|
285851
|
- |
|
juniper
|
junos_space junos_space_virtual_appliance junos_space_ja1500_appliance
|
Juniper Junos Space before 12.3P2.8, as used on the JA1500 appliance and in other contexts, includes a cleartext password in a configuration tab, which makes it easier for physically proximate attack…
|
CWE-255
Credentials Management
|
CVE-2013-3497
|
2024-11-21 10:53 |
2013-05-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
285852
|
- |
|
gwos
|
groundwork_monitor
|
Multiple cross-site request forgery (CSRF) vulnerabilities in the Noma component in GroundWork Monitor Enterprise 6.7.0 allow remote attackers to hijack the authentication of unspecified victims for …
|
CWE-352
Origin Validation Error
|
CVE-2013-3513
|
2024-11-21 10:53 |
2013-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
285853
|
- |
|
gwos
|
groundwork_monitor
|
The Cacti component in GroundWork Monitor Enterprise 6.7.0 does not properly perform authorization checks, which allows remote authenticated users to read or modify configuration settings via unspeci…
|
CWE-20
Improper Input Validation
|
CVE-2013-3512
|
2024-11-21 10:53 |
2013-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
285854
|
- |
|
gwos
|
groundwork_monitor
|
Open redirect vulnerability in the NeDi component in GroundWork Monitor Enterprise 6.7.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified …
|
CWE-20
Improper Input Validation
|
CVE-2013-3511
|
2024-11-21 10:53 |
2013-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
285855
|
- |
|
gwos
|
groundwork_monitor
|
Multiple SQL injection vulnerabilities in GroundWork Monitor Enterprise 6.7.0 allow remote authenticated users to execute arbitrary SQL commands via (1) nedi/html/System-Export.php, (2) nedi/html/Dev…
|
CWE-89
SQL Injection
|
CVE-2013-3510
|
2024-11-21 10:53 |
2013-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
285856
|
- |
|
gwos
|
groundwork_monitor
|
html/System-NeDi.php in the NeDi component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the scan functionality in…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2013-3509
|
2024-11-21 10:53 |
2013-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
285857
|
- |
|
gwos
|
groundwork_monitor
|
html/System-Files.php in the System File Overview feature in the NeDi component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to execute arbitrary commands via vectors invo…
|
CWE-94
Code Injection
|
CVE-2013-3508
|
2024-11-21 10:53 |
2013-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
285858
|
- |
|
gwos
|
groundwork_monitor
|
The NeDi component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to obtain sensitive information via a direct request for (1) a configuration file, (2) a database dump, or …
|
CWE-200
Information Exposure
|
CVE-2013-3507
|
2024-11-21 10:53 |
2013-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
285859
|
- |
|
gwos
|
groundwork_monitor
|
cgi-bin/performance/perfchart.cgi in the Performance component in GroundWork Monitor Enterprise 6.7.0 does not properly restrict XML content, which allows remote attackers to execute arbitrary comman…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2013-3506
|
2024-11-21 10:53 |
2013-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
285860
|
- |
|
gwos
|
groundwork_monitor
|
The Nagios-App component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to bypass intended access restrictions via a direct request for a (1) log file or (2) configuration f…
|
CWE-255
Credentials Management
|
CVE-2013-3505
|
2024-11-21 10:53 |
2013-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|