Design/Logic Flaw

The Websense V10000 appliance before 1.0.1 allows remote attackers to cause a denial of service memory consumption and process crash via a large file that is not properly handled during buffering...

Code injection

The Filtering Service in Websense Web Security and Web Filter before 6.3.1 Hotfix 106 and 7.x before 7.1 allow remote attackers to cause a denial of service filtering outage via a crafted URL...

Authentication flaw

The Websense V10000 appliance before 1.0.1 allows remote attackers to cause a denial of service intermittent LDAP authentication outage via a login attempt with an incorrect password...

Code injection

The Rules Service in Websense Email Security before 7.1 allows remote attackers to cause a denial of service service crash via an attachment with a crafted size...

CVE-2009-5128

The Websense V10000 appliance before 1.0.1 allows remote attackers to cause a denial of service memory consumption and process crash via a large file that is not properly handled during buffering...

CVE-2009-5129

The Websense V10000 appliance before 1.0.1 allows remote attackers to cause a denial of service intermittent LDAP authentication outage via a login attempt with an incorrect password...

CVE-2009-5130

CVE-2009-5130 affects Websense Email Security’s Rules Service prior to 7.1. The issue is caused by processing an attachment with a crafted size, allowing remote attackers to trigger a denial-of-service (service crash). The connected documents do not provide exploitation details or a confirmed rem...

CVE-2009-5130

The Rules Service in Websense Email Security before 7.1 allows remote attackers to cause a denial of service service crash via an attachment with a crafted size...

CVE-2009-5129

The Websense V10000 appliance before 1.0.1 allows remote attackers to cause a denial of service intermittent LDAP authentication outage via a login attempt with an incorrect password...

CVE-2009-5128

The Websense CVE-2009-5128 affects the Websense V10000 appliance prior to version 1.0.1, where a large input file not properly handled during buffering allows remote attackers to cause memory consumption and a process crash (DoS). The vulnerability is documented across multiple sources (NVD, Red ...

CVE-2009-5128

The Websense V10000 appliance before 1.0.1 allows remote attackers to cause a denial of service memory consumption and process crash via a large file that is not properly handled during buffering...

CVE-2009-5129

CVE-2009-5129 affects the Websense V10000 appliance prior to version 1.0.1. The issue allows a remote attacker to cause a denial of service (intermittent LDAP authentication outage) by sending a login attempt with an incorrect password. A fix is available in version 1.0.1 (per the V10000 release ...

CVE-2009-5131

The Receive Service in Websense Email Security before 7.1 does not recognize domain extensions in the blacklist, which allows remote attackers to bypass intended access restrictions and send e-mail messages via an SMTP session...

CVE-2009-5132

CVE-2009-5132 affects Websense Filtering Service in Web Security and Web Filter prior to 6.3.1 Hotfix 106 and prior to 7.1 (7.x). The flaw allows remote attackers to cause a denial-of-service (filtering outage) by sending a crafted URL. Impact is partial availability disruption as described; expl...

CVE-2009-5132

The Filtering Service in Websense Web Security and Web Filter before 6.3.1 Hotfix 106 and 7.x before 7.1 allow remote attackers to cause a denial of service filtering outage via a crafted URL...

CVE-2009-5131

CVE-2009-5131 concerns the Receive Service in Websense Email Security prior to 7.1, where the blacklist fails to recognize domain extensions. This allows remote attackers to bypass access restrictions and send e-mail messages via an SMTP session. Documented by NVD and Red Hat with the same descri...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in monitor/moverview.ink in Websense Content Gateway before 7.7.3 allow remote attackers to inject arbitrary web script or HTML via the 1 menu or 2 item parameter...

CVE-2012-2984

Multiple cross-site scripting XSS vulnerabilities in monitor/moverview.ink in Websense Content Gateway before 7.7.3 allow remote attackers to inject arbitrary web script or HTML via the 1 menu or 2 item parameter...

CVE-2012-2984

Multiple cross-site scripting XSS vulnerabilities in monitor/moverview.ink in Websense Content Gateway before 7.7.3 allow remote attackers to inject arbitrary web script or HTML via the 1 menu or 2 item parameter...

CVE-2012-2984

Websense Content Gateway (monitor/m_overview.ink) is affected by cross-site scripting vulnerabilities described in CVE-2012-2984. The issue is reflective XSS via the menu and item parameters on the /monitor/m_overview.ink page, exploitable by an authenticated administrator or a user tricked into ...