Show filters
91 Total Results
Displaying 51-60 of 91
Sort by:
Attacker Value
Unknown
CVE-2011-1895
Disclosure Date: October 12, 2011 (last updated October 04, 2023)
CRLF injection vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP response splitting attacks and cross-site scripting (XSS) attacks, via unspecified vectors, aka "ExcelTable Response Splitting XSS Vulnerability."
0
Attacker Value
Unknown
CVE-2011-1969
Disclosure Date: October 12, 2011 (last updated October 04, 2023)
Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 provides the MicrosoftClient.jar file containing a signed Java applet, which allows remote attackers to execute arbitrary code on client machines via unspecified vectors, aka "Poisoned Cup of Code Execution Vulnerability."
0
Attacker Value
Unknown
CVE-2011-1896
Disclosure Date: October 12, 2011 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "ExcelTable Reflected XSS Vulnerability."
0
Attacker Value
Unknown
CVE-2011-1889
Disclosure Date: June 16, 2011 (last updated July 25, 2024)
The NSPLookupServiceNext function in the client in Microsoft Forefront Threat Management Gateway (TMG) 2010 allows remote attackers to execute arbitrary code via vectors involving unspecified requests, aka "TMG Firewall Client Memory Corruption Vulnerability."
0
Attacker Value
Unknown
CVE-2011-0037
Disclosure Date: February 25, 2011 (last updated October 04, 2023)
Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious Software Removal Tool (MSRT), Windows Defender, Security Essentials, Forefront Client Security, Forefront Endpoint Protection 2010, and Windows Live OneCare, allows local users to gain privileges via a crafted value of an unspecified user registry key.
0
Attacker Value
Unknown
CVE-2010-3936
Disclosure Date: November 10, 2010 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in Signurl.asp in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "XSS in Signurl.asp Vulnerability."
0
Attacker Value
Unknown
CVE-2010-2733
Disclosure Date: November 10, 2010 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in the Web Monitor in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "UAG XSS Allows EOP Vulnerability."
0
Attacker Value
Unknown
CVE-2010-2734
Disclosure Date: November 10, 2010 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in the mobile portal in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "XSS Issue on UAG Mobile Portal Website in Forefront Unified Access Gateway Vulnerability."
0
Attacker Value
Unknown
CVE-2010-2732
Disclosure Date: November 10, 2010 (last updated October 04, 2023)
Open redirect vulnerability in the web interface in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka "UAG Redirection Spoofing Vulnerability."
0
Attacker Value
Unknown
CVE-2010-1918
Disclosure Date: May 12, 2010 (last updated October 04, 2023)
SQL injection vulnerability in ask_chat.php in eFront 3.6.2 and earlier allows remote attackers to execute arbitrary SQL commands via the chatrooms_ID parameter.
0
