Skip to content
OpenAdvisories

Archive

8 May 2013

Vulnerabilities first published on this day (UTC), newest first.

18 results · Feed

  • Unscored —

    Juniper Junos Space before 12.3P2.8, as used on the JA1500 appliance and in other contexts, includes a cleartext passwo…

  • Unscored —

    The ISM module in Cisco IOS on ISR G2 routers does not properly handle authentication-header packets, which allows remo…

  • Unscored —

    Multiple cross-site request forgery (CSRF) vulnerabilities in the Noma component in GroundWork Monitor Enterprise 6.7.0…

  • Unscored —

    GroundWork Monitor Enterprise 6.7.0 performs authentication on the basis of the HTTP Referer header, which allows remot…

  • Unscored —

    Directory traversal vulnerability in monarch.cgi in the MONARCH component in GroundWork Monitor Enterprise 6.7.0 allows…

  • Unscored —
    CVE-2013-3502 Public exploit EPSS 54%

    monarch_scan.cgi in the MONARCH component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to e…

  • Unscored —

    html/System-NeDi.php in the NeDi component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to …

  • Unscored —

    cgi-bin/performance/perfchart.cgi in the Performance component in GroundWork Monitor Enterprise 6.7.0 does not properly…

  • Unscored —

    Open redirect vulnerability in the NeDi component in GroundWork Monitor Enterprise 6.7.0 allows remote attackers to red…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in GroundWork Monitor Enterprise 6.7.0 allow remote attackers to in…

  • Unscored —

    The Profile Importer feature in monarch.cgi in the MONARCH component in GroundWork Monitor Enterprise 6.7.0 allows remo…

  • Unscored —

    Multiple SQL injection vulnerabilities in GroundWork Monitor Enterprise 6.7.0 allow remote authenticated users to execu…

  • Unscored —

    The NeDi component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to obtain sensitive informa…

  • Unscored —

    The Cacti component in GroundWork Monitor Enterprise 6.7.0 does not properly perform authorization checks, which allows…

  • Unscored —

    html/System-Files.php in the System File Overview feature in the NeDi component in GroundWork Monitor Enterprise 6.7.0 …

  • Unscored —

    The Nagios-App component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to bypass intended ac…

  • Unscored —

    The Foundation webapp admin interface in GroundWork Monitor Enterprise 6.7.0 uses the nagios account as the owner of wr…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Juniper SmartPass WLAN Security Management before 7.7 MR3 and 8.0 before MR…