CVE-2011-3577

CVE-2011-3577 affects IBM WebSphere Commerce: versions 6.x up to 6.0.0.11 and 7.x up to 7.0.0.3 do not properly implement Activity Token authentication for Web Services. The underlying cause is an improper authentication mechanism, but the connected documents do not specify exact technical detail...

ME Central Desktop v7.x - Multiple Persistent Vulnerabilities

Document Title: =============== ME Central Desktop v7.x - Multiple Persistent Vulnerabilities Release Date: ============= 2011-09-06 Vulnerability Laboratory ID VL-ID: ==================================== 36 Product & Service Introduction: =============================== Desktop Central is a...

ME Central Desktop v7.x - Multiple Persistent Vulnerabilities

Document Title: =============== ME Central Desktop v7.x - Multiple Persistent Vulnerabilities Release Date: ============= 2011-09-06 Vulnerability Laboratory ID VL-ID: ==================================== 36 Product & Service Introduction: =============================== Desktop Central is a...

Fedora 16 : drupal7-7.6-1.fc16 (2011-10020)

Remember to log in as the admin user prior to RPM upgrade to perform DB upgrade. - Advisory ID: DRUPAL-SA-CORE-2011-003 - Project: Drupal core 1 - Version: 7.x - Date: 2011-July-27 - Security risk: Less critical 2 - Exploitable from: Remote - Vulnerability: Access bypass -------- DESCRIPTION Note...

SA-CONTRIB-2011-035 Forward module - Open redirect

The Forward module enables you to add a "forward this page" link to each node. The link takes regular site visitors to a form where they can generate an email to a friend. The module doesn't check to ensure that the page being forwarded refers to an internal path. This could allow someone to hard...

Fedora 14 : drupal7-7.6-1.fc14 (2011-9893)

Remember to log in as the admin user prior to RPM upgrade to perform DB upgrade. - Advisory ID: DRUPAL-SA-CORE-2011-003 - Project: Drupal core 1 - Version: 7.x - Date: 2011-July-27 - Security risk: Less critical 2 - Exploitable from: Remote - Vulnerability: Access bypass -------- DESCRIPTION Note...

EMC Documentum eRoom Indexing Server Hummingbird Client Connector Buffer Overflow

The Hummingbird Client Connector, bundled with EMC Documentum eRoom's Indexing Server, has a buffer overflow vulnerability. Making an unspecified request can result in a stack-based buffer overflow. A remote, unauthenticated attacker could exploit this to execute arbitrary code. Documentum eRoom...

CVE-2011-2687

Drupal 7.x before 7.3 allows remote attackers to bypass intended nodeaccess restrictions via vectors related to a listing that shows nodes but lacks a JOIN clause for the node table...

Design/Logic Flaw

Drupal 7.x before 7.3 allows remote attackers to bypass intended nodeaccess restrictions via vectors related to a listing that shows nodes but lacks a JOIN clause for the node table...

CVE-2011-2687

Drupal 7.x before 7.3 allows remote attackers to bypass intended nodeaccess restrictions via vectors related to a listing that shows nodes but lacks a JOIN clause for the node table...

CVE-2011-2687

Removed by vendor...

SA-CORE-2011-003 - Drupal core - Access bypass

CVE: CVE-2011-2726 Access bypass in private file fields on comments. Drupal 7 contains two new features: the ability to attach File upload fields to any entity type in the system and the ability to point individual File upload fields to the private file directory. If a Drupal site is using these...

CVE-2011-1741

Stack-based buffer overflow in ftserver.exe in the OpenText Hummingbird Client Connector, as used in the Indexing Server in EMC Documentum eRoom 7.x before 7.4.3.f and other products, allows remote attackers to execute arbitrary code by sending a crafted message over TCP...

Lotus Domino SMTP router, EMAIL server and client DoS

Exploit for multiple platform in category dos / poc Exploit Title: Lotus Domino SMTP router, EMAIL server and client DoS - all 3 may crash Date: July 16, 2011 Author: None - looks like a malformed Kerio generated calendar invitation was the reason this was discovered...

Lotus Domino SMTP Router & Email Server and Client - Denial of Service

Exploit Title: Lotus Domino SMTP router, EMAIL server and client DoS - all 3 may crash Date: July 16, 2011 Author: None - looks like a malformed Kerio generated calendar invitation was the reason this was discovered -http://forums.kerio.com/index.php?t=msg&th=19863&start=0 Software Link: none -...

CVE-2011-2754

Cross-site scripting XSS vulnerability in the PageBuilder2 aka Page Builder theme in IBM WebSphere Portal 7.x before 7.0.0.1 CF006, as used in IBM Web Content Manager WCM and other products, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Fedora 13 : drupal-6.22-1.fc13 (2011-7546)

Advisory ID: DRUPAL-SA-CORE-2011-001 - Project: Drupal core 1 - Version: 6.x, 7.x - Date: 2011-May-25 - Security risk: Critical 2 - Exploitable from: Remote - Vulnerability: Access bypass, Cross Site Scripting -------- DESCRIPTION Note that Tenable Network Security has extracted the preceding...

Fedora 15 : drupal7-7.2-1.fc15 (2011-7575)

Advisory ID: DRUPAL-SA-CORE-2011-001 - Project: Drupal core 1 - Version: 6.x, 7.x - Date: 2011-May-25 - Security risk: Critical 2 - Exploitable from: Remote - Vulnerability: Access bypass, Cross Site Scripting -------- DESCRIPTION Note that Tenable Network Security has extracted the preceding...

InduSoft Web Studio Directory Traversal Vulnerability

This host is installed with Indusoft Web Studio and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: secpodindusoftwebstudiodirtravvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ InduSoft Web Studio Directory Traversal Vulnerability Authors: Madhuri D Copyright: Copyrig...

SA-CORE-2011-001 - Drupal core - Multiple vulnerabilities

CVE: CVE-2011-2687 Multiple vulnerabilities and weaknesses were discovered in Drupal. Reflected cross site scripting vulnerability in error handler A reflected cross site scripting vulnerability was discovered in Drupal's error handler. Drupal displays PHP errors in the messages area, and a...