CVE-2010-3497: Undefined Security Weakness

Symantec Norton AntiVirus 2011 does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easier for remote attackers to execute arbitrary code via malware that is correctly detected by this product, but with a detection approach that...

PT-2012-1302

Name of the Vulnerable Software and Affected Versions Symantec Norton AntiVirus version 2011 Description The issue arises from improper interaction with the Microsoft Help and Support Center's processing of hcp:// URLs, allowing remote attackers to execute arbitrary code. This occurs even when th...

PT-2012-1301

Name of the Vulnerable Software and Affected Versions McAfee VirusScan Enterprise versions 8.5i through 8.7i Description The issue arises from improper interaction with the Microsoft Help and Support Center's processing of hcp:// URLs. This makes it easier for remote attackers to execute arbitrar...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in IBM Lotus Domino 7.x and 8.x before 8.5.4 allow remote attackers to inject arbitrary web script or HTML via 1 a URL accessed during use of the Mail template in the WebMail UI or 2 a URL accessed during use of Domino Help through the Domino HTTP...

CVE-2012-3302

CVE-2012-3302 = multiple XSS vulnerabilities in IBM Lotus Domino 7.x–8.x (pre-8.5.4). Exploitation is via crafted URLs used in the WebMail UI Mail template or in Domino Help through the Domino HTTP server. The issue arises from cross-site scripting vectors (data: / vbscript: / similar URI schemes...

CVE-2012-3302: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in IBM Lotus Domino 7.x and 8.x before 8.5.4 allow remote attackers to inject arbitrary web script or HTML via 1 a URL accessed during use of the Mail template in the WebMail UI or 2 a URL accessed during use of Domino Help through the Domino HTTP...

PT-2012-4637

Name of the Vulnerable Software and Affected Versions IBM Lotus Domino versions 7.x through 8.x before 8.5.4 Description The issue allows remote attackers to inject arbitrary web script or HTML via specific URLs, including those accessed during use of the Mail template in the WebMail UI or Domino...

PT-2012-1072 · Gnu +3 · Gimp +3

Name of the Vulnerable Software and Affected Versions: gimp-libs version 2.6.9 gimp-devel-tools version 2.6.9 gimp-help-browser version 2.6.9 gimp-devel version 2.6.9 gimp-debuginfo version 2.6.9 gimp version 2.6.9 gimp version 2.8.x and earlier Description: The issue concerns multiple...

PT-2012-4632

Name of the Vulnerable Software and Affected Versions IBM Power Hardware Management Console HMC versions 7R7.1.0 through 7R7.1.0 before SP4 IBM Power Hardware Management Console HMC versions 7R7.2.0 through 7R7.2.0 before SP2 IBM Power Hardware Management Console HMC version 7R7.3.0 Description A...

CVE-2012-3296: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Help link in the login panel in IBM Power Hardware Management Console HMC 7R7.1.0 before SP4, 7R7.2.0 before SP2, and 7R7.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

typo3 -- Multiple vulernabilities in TYPO3 Core

Typo Security Team reports: It has been discovered that TYPO3 Core is vulnerable to Cross-Site Scripting, Information Disclosure, Insecure Unserialize leading to Arbitrary Code Execution. TYPO3 Backend Help System - Due to a missing signature HMAC for a parameter in the viewhelp.php file, an...

Several Vulnerabilities in TYPO3 Core

It has been discovered that TYPO3 Core is vulnerable to Cross-Site Scripting, Information Disclosure, Insecure Unserialize leading to Arbitrary Code Execution Component Type: TYPO3 Core Affected Versions: 4.5.0 up to 4.5.18, 4.6.0 up to 4.6.11, 4.7.0 up to 4.7.3 and development releases of the 6....

Wiki Web Help - 'configpath' Remote File Inclusion

source: https://www.securityfocus.com/bid/55387/info Wiki Web Help is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue could allow an attacker to compromise the application and the underlying system; other attacks ar...

Wiki Web Help - configpath Remote File Inclusion

Wiki Web Help - configpath Remote File Inclusion source: https://www.securityfocus.com/bid/55387/info Wiki Web Help is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue could allow an attacker to compromise the...

Scientific Linux Security Update : curl on SL5.x i386/x86_64

Wesley Miaw discovered that when deflate compression was used, libcurl could call the registered write callback function with data exceeding the documented limit. A malicious server could use this flaw to crash an application using libcurl or, potentially, execute arbitrary code. Note: This issue...

CVE-2012-0186

Directory traversal vulnerability in the Eclipse Help component in IBM Lotus Expeditor 6.1.x and 6.2.x before 6.2 FP5+Security Pack allows remote attackers to discover the locations of files via a crafted URL...

CVE-2012-0186

Directory traversal vulnerability in the Eclipse Help component in IBM Lotus Expeditor 6.1.x and 6.2.x before 6.2 FP5+Security Pack allows remote attackers to discover the locations of files via a crafted URL...

PT-2012-2384

Name of the Vulnerable Software and Affected Versions IBM Lotus Expeditor versions 6.1.x through 6.2.x before 6.2 FP5+Security Pack Description The issue allows remote attackers to discover the locations of files via a crafted URL, due to a directory traversal vulnerability in the Eclipse Help...

CVE-2012-0186: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Eclipse Help component in IBM Lotus Expeditor 6.1.x and 6.2.x before 6.2 FP5+Security Pack allows remote attackers to discover the locations of files via a crafted URL...

CVE-2012-2159

Open redirect vulnerability in IBM Eclipse Help System IEHS, as used in IBM Security AppScan Source 7.x and 8.x before 8.6 and IBM SPSS Data Collection Developer Library 6.0 and 6.0.1, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified...