Filtered by vendor Websense
Subscribe
Total
49 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2010-5149 | 1 Websense | 2 Websense Web Filter, Websense Web Security | 2017-08-28 | 5.0 MEDIUM | N/A |
Websense Web Security and Web Filter before 6.3.3 Hotfix 27 and 7.x before 7.1.1 allow remote attackers to cause a denial of service (Blue Coat appliance integration outage) via a long URL. | |||||
CVE-2015-2763 | 1 Websense | 1 Triton Ap Email | 2016-12-02 | 10.0 HIGH | N/A |
Unspecified vulnerability in Websense TRITON AP-EMAIL before 8.0.0 has unknown impact and attack vectors, related to port 17703. | |||||
CVE-2015-2761 | 1 Websense | 1 Triton Ap Web | 2016-12-02 | 4.3 MEDIUM | N/A |
Cross-site scripting (XSS) vulnerability in the Exceptions and Scanning Exceptions Pages in Websense TRITON AP-WEB before 8.0.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | |||||
CVE-2015-2771 | 1 Websense | 2 Triton Ap Email, V-series Appliances | 2016-12-02 | 5.0 MEDIUM | N/A |
The Mail Server in Websense TRITON AP-EMAIL and V-Series appliances before 8.0.0 uses plaintext credentials, which allows remote attackers to obtain sensitive information via unspecified vectors. | |||||
CVE-2015-2772 | 1 Websense | 1 V-series Appliances | 2016-12-02 | 7.5 HIGH | N/A |
SVM in Websense TRITON V-Series appliances before 8.0.0 allows attackers to upload arbitrary files via unspecified vectors. | |||||
CVE-2015-2773 | 1 Websense | 1 V-series Appliances | 2016-12-02 | 5.0 MEDIUM | N/A |
SVM in Websense TRITON V-Series appliances before 8.0.0 allows attackers to read arbitrary files via unspecified vectors. | |||||
CVE-2015-2768 | 1 Websense | 2 Triton Ap Email, V-series Appliances | 2016-12-02 | 4.3 MEDIUM | N/A |
Cross-site scripting (XSS) vulnerability in Websense TRITON AP-EMAIL before 8.0.0 and V-Series 7.7 appliances allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | |||||
CVE-2015-2767 | 1 Websense | 1 Triton Ap Email | 2016-12-02 | 10.0 HIGH | N/A |
Unspecified vulnerability in Websense TRITON AP-EMAIL before 8.0.0 has unknown impact and attack vectors, related to "Autocomplete Enabled." | |||||
CVE-2015-2762 | 1 Websense | 1 Triton Ap Web | 2016-12-02 | 5.0 MEDIUM | N/A |
Websense TRITON AP-WEB before 8.0.0 allows remote attackers to enumerate Windows domain user accounts via vectors related to HTTP authentication. | |||||
CVE-2015-2766 | 1 Websense | 1 Triton Ap Email | 2016-12-02 | 5.0 MEDIUM | N/A |
The Personal Email Manager (PEM) in Websense TRITON AP-EMAIL before 8.0.0 allows attackers to have unspecified impact via a brute force attack. | |||||
CVE-2015-2765 | 1 Websense | 1 Triton Ap Email | 2016-12-02 | 4.3 MEDIUM | N/A |
The Email Security Gateway in Websense TRITON AP-EMAIL before 8.0.0 allows remote attackers to conduct clickjacking attacks via unspecified vectors. | |||||
CVE-2015-2764 | 1 Websense | 1 Triton Ap Data | 2016-12-02 | 4.3 MEDIUM | N/A |
Multiple cross-site scripting (XSS) vulnerabilities in Websense TRITON AP-DATA before 8.0.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to the DSS (1) Mobile or (2) DLP report catalog. | |||||
CVE-2014-9712 | 1 Websense | 1 V-series Appliances | 2016-06-23 | 4.0 MEDIUM | N/A |
Websense TRITON V-Series appliances before 7.8.3 Hotfix 03 and 7.8.4 before Hotfix 01 allow remote administrators to read arbitrary files and obtain passwords via a crafted path. | |||||
CVE-2015-2769 | 1 Websense | 1 Triton Ap Email | 2015-03-30 | 6.8 MEDIUM | N/A |
Multiple cross-site request forgery (CSRF) vulnerabilities in the Personal Email Manager (PEM) in Websense TRITON AP-EMAIL before 8.0.0 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors. | |||||
CVE-2015-2770 | 1 Websense | 1 V-series Appliances | 2015-03-30 | 6.8 MEDIUM | N/A |
Cross-site request forgery (CSRF) vulnerability in the command line page in Websense TRITON V-Series appliances before 8.0.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. | |||||
CVE-2014-0347 | 1 Websense | 5 Triton Unified Security Center, Triton Web Filter, Triton Web Security and 2 more | 2014-04-14 | 3.5 LOW | N/A |
The Settings module in Websense Triton Unified Security Center 7.7.3 before Hotfix 31, Web Filter 7.7.3 before Hotfix 31, Web Security 7.7.3 before Hotfix 31, Web Security Gateway 7.7.3 before Hotfix 31, and Web Security Gateway Anywhere 7.7.3 before Hotfix 31 allows remote authenticated users to read cleartext passwords by replacing type="password" with type="text" in an INPUT element in the (1) Log Database or (2) User Directories component. | |||||
CVE-2012-2984 | 1 Websense | 1 Websense Content Content Gateway | 2013-03-21 | 4.3 MEDIUM | N/A |
Multiple cross-site scripting (XSS) vulnerabilities in monitor/m_overview.ink in Websense Content Gateway before 7.7.3 allow remote attackers to inject arbitrary web script or HTML via the (1) menu or (2) item parameter. | |||||
CVE-2009-5130 | 1 Websense | 1 Websense Email Security | 2012-08-27 | 4.3 MEDIUM | N/A |
The Rules Service in Websense Email Security before 7.1 allows remote attackers to cause a denial of service (service crash) via an attachment with a crafted size. | |||||
CVE-2009-5129 | 1 Websense | 1 Websense V10000 | 2012-08-27 | 5.0 MEDIUM | N/A |
The Websense V10000 appliance before 1.0.1 allows remote attackers to cause a denial of service (intermittent LDAP authentication outage) via a login attempt with an incorrect password. | |||||
CVE-2009-5128 | 1 Websense | 1 Websense V10000 | 2012-08-27 | 5.0 MEDIUM | N/A |
The Websense V10000 appliance before 1.0.1 allows remote attackers to cause a denial of service (memory consumption and process crash) via a large file that is not properly handled during buffering. |