PT-2012-6279

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 4.0.0 through 4.0.7 Description The web-based management UI in the affected versions of PAN-OS allows remote attackers to obtain overly verbose error information via crafted input. This issue does not directl...

Security advisory for Bugzilla 4.2.1, 4.0.6 and 3.6.9

Summary ======= Bugzilla is a Web-based bug-tracking system used by a large number of software projects. The following security issues have been discovered in Bugzilla: When abusing the X-FORWARDED-FOR header, an attacker could bypass the lockout policy allowing a possible brute-force discovery o...

Lenovo ThinkManagement Console Detection

Lenovo ThinkManagement Console, a web-based API for Lenovo ThinkManagement, was found on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid58653; scriptversion"1.4"; scriptcvsdate"Date: 2019/11/25"; scriptnameenglish:"Lenovo ThinkManagement Console...

CVE-2012-1239

The TopAccess web-based management interface on TOSHIBA TEC e-Studio multi-function peripheral MFP devices with firmware 30x through 302, 35x through 354, and 4xx through 421 allows remote attackers to bypass authentication and obtain administrative privileges via unspecified vectors...

Authentication flaw

The TopAccess web-based management interface on TOSHIBA TEC e-Studio multi-function peripheral MFP devices with firmware 30x through 302, 35x through 354, and 4xx through 421 allows remote attackers to bypass authentication and obtain administrative privileges via unspecified vectors...

JVN#92830293: TOSHIBA TEC e-Studio series vulnerable to authentication bypass

e-Studio is a multi-function peripheral MFP. Multiple e-Studio series products contain a vulnerability in web-based management utility, which may result in an authentication bypass. Impact An attacker that can access the product may log in with administrative privileges. As a result, settings may...

Fedora Update for zabbix FEDORA-2011-16745

Check for the Version of zabbix OpenVAS Vulnerability Test Fedora Update for zabbix FEDORA-2011-16745 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Fedora Update for ReviewBoard FEDORA-2011-15935

Check for the Version of ReviewBoard OpenVAS Vulnerability Test Fedora Update for ReviewBoard FEDORA-2011-15935 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

Fedora Update for phpldapadmin FEDORA-2011-14924

Check for the Version of phpldapadmin OpenVAS Vulnerability Test Fedora Update for phpldapadmin FEDORA-2011-14924 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Tivoli Provisioning Manager Express for Software Distribution Detection

Tivoli Provisioning Manager Express for Software Distribution, an application for managing software distribution, was detected on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid58528; scriptversion"1.5"; scriptcvsdate"Date: 2019/11/22";...

Tivoli Provisioning Manager Express for Software Distribution Multiple SQL Injection Vulnerabilities

Binary data 6398.prm...

Apache Wicket 'pageMapName'参数跨站脚本执行漏洞

BUGTRAQ ID: 52680 CVE ID: CVE-2012-0047 Wicket 提供了一种面向对象的方式来开发基于 Web 的动态 UI 应用程序。 Apache Wicket在操作‘wicket:pageMapName’请求参数值时可能存在XSS攻击，可被利用执行任意脚本代码。 0 Apache Group Wicket 1.4.18 Apache Group Wicket 1.4.17 Apache Group Wicket 1.4.16 Apache Group Wicket 1.4.15 厂商补丁： Apache Group ------------...

Novell ZENworks Control Center Detection

Novell ZENworks Control Center, the web-based administrative interface for Novell ZENworks, was found on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid58446; scriptversion"1.6"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"Novell ZENworks...

FreePBX 2.10.0, 2.9.0 Multiple Vulnerabilities

Exploit for php platform in category web applications Product: FreePBX Version: 2.10.0, 2.9.0 and perhaps earlier versions Type: Remote Command Execution, XSS Release Date: March 14, 2012 Vendor Notification Date: Jun 12, 2011 Author: Martin Tschirsich Overview: A remote command execution...

ManageEngine DeviceExpert Detection

The remote web server hosts ManageEngine DeviceExpert, a web- based, multi-vendor change and configuration management application for network devices written in Java. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid58426; scriptversion"1.5"; scriptcvsdate"Date:...

FreePBX 2.10.0 Remote Command Execution / XSS

Product: FreePBX Version: 2.10.0, 2.9.0 and perhaps earlier versions Type: Remote Command Execution, XSS Release Date: March 14, 2012 Vendor Notification Date: Jun 12, 2011 Author: Martin Tschirsich Overview: A remote command execution vulnerability and some XSS in current and earlier FreePBX...

WebGlimpse Detection

The remote web server hosts WebGlimpse, a web-based site search application. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid58411; scriptversion"1.6"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01"; scriptnameenglish:"WebGlimpse Detection";...

JPEG 2000 Memory Overwrite Vulnerability in OpenJPEG Could Allow Arbitrary Code Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability affecting OpenJPEG software version 1.4 and earlier versions. Microsoft discovered and disclosed the vulnerability under coordinated vulnerability disclosure to the affected vendor, OpenJPEG...

Promise WebPAM v2.2.0.13 Multiple Remote Vulnerabilities

Summary WebPAM is a web based Promise Array Management Software that's easy-to use, designed to simplify RAID storage management. WebPAM is specifically designed for Promise HBA. WebPAM can configure, manage or monitor Promise RAID products remotely from a web browser from anywhere in the world...

HITB2011KUL - SAPocalypse Now, CrushingSAPs J2EE

Document Title: =============== HITB2011KUL - SAPocalypse Now, CrushingSAPs J2EE References: =========== View: http://www.youtube.com/watch?v=bu6JnwqhRV0 Release Date: ============= 2012-03-05 Vulnerability Laboratory ID VL-ID: ==================================== 469 Discovery Status:...