CVE-2009-2429

SmartFilter Web Gateway Security 4.2.1.00 stores user credentials in cleartext in adminbackup.xml files and uses insecure permissions for these files, which allows local users to gain privileges. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2009-2429: Undefined Security Weakness

SmartFilter Web Gateway Security 4.2.1.00 stores user credentials in cleartext in adminbackup.xml files and uses insecure permissions for these files, which allows local users to gain privileges. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2009-2312

SmartFilter Web Gateway Security 4.2.1.00 stores user credentials in cleartext in config.txt and uses insecure permissions for this file, which allows local users to gain privileges...

Design/Logic Flaw

SmartFilter Web Gateway Security 4.2.1.00 stores user credentials in cleartext in config.txt and uses insecure permissions for this file, which allows local users to gain privileges...

CVE-2009-2312

SmartFilter Web Gateway Security 4.2.1.00 stores user credentials in cleartext in config.txt and uses insecure permissions for this file, which allows local users to gain privileges...

CVE-2009-2312

McAfee SmartFilter Web Gateway Security 4.2.1.00 stores user credentials in cleartext in config.txt and uses insecure permissions for that file, enabling local attackers to gain privileges. The SEBUG entry additionally cites the credentials and plaintext passwords located under c:\Program Files\S...

CVE-2009-2312: Undefined Security Weakness

SmartFilter Web Gateway Security 4.2.1.00 stores user credentials in cleartext in config.txt and uses insecure permissions for this file, which allows local users to gain privileges...

CVE-2008-5540

Secure Computing Secure Web Gateway aka Webwasher, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3...

Design/Logic Flaw

Secure Computing Secure Web Gateway aka Webwasher, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3...

CVE-2008-5540

Secure Computing Secure Web Gateway aka Webwasher, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3...

CVE-2008-5540

CVE-2008-5540 describes a bypass of malware detection in Secure Computing Secure Web Gateway (Webwasher) when using Internet Explorer 6/7. An attacker can place an MZ header at the start of an HTML document and modify the filename to have no extension, .txt, or .jpg, enabling the document to evad...

CVE-2008-5540: Improper Input Validation

Secure Computing Secure Web Gateway aka Webwasher, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3...

ZYWALL Referer Header XSS Vulnerability

Affected Software/Device: Zyxel ZYWall 100 Vulnerability: Cross Site Scripting Risk: Low Description: The ZyWALL 100 is designed to act as a secure gateway via xDSL/Cable modems or broadband routers for small to medium size companies. The ZyWALL 100 features an ICSA certified firewall, IPSec VPN...

Cross site scripting

Cross-site scripting XSS vulnerability in Visionary Technology in Library Solutions VTLS vtls.web.gateway before 48.1.1 allows remote attackers to inject arbitrary web script or HTML via the searchtype parameter...

CVE-2007-5993

Cross-site scripting XSS vulnerability in Visionary Technology in Library Solutions VTLS vtls.web.gateway before 48.1.1 allows remote attackers to inject arbitrary web script or HTML via the searchtype parameter...

CVE-2007-5993

CVE-2007-5993 concerns a cross-site scripting (XSS) flaw in Visionary Technology in Library Solutions (VTLS) vtls.web.gateway prior to version 48.1.1. The vulnerability allows remote attackers to inject arbitrary web script or HTML via the searchtype parameter. Documented impact implies potential...

VTLS Web Gateway 48.1 - Searchtype Cross-Site Scripting

VTLS Web Gateway 48.1 - Searchtype Cross-Site Scripting source: https://www.securityfocus.com/bid/26419/info Web Gateway is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code...

VTLS Web Gateway 48.1 - 'Searchtype' Cross-Site Scripting

source: https://www.securityfocus.com/bid/26419/info Web Gateway is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context o...

Clearswift MIMEsweeper Manager Console Detection

The remote host appears to be running MIMEsweeper for SMTP, connections are allowed to the web MIMEsweeper manager console. Letting attackers know that you are using this software will help them to focus their attack or will make them change their strategy. C Tenable Network Security, Inc...

Internet Software Solutions Air Messenger LAN Server 3.4.2 - Full Path Disclosure

source: https://www.securityfocus.com/bid/2881/info Air Messenger LAN Server for Microsoft Windows allows users to exchange phone, pager and email messages through a Web gateway. The path to sensitive files used by AMLServer can be easily obtained by any remote user, simply by examining the...