CVE-2014-2535: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in McAfee Web Gateway MWG 7.4.x before 7.4.1, 7.3.x before 7.3.2.6, and 7.2.0.9 and earlier allows remote authenticated users to read arbitrary files via a crafted request to the web filtering port...

Symantec Web Gateway blacklist.php Cross Site Scripting (CVE-2013-5013)

A cross-site scripting vulnerability has been reported in Symantec Web Gateway. The vulnerability is due to an input validation error in blocklist.php. A remote attacker can exploit this vulnerability by enticing a user to follow a specially crafted URL or to submit a web form with crafted values...

McAfee Web Gateway任意文件泄漏漏洞

McAfee Email Gateway是一款全面的电子邮件安全解决方案。 该漏洞是由于处理请求时MWG网页过滤端口的错误，可被利用通过目录遍历序列来下载任意文件。 0 McAfee Web Gateway 7.x McAfee Web Gateway 7.4.1或7.3.2.6版本以修复此漏洞，建议用户下载使用： https://kc.mcafee.com/corporate/index?page=content&id=SB10063...

Symantec Web Gateway Cross-Site Scripting and SQL Injection Vulnerabilities

Symantec Web Gateway is prone to cross-site scripting and SQL injection vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Symantec Web Gateway blocked.php Blind SQL Injection - Ver2 (CVE-2012-2574)

An SQL injection vulnerability has been reported in Symantec Web Gateway. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

McAfee Web Gateway User Interface Default Credentials

The remote McAfee Web Gateway user interface uses a known set of default credentials. Knowing these, an attacker with access to service can gain administrative access to the device. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

McAfee Web Gateway User Interface Detection

Binary data mcafeewebgatewaykonfiguratordetect.nbin...

Symantec Endpoint Protection Manager本地SQL注入漏洞(CVE-2013-5015)

BUGTRAQ ID: 65467 CVECAN ID: CVE-2013-5015 Symantec Endpoint Protection SEP是反病毒和防火墙产品。 Symantec Endpoint Protection Manager 11.0、Symantec Endpoint Protection Center Small Business Edition 12.0、Symantec Endpoint Protection Manager 12.1版本没有有效过滤数据库的本地请求，恶意本地用户可利用此漏洞注入任意SQL数据库查询。 0 Symantec Web Gatew...

Symantec Web Gateway <= 5.1.1 Multiple Vulnerabilities (SYM14-003)

According to its self-reported version number, the remote web server is hosting a version of Symantec Web Gateway 5.1.1 or earlier. It is, therefore, affected by the following vulnerabilities : - Multiple SQL injection vulnerabilities exist because of a failure to sanitize user-supplied data befo...

CVE-2013-5013

Multiple cross-site scripting XSS vulnerabilities in the management console on the Symantec Web Gateway SWG appliance before 5.2 allow remote attackers to inject arbitrary web script or HTML via 1 vectors involving PHP scripts and 2 unspecified other vectors...

CVE-2013-5012

Multiple SQL injection vulnerabilities in the management console on the Symantec Web Gateway SWG appliance before 5.2 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

Sql injection

Multiple SQL injection vulnerabilities in the management console on the Symantec Web Gateway SWG appliance before 5.2 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the management console on the Symantec Web Gateway SWG appliance before 5.2 allow remote attackers to inject arbitrary web script or HTML via 1 vectors involving PHP scripts and 2 unspecified other vectors...

CVE-2013-5012

Multiple SQL injection vulnerabilities in the management console on the Symantec Web Gateway SWG appliance before 5.2 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-5012

Symantec Web Gateway (SWG) appliance prior to version 5.2 is affected by SQL injection vulnerabilities in the management console, allowing remote authenticated users to execute arbitrary SQL commands via unspecified vectors. This CVE (CVE-2013-5012) is part of a set of vulnerabilities affecting S...

CVE-2013-5013

Multiple cross-site scripting XSS vulnerabilities in the management console on the Symantec Web Gateway SWG appliance before 5.2 allow remote attackers to inject arbitrary web script or HTML via 1 vectors involving PHP scripts and 2 unspecified other vectors...

CVE-2013-5013

Symantec Web Gateway (SWG) management console contains cross‑site scripting (XSS) vulnerabilities tracked as CVE‑2013‑5013. Public sources indicate SWG

CVE-2013-5012: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the management console on the Symantec Web Gateway SWG appliance before 5.2 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

Symantec Web Gateway 5.1.1.24 Cross Site Scripting

I. VULNERABILITY ------------------------- Reflected XSS Attacks vulnerabilities in Symantec WEB Gateway 5.1.1.24 II. BACKGROUND ------------------------- Symantec Corporation is an American computer security, backup and availability solutions software corporation headquartered in Mountain View,...

CVE-2013-5013: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the management console on the Symantec Web Gateway SWG appliance before 5.2 allow remote attackers to inject arbitrary web script or HTML via 1 vectors involving PHP scripts and 2 unspecified other vectors...