2705 matches found
Advantech Webaccess HMI/SCADA Software - Persistence Cross-Site Scripting
Title : Advantech WebAccess HMI/SCADA Software Persistence Cross-Site Scripting Vulnerability Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://webaccess.advantech.com/ Advisory : http://secpod.org/blog/?p=569...
Buffalo Linkstation Privilege Escalation Vulnerability
Buffalo Linkstation and various other Buffalo products suffer from a privilege escalation vulnerability where a permanent guest account can be used to change the administrative password. Product. Linkstation & Others Platform. Buffalo Technology Affected versions. Including Actual Version Severit...
Buffalo Linkstation Privilege Escalation / Information Disclosure Vulnerabilities
Buffalo Linkstation suffers from information disclosure and privilege escalation vulnerabilities. Product. Linkstation & Others Platform. Buffalo Technology Affected versions. Including Actual Version Severity Rating. Medium Impact. Privilege escalation, Information Disclosure Attack Vector. From...
Advantech WebAccess Vulnerabilities
OVERVIEW This advisory follows up on two previous ICS-CERT Alerts: “ICS-ALERT-11-245-01—Multiple ActiveX Vulnerabilities in Advantech BroadWin WebAccess,” published September 2, 2011.http://ics-cert.us-cert.gov/alerts/ICS-ALERT-11-245-01, ICS-ALERT-11-245-01, website last accessed February 15,...
Novell GroupWise WebAccess Detection
Novell GroupWise WebAccess, a component of the GroupWise suite that provides web-based remote access, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62415; scriptversion"1.7";...
Cross site scripting
Cross-site scripting XSS vulnerability in the WebAccess component in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 allows remote attackers to inject arbitrary web script or HTML via a crafted signature in an HTML e-mail message...
CVE-2012-4912
CVE-2012-4912 describes an XSS vulnerability in the Novell GroupWise WebAccess component. Affected products include GroupWise 8.x prior to 8.0.3 SP, and 2012 versions prior to SP1. The issue allows remote attackers to inject arbitrary web script or HTML via a crafted HTML email signature, leading...
CVE-2012-0272
Cross-site scripting XSS vulnerability in the WebAccess component in Novell GroupWise 8.0 before Support Pack 3 allows remote attackers to inject arbitrary web script or HTML via the merge parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in the WebAccess component in Novell GroupWise 8.0 before Support Pack 3 allows remote attackers to inject arbitrary web script or HTML via the merge parameter...
CVE-2012-0272
CVE-2012-0272 concerns an XSS vulnerability in the WebAccess component of Novell GroupWise 8.0 prior to Support Pack 3, where an attacker can inject arbitrary script or HTML via the merge parameter. Multiple connected sources (SUSE SUSE CVE page, NVD/NVD entries, Nessus plugin) corroborate the af...
CVE-2012-0272
Cross-site scripting XSS vulnerability in the WebAccess component in Novell GroupWise 8.0 before Support Pack 3 allows remote attackers to inject arbitrary web script or HTML via the merge parameter...
Novell GroupWise WebAccess User.interface XSS
The version of Novell GroupWise WebAccess hosted on the remote web server has a cross-site scripting vulnerability. This vulnerability is present when files are retrieved by passing a directory traversal string to the User.interface parameter. An attacker could exploit this by tricking a user int...
Novell GroupWise WebAccess User.interface Directory Traversal
The version of Novell GroupWise WebAccess hosted on the remote web server has a directory traversal vulnerability. Input to the User.interface parameter is not properly sanitized. An attacker could exploit this to download files under the WebAccess directory structure. %NASLMINLEVEL 70300 C Tenab...
CVE-2012-0410
Directory traversal vulnerability in WebAccess in Novell GroupWise before 8.03 allows remote attackers to read arbitrary files via the User.interface parameter...
Directory traversal
Directory traversal vulnerability in WebAccess in Novell GroupWise before 8.03 allows remote attackers to read arbitrary files via the User.interface parameter...
CVE-2012-0410
CVE-2012-0410 affects Novell GroupWise WebAccess; it is a directory traversal vulnerability in the User.interface parameter that could allow remote attackers to read arbitrary files. Affected software is GroupWise WebAccess prior to version 8.03 (8.03 fixed). The CVSSv2 base score is 5.0 (MEDIUM)...
CVE-2012-0410
Directory traversal vulnerability in WebAccess in Novell GroupWise before 8.03 allows remote attackers to read arbitrary files via the User.interface parameter...
Novell GroupWise 8 WebAccess File Disclosure
File disclosure vulnerability in Novell GroupWise WebAccess Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...
CVE-2012-0239
uaddUpAdmin.asp in Advantech/BroadWin WebAccess before 7.0 does not properly perform authentication, which allows remote attackers to modify an administrative password via a password-change request...