustwave.com/spiderlabs/advisories/TWSL2012-008.txt Published: 04/11/12 Version: 1.0 Vendor: Plixer International http://www.plixer.com Product: Scrutinizer NetFlow a...

Solaris 10 (sparc) : 147673-11 (deprecated)

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Oracle Java Web Console. The supported version that is affected is 10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise...

CentOS 5 / 6 : firefox (CESA-2012:0387)

Updated firefox packages that fix multiple security issues and three bugs are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

CVE-2011-4498

Cross-site request forgery CSRF vulnerability in the web console in Zenprise Device Manager 6.x through 6.1.8 allows remote attackers to hijack the authentication of administrators for requests that wipe mobile devices...

Sun Java Web Console BeginLogin.jsp redirect_url Parameter URI Redirection

The version of Sun Java Web Console running on the remote host may have a URI redirection vulnerability. An attacker could exploit this by tricking a user into requesting a specially crafted URL, which would redirect the user to an arbitrary website. This could result in further attacks e.g...

JP1/Performance Management - Web Console Cross-Site Scripting Vulnerability

Overview JP1/Performance Management - Web Console contains a cross-site scripting vulnerability. Impact A remote attacker could execute malicious script on the affected system. Solution Please refer to the 'Vendor Information' section for the official countermeasure and take appropriate action...

Trend Micro Data Loss Prevention Virtual Appliance Web Console Detection

The remote web server hosts an instance of Trend Micro Data Loss Prevention DLP Web Console. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid55455; scriptversion"1.9";...

Trend Micro Data Loss Prevention Virtual Appliance Encoded Traversal Arbitrary File Access

The instance of Trend Micro Data Loss Prevention Web Console listening on this port allows an unauthenticated, remote attacker to retrieve arbitrary files through its web server using specially crafted requests with encoded directory traversal sequences. This can result in the disclosure of...

SAP NetWeaver Mobile Infrastructure Web Console - XSS

Application: SAP NetWeaver 7.0 Versions Affected: SAP NetWeaver Mobile Infrastructure Web Console Vendor URL: http://www.sap.com Bugs: XSS Exploits: YES Reported: 13.05.2011 Vendor response: 15.05.2011 Date of Public Advisory: 30.06.2012 Reference: SAP Security Note 1590866 Author: Dmitriy...

PostgreSQL Plus Advanced Server DBA Management Server Remote Authentication Bypass Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Postgres Plus Advanced Server DBA Management Server. Authentication is not required to exploit this vulnerability. The flaw exists within the DBA Management Server component which listens by defaul...

F-Secure Internet Gatekeeper Web Console Detection

The remote web server is the Web Console component of F-Secure Internet Gatekeeper, an enterprise-class email and web filtering gateway used to identify malware in incoming and outgoing SMTP, HTTP, FTP and POP3 traffic. C Tenable Network Security, Inc. include"compat.inc"; if description...

CVE-2010-4436

Unspecified vulnerability in Oracle Sun Management Center SunMC 4.0 allows remote attackers to affect confidentiality via unknown vectors related to Web Console...

Design/Logic Flaw

Unspecified vulnerability in Oracle Sun Management Center SunMC 4.0 allows remote attackers to affect confidentiality via unknown vectors related to Web Console...

CVE-2010-4436

Unspecified vulnerability in Oracle Sun Management Center SunMC 4.0 allows remote attackers to affect confidentiality via unknown vectors related to Web Console...

Barracuda Spam & Virus Firewall Console Management Detection

The remote host appears to be a Barracuda Spam & Virus Firewall. It allows connections to its web console management application. Letting attackers know the type of firewall in use may help them focus their attacks against the networks it protects. C Tenable Network Security, Inc...

Sybase EAServer 5.2 - Remote Stack Buffer Overflow (Metasploit)

$Id: sybaseeaserver.rb 9583 2010-06-22 19:11:05Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Authentication flaw

ToutVirtual VirtualIQ Pro before 3.5 build 8691 does not require administrative authentication for JBoss console access, which allows remote attackers to execute arbitrary commands via requests to 1 the JMX Management Console or 2 the Web Console...

Input validation

The Web Console aka web-console in JBossAs in Red Hat JBoss Enterprise Application Platform aka JBoss EAP or JBEAP 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allows remote attackers to obtain sensitive information via an...

CVE-2010-1428

The Web Console aka web-console in JBossAs in Red Hat JBoss Enterprise Application Platform aka JBoss EAP or JBEAP 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allows remote attackers to obtain sensitive information via an...