CVE-2013-5017

SNMPConfig.php in the management console in Symantec Web Gateway SWG before 5.2.1 allows remote attackers to execute arbitrary commands via unspecified vectors...

CVE-2013-5017

Symantec Web Gateway (SWG) prior to 5.2.1 is affected by CVE-2013-5017 due to a command injection vulnerability in SNMPConfig.php that can lead to remote code execution. The issue is described across multiple sources as affecting the management console and enabling arbitrary command execution, po...

McAfee Web Gateway < 7.3.2.2 DoS (SB10052)

The remote host has a version of McAfee Web Gateway MWG prior to 7.3.2.2. It is, therefore, affected by a denial of service vulnerability due to a flaw in the packaged ISC BIND server. An attacker can exploit this vulnerability by sending a specially crafted query with a malformed RDATA section. ...

CVE-2014-1651: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in clientreport.php in the management console in Symantec Web Gateway SWG before 5.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-1650: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in user.php in the management console in Symantec Web Gateway SWG before 5.2.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

McAfee Web Gateway < 7.1.0.5 / 7.1.5.2 XSS

The remote host has a version of McAfee Web Gateway MWG prior to 7.1.0.5 / 7.1.5.2. It is, therefore, reportedly affected by an unspecified cross-site scripting vulnerability in the web UI. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc';...

CVE-2013-5017: Undefined Security Weakness

SNMPConfig.php in the management console in Symantec Web Gateway SWG before 5.2.1 allows remote attackers to execute arbitrary commands via unspecified vectors...

CVE-2014-1652: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the management console in Symantec Web Gateway SWG before 5.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified report parameters...

Symantec Web Gateway user.php SQL Injection and snmpConfig.php Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec Web Gateway. Authentication is required to exploit this vulnerability. The specific flaws exist within the user.php and snmpConfig.php files. SQL injection and command injection is possibl...

Symantec Web Gateway contains SQL injection and cross-site scripting vulnerabilities

Overview Symantec Web Gateway 5.1.1.24, and possibly earlier versions, contains cross-site scripting and SQL injection vulnerabilities. Description CVE-2014-1652 -CWE-79: Improper Neutralization of Input During Web Page Generation Symantec Web Gateway 5.1.1.24, and possibly earlier versions,...

Symantec Web Gateway Security Issues

SUMMARY Symantec Web Gateway SWG 5.2 Appliance management console is susceptible to security issues. Successful exploitation could result in unauthorized command execution on or access to the management console. There is also potential for unauthorized backend database manipulation. AFFECTED...

McAfee Web Gateway OpenSSL Information Disclosure (SB10071) (Heartbleed)

The remote host is running a version of McAfee Web Gateway MWG that is affected by an information disclosure vulnerability due to a flaw in the OpenSSL library, commonly known as the Heartbleed bug. An attacker could potentially exploit this vulnerability repeatedly to read up to 64KB of memory...

McAfee Web Gateway Directory Traversal Vulnerability

McAfee Web Gateway is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

McAfee Web Gateway (MWG) Detection (HTTP)

Detection of McAfee Web Gateway MWG. The script sends a connection request to the server and attempts to extract the version number from the reply. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

McAfee Web Gateway Detection

Binary data mcafeewebgatewaydetect.nbin...

McAfee Web Gateway < 7.3.2.6 / 7.4.1 Information Disclosure (SB10063)

The remote host is running a version of McAfee Web Gateway prior to 7.3.2.6 / 7.4.1. It is, therefore, affected by an information disclosure vulnerability. A remote attacker could potentially exploit this vulnerability to download any file from the device that the user 'mwg' has access to. C...

CVE-2014-2535

Directory traversal vulnerability in McAfee Web Gateway MWG 7.4.x before 7.4.1, 7.3.x before 7.3.2.6, and 7.2.0.9 and earlier allows remote authenticated users to read arbitrary files via a crafted request to the web filtering port...

Directory traversal

Directory traversal vulnerability in McAfee Web Gateway MWG 7.4.x before 7.4.1, 7.3.x before 7.3.2.6, and 7.2.0.9 and earlier allows remote authenticated users to read arbitrary files via a crafted request to the web filtering port...

CVE-2014-2535

Directory traversal vulnerability in McAfee Web Gateway MWG 7.4.x before 7.4.1, 7.3.x before 7.3.2.6, and 7.2.0.9 and earlier allows remote authenticated users to read arbitrary files via a crafted request to the web filtering port...

CVE-2014-2535

McAfee Web Gateway (MWG) is affected by a directory traversal vulnerability that allows remote authenticated users to read arbitrary files via requests to the web filtering port. Affected versions are MWG 7.4.x before 7.4.1, 7.3.x before 7.3.2.6, and 7.2.0.9 and earlier. The root cause is a direc...