CVE-2015-6372

Cross-site scripting XSS vulnerability in the web-based management interface in Cisco Firepower Extensible Operating System 1.11.160 on Firepower 9000 devices allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCux10614...

CVE-2015-6372: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web-based management interface in Cisco Firepower Extensible Operating System 1.11.160 on Firepower 9000 devices allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCux10614...

Cisco Firepower 9000 Persistent Cross-Site Scripting Vulnerability

A vulnerability in the HTTP web-based management interface of Cisco Firepower 9000 devices could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the affected system. The vulnerability is due to insufficient input validation of a user-suppli...

Seagate Business NAS Firmware Vulnerabilities Disclosed

Firmware running on certain Seagate network-attached storage devices that are popular with small businesses and home offices, are vulnerable to remote attacks. Researchers at Beyond Binary, a security consulting firm in Australia, on Sunday went public with their disclosure after a nearly...

CrushFTP 7.2.0 Cross Site Request Forgery / Cross Site Scripting

======================================================== I. Overview ======================================================== Multiple CSRF & Cross-Site Scripting XSS vulnerabilities have been identified in Crushftp 7.2.0 Web Interface on default configuration. These vulnerabilities allows an...

CVE-2014-3764

CVE-2014-3764 : A cross-site scripting (XSS) vulnerability exists in the web-based device management interface of Palo Alto Networks PAN-OS. The issue stems from improper input sanitization, allowing an attacker to inject arbitrary script/HTML via unspecified vectors. Affected PAN-OS versions are...

SAMHAIN v3.1.2 - File Integrity Checker / Host-Based Intrusion Detection System

The Samhain host-based intrusion detection system HIDS provides file integrity checking and log file monitoring/analysis , as well as rootkit detection, port monitoring, detection of rogue SUID executables, and hidden processes. Samhain been designed to monitor multiple hosts with potentially...

ECI Telecom B-Focus ADSL2+ Combo332+ Wireless Router Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/20834/info ECI Telecom's B-FOCuS ADSL2+ Combo332+ wireless router is prone to an information-disclosure vulnerability. The router's Web-Based Management interface fails to authenticate users before providing access to...

MailMachine Pro 2.2.4 - Remote SQL Injection Vulnerability

No description provided by source. --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org...

Compaq Web-Based Management Agent Remote Stack Overflow Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8014/info Compaq Web-Based Management Agent has been reported prone to a remote denial of service vulnerability. The problem occurs when making malformed requests to the service. The resulting error reports a stack...

Cyclope Internet Filtering Proxy 4.0 - Stored XSS Vuln.

No description provided by source. !/usr/bin/python Title: Cyclope Internet Filtering Proxy 4.0 - Stored XSS Vuln. From: The eh?-Team || The Great White Fuzz we're not sure yet Found by: loneferret Software link: http://www.cyclope-series.com/download/index.aspx?p=2 Date Found: Oct 20th 2011 Test...

Huawei SmartAX MT880 - Multiple CSRF Vulnerabilities

No description provided by source. Description: Huawei MT880 is a device offered by the algerian telecom operator - FAWRI, to provide ADSL Internet connexion and it's already widely in use. Overview: Huawei MT880 firmware and its default configuration has flaws, which allows LAN users to gain...

CVE-2014-1990

Cross-site request forgery CSRF vulnerability in TopAccess aka the web-based management utility on TOSHIBA TEC e-Studio 232, 233, 282, and 283 devices allows remote attackers to hijack the authentication of administrators for requests that change passwords...

JVN#13313061: TOSHIBA TEC e-Studio series vulnerable to cross-site request forgery

e-Studio provided by TOSHIBA TEC CORPORATION is a multi-function peripheral MFP. Multiple e-Studio series products contain a vulnerability in web-based management utility, which may result in a cross-site request forgery. Impact If the administrator views a malicious page while logged into the...

Palo Alto Networks PAN-OS < 5.0.10 / 5.1.x < 5.1.5 XSS

The remote host is running a version of Palo Alto Networks PAN-OS prior to 5.0.10 / 5.1.x prior to 5.1.5. It is, therefore, affected by a cross-site scripting vulnerability due to a failure to sanitize user-supplied input to the web-based device management interface. C Tenable Network Security,...

TP-Link Wireless Lite N Access Point Directory Traversal (CVE-2012-5687)

A directory traversal vulnerability has been reported in TP-LINK TL-WR841N Wireless Router Web-Based Management. The vulnerability is due to lack of sanitization of the URL paramaters. A remote attacker can exploit this issue by viewing the router configuration and password files...

CVE-2012-6590

The web-based management UI in Palo Alto Networks PAN-OS 4.0.x before 4.0.8 allows remote attackers to obtain verbose error information via crafted input, aka Ref ID 33139...

CVE-2012-6590

The CVE-2012-6590 entry affects Palo Alto Networks PAN-OS 4.0.x prior to 4.0.8. The vulnerability is an information-disclosure issue where the web-based management UI may leak verbose error information to remote attackers through specially crafted input. Affected component: the PAN-OS web managem...

CVE-2012-6590: Exposure of Sensitive Information to an Unauthorized Actor

The web-based management UI in Palo Alto Networks PAN-OS 4.0.x before 4.0.8 allows remote attackers to obtain verbose error information via crafted input, aka Ref ID 33139...

Symantec Endpoint Protection Center (SPC) Small Business Edition Buffer Overflow Vulnerability

The host is installed with Symantec Endpoint Protection Manager and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbsymantecepmsbebofvuln.nasl 6104 2017-05-11 09:03:48Z teissa $ Symantec Endpoint Protection Center SPC Small Business Edition Buffer Overflow Vulnerabili...