Design/Logic Flaw

The WebSEAL component in IBM Security Access Manager for Web 7.x before 7.0.0-ISS-WGA-IF0009 and 8.x before 8.0.0-ISS-WGA-FP0005, when e-community SSO is enabled, allows remote attackers to cause a denial of service component hang via unspecified vectors...

CVE-2014-4823

The administration console in IBM Security Access Manager for Web 7.x before 7.0.0-ISS-WGA-IF0009 and 8.x before 8.0.0-ISS-WGA-FP0005, and Security Access Manager for Mobile 8.x before 8.0.0-ISS-ISAM-FP0005, allows remote attackers to inject system commands via unspecified vectors...

CVE-2014-6079

Cross-site scripting XSS vulnerability in the Local Management Interface in IBM Security Access Manager for Web 7.x before 7.0.0-ISS-WGA-IF0009 and 8.x before 8.0.0-ISS-WGA-FP0005, and Security Access Manager for Mobile 8.x before 8.0.0-ISS-ISAM-FP0005, allows remote attackers to inject arbitrary...

CVE-2014-4823

CVE-2014-4823 affects IBM Security Access Manager for Web 7.x (before 7.0.0-ISS-WGA-IF0009) and 8.x (before 8.0.0-ISS-WGA-FP0005), plus Security Access Manager for Mobile 8.x (before 8.0.0-ISS-ISAM-FP0005). The administration console allows remote attackers to inject system commands via unspecifi...

CVE-2014-6079

CVE-2014-6079 is an XSS vulnerability in IBM Security Access Manager for Web Local Management Interface affecting IBM Security Access Manager for Web 7.x (before 7.0.0-ISS-WGA-IF0009) and 8.x (before 8.0.0-ISS-WGA-FP0005), and Security Access Manager for Mobile 8.x (before 8.0.0-ISS-ISAM-FP0005)....

CVE-2014-4809

CVE-2014-4809 affects the WebSEAL component of IBM Security Access Manager for Web when e-community single sign-on is enabled. The IBM Security Access Manager for Web WebSEAL could become unresponsive under certain conditions, potentially causing a denial of service (component hang) with remote a...

CVE-2014-4809

The WebSEAL component in IBM Security Access Manager for Web 7.x before 7.0.0-ISS-WGA-IF0009 and 8.x before 8.0.0-ISS-WGA-FP0005, when e-community SSO is enabled, allows remote attackers to cause a denial of service component hang via unspecified vectors...

WordPress Advanced Access Manager Plugin <= 2.8.2 - Admin User File Read/Write

Because of this vulnerability, attackers can write arbitrary content to arbitrary files. Solution Update the plugin...

WordPress Advanced Access Manager 2.8.2 File Write / Code Execution

WordPress Advanced Access Manager plugin version 2.8.2 suffers from arbitrary file write and code execution vulnerabilities. Details ================ Software: Advanced Access Manager Version: 2.8.2 Homepage: http://wordpress.org/plugins/advanced-access-manager/ Advisory report:...

WordPress Advanced Access Manager 2.8.2 File Write / Code Execution

Details ================ Software: Advanced Access Manager Version: 2.8.2 Homepage: http://wordpress.org/plugins/advanced-access-manager/ Advisory report:...

Oracle Access Manager Unspecified Vulnerability (credentialed check, April 2014 CPU)

Binary data oracleaccessmanagercve20142404win.nbin...

CVE-2014-4751

Cross-site scripting XSS vulnerability in IBM Security Access Manager for Mobile 8.0.0.0, 8.0.0.1, and 8.0.0.3 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Security Access Manager for Mobile 8.0.0.0, 8.0.0.1, and 8.0.0.3 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2014-4751

IBM Security Access Manager for Mobile versions 8.0.0.0, 8.0.0.1, and 8.0.0.3 are affected by CVE-2014-4751 (XSS). The vulnerability enables remote attackers to inject arbitrary web script or HTML via a crafted URL. Exploitation details are not provided in the connected documents beyond this desc...

CVE-2014-4751

Cross-site scripting XSS vulnerability in IBM Security Access Manager for Mobile 8.0.0.0, 8.0.0.1, and 8.0.0.3 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

IBM WebSphere Application Server 8.0 < Fix Pack 9 Multiple Vulnerabilities

IBM WebSphere Application Server 8.0 prior to Fix Pack 9 is running on the remote host. It is, therefore, affected by the following vulnerabilities : - A cross-site scripting flaw exists within the Administration Console, where user input is improperly validated. This could allow a remote attacke...

IBM Tivoli Access Manager Plugin Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16494/info Tivoli Access Manager Plugin for Web Servers is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit...

FTP Internet Access Manager <= 1.2 Command Execution Exploit

No description provided by source. !usr/bin/perl FTP Internet Access Manager Command Exploit ---------------------------------------------- Infam0us Gr0up - Securiti Research Info: infamous.2hell.com Vendor URL: www.softfolder.com/internetaccessmanager.html use IO::Socket; if @ARGV != 4 print \n...

Novell Access Manager 3 Identity Server IssueInstant Parameter Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/21921/info Access Manager Identity Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary scri...

Intel Corporation Shiva Access Manager 5.0 Solaris World Readable LDAP Password

No description provided by source. source: http://www.securityfocus.com/bid/1329/info The Shiva Access Manager is a solution for centralized remote access authentication, authorization, and accounting offered by Intel. It runs on Solaris and Windows NT. Shiva Access Manager is vulnerable to a...