CVE-2013-0939

EMC Documentum Webtop before 6.7 SP2, Documentum WDK before 6.7 SP2, Documentum Taskspace before 6.7 SP2, and Documentum Records Manager before 6.7 SP2 allow remote attackers to obtain sensitive information via vectors involving cross-origin frame navigation, related to a "Cross Frame Scripting"...

CVE-2013-0939

EMC Documentum CVE-2013-0939 affects Webtop, WDK, Taskspace, and Records Manager prior to 6.7 SP2. The issue is a Cross Frame Scripting vulnerability allowing remote attackers to obtain sensitive information via cross-origin frame navigation. Affected products include Webtop, WDK, Taskspace, and ...

ESA-2013-021: EMC Documentum Multiple Vulnerabilities

ESA-2013-021.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-021: EMC Documentum Multiple Vulnerabilities EMC Identifier: ESA-2013-021 CVE Identifier: CVE-2013-0937, CVE-2013-0938, CVE-2013-0939 Severity Rating: See below for individual scores Affected products: • EMC Documentum Webtop...

CentOS Update for xorg-x11-server-common CESA-2012:0939 centos6

Check for the Version of xorg-x11-server-common OpenVAS Vulnerability Test CentOS Update for xorg-x11-server-common CESA-2012:0939 centos6 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

TestLink SQL Injection Vulnerabilities

Exploit for php platform in category web applications ------------------ Information ------------------ Name: SQL Injection Vulnerabilities in TestLink Software tested: TL v1.8.5b & checked in v1.9.3 prior version may be affected Vendor Homepage: http://www.teamst.org Vendor Notification: 27...

TestLink 1.9.3 SQL Injection

------------------ Information ------------------ Name: SQL Injection Vulnerabilities in TestLink Software tested: TL v1.8.5b & checked in v1.9.3 prior version may be affected Vendor Homepage: http://www.teamst.org Vendor Notification: 27 January 2012 Vendor Patch: 4 February 2012 Public...

Fedora Update for moodle FEDORA-2012-0939

Check for the Version of moodle OpenVAS Vulnerability Test Fedora Update for moodle FEDORA-2012-0939 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

CVE-2011-0939

Unspecified vulnerability in Cisco IOS 12.4, 15.0, and 15.1, and IOS XE 2.5.x through 3.2.x, allows remote attackers to cause a denial of service device reload via a crafted SIP message, aka Bug ID CSCth03022...

CVE-2010-0939

The CVE-2010-0939 issue affects Visialis ABB Forum 1.1. It is caused by insufficient access control that allows remote attackers to access and download the database file fpdb/abb.mdb via a direct web request, exposing sensitive information stored under the web root. The available sources confirm ...

CVE-2009-0939

Tor before 0.2.0.34 treats incomplete IPv4 addresses as valid, which has unknown impact and attack vectors related to "Spec conformance," as demonstrated using 192.168.0...

DEBIAN-CVE-2009-0939

Tor before 0.2.0.34 treats incomplete IPv4 addresses as valid, which has unknown impact and attack vectors related to "Spec conformance," as demonstrated using 192.168.0...

CVE-2009-0939

Tor before 0.2.0.34 treats incomplete IPv4 addresses as valid, which has unknown impact and attack vectors related to "Spec conformance," as demonstrated using 192.168.0...

CVE-2009-0939

CVE-2009-0939 affects Tor before 0.2.0.34. The issue: incomplete IPv4 addresses are treated as valid, related to spec conformance, with unknown impact and attack vectors (demonstrated using 192.168.0). The Gentoo/GLSA entries and Red Hat references confirm the vulnerability class; the remediation...

CVE-2008-0939

The WP Photo Album (WPPA) WordPress plugin (before 1.1) contains multiple SQL injection flaws in wppa.php. The issues arise from unsafely handling the photo parameter (wppa_photo_name) and the album parameter (wppa_album_name) in index.php, allowing remote attackers to execute arbitrary SQL comma...

kernel security update

CentOS Errata and Security Advisory CESA-2007:0939 Updated kernel packages that fix various security issues in the Red Hat Enterprise Linux 4 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel is the cor...

MS07-018: Vulnerabilities in Microsoft Content Management Server Could Allow Remote Code Execution (925939)

The remote host contains a version of the Microsoft Content Management Server that is vulnerable to a security flaw that could allow a remote user to execute arbitrary code by sending a specially malformed HTTP request. C Tenable Network Security, Inc. include"compat.inc"; if description...

CVE-2007-0939

CVE-2007-0939 is an XSS vulnerability in Microsoft Content Management Server (MCMS) 2001 SP1 and 2002 SP2. The issue arises from MCMS not fully validating input in HTML redirect queries, allowing remote attackers to inject script or HTML that runs in a user’s browser. Exploitation requires user i...

CVE-2006-0939

The CVE-2006-0939 entry describes a SQL injection vulnerability in DCI-Taskeen 1.03. An attacker can manipulate the database by supplying crafted values for (1) id or (2) action to basket.php, or (3) id or (4) page to cat.php, potentially executing arbitrary SQL commands. Affected product/version...

CVE-2004-0939

CVE-2004-0939 affects Neoteris Instant Virtual Extranet (IVE) 3.x and 4.x when LDAP or NT domain authentication is enabled. The flaw is an unauthenticated brute-force risk caused by not limiting the number of password attempts during changepassword.cgi, allowing remote password guessing. Public s...

CVE-2004-0939

changepassword.cgi in Neoteris Instant Virtual Extranet IVE 3.x and 4.x, with LDAP authentication or NT domain authentication enabled, does not limit the number of times a bad password can be entered, which allows remote attackers to guess passwords via a brute force attack...