938 matches found
kernel: panic in ib_cm:cm_work_handler
Race condition in the cmworkhandler function in the InfiniBand driver drivers/infiniband/core/cma.c in Linux kernel 2.6.x allows remote attackers to cause a denial of service panic by sending an InfiniBand request while other request handlers are still running, which triggers an invalid pointer...
PT-2011-2565
Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.6.x Description The issue is related to a race condition in the cm work handler function of the InfiniBand driver. This condition allows remote attackers to cause a denial of service by sending an InfiniBand request whi...
PT-2011-2831
Name of the Vulnerable Software and Affected Versions IBM FileNet P8 Content Manager CM versions 4.0.1 through 4.5.1 Description The issue allows remote attackers to gain privileges via unknown vectors. Recommendations For versions 4.0.1 through 4.5.1, update to a version outside of this range to...
CVE-2010-2896
CVE-2010-2896 affects IBM FileNet Content Manager (CM) versions 4.0.0, 4.0.1, 4.5.0, and 4.5.1 prior to FP4. The root cause is improper handling of the InheritParentPermissions setting during an upgrade from 3.x, which may allow an attacker to bypass intended folder permissions via unspecified ve...
CVE-2010-2896
IBM FileNet Content Manager CM 4.0.0, 4.0.1, 4.5.0, and 4.5.1 before FP4 does not properly manage the InheritParentPermissions setting during an upgrade from 3.x, which might allow attackers to bypass intended folder permissions via unspecified vectors...
CVE-2010-1041
The CVE-2010-1041 entry concerns IBM DB2 Content Manager (CM) Toolkit 8.3 before FP13 on z/OS and DB2 Information Integrator for Content 8.3 before FP13. The vulnerability is in the single sign-on Web Services implementation; the root cause is not specified in the available documents. Impact is d...
CVE-2010-1041: Undefined Security Weakness
Unspecified vulnerability in the single sign-on functionality in the Web Services implementation in IBM DB2 Content Manager CM Toolkit 8.3 before FP13 on z/OS and DB2 Information Integrator for Content 8.3 before FP13 has unknown impact and remote attack vectors...
http-methods NSE Script
Finds out what options are supported by an HTTP server by sending an OPTIONS request. Lists potentially risky methods. It tests those methods not mentioned in the OPTIONS headers individually and sees if they are implemented. Any output other than 501/405 suggests that the method is if not in the...
CVE-2003-1576
CVE-2003-1576 describes a buffer overflow in pamverifier within Change Manager (CM) 1.0 for Sun Management Center (SunMC) 3.0 on Solaris 8/9 SPARC. The vulnerability allows remote code execution via unspecified vectors. Affected components include pamverifier in CM 1.0 on Solaris SPARC. The issue...
CVE-2003-1576: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in pamverifier in Change Manager CM 1.0 for Sun Management Center SunMC 3.0 on Solaris 8 and 9 on the sparc platform allows remote attackers to execute arbitrary code via unspecified vectors...
Serena Dimensions CM cryptographic vulnerability
Server certificate is not validated by client...
Serena Dimensions CM Desktop Client does not validate the server SSL certificate
Application: Serena Dimensions CM Affected versions: 10.1 and later Vulnerability: man-in-the-middle attacks Problem type: remote Problem description: ==================== The client/server connection can be SSL encrypted by setting "-ssl" in the listener.dat. The problem is that the Desktop clie...
Baran CMS 1.0 Arbitrary ASP File Upload/DB/SQL/XSS/CM Vulns
No description provided by source. 0x01 Informations : Name : Baran Cms Version : 1.0 Personal site : http://www.baran-cms.ir $$ : 50$ Vul : Arbitrary ASP File Upload/DB/SQL/XSS/CM Credit : Aria-Security Team Website : http://Aria-Security.Net Contact : [email protected] 0x02 Arbitrary ASP...
Baran CMS 1.0 Arbitrary ASP File Upload/DB/SQL/XSS/CM Vulns
Exploit for unknown platform in category web applications =========================================================== Baran CMS 1.0 Arbitrary ASP File Upload/DB/SQL/XSS/CM Vulns =========================================================== 0x01 Informations : Name : Baran Cms Version : 1.0 Personal...
RankEm (DD/XSS/CM) Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ================================================== RankEm DD/XSS/CM Multiple Remote Vulnerabilities ================================================== --------------------------------------------------------- Portal Name: RankEm Download :...
CVE-2008-5709
CVE-2008-5709 affects Avaya Communication Manager (CM) web management interface. Affects CM versions 3.1 before 3.1.4 SP2, 4.0 before 4.0.3 SP1, and 5.0 before 5.0 SP3. Remote authenticated users can execute arbitrary code via unknown vectors in the (1) Set Static Routes and (2) Backup History co...
securedownload-xsscm.txt
--------------------------------------------------------- Portal Name: Secure Download Version : Alpha 0.2.1 Vendor : http://relative.nl/projects.php?subMnuItem=2 Author : PouyaServer , [email protected] Vulnerability : XSS,CM --------------------------------------------------------- XSS:...
prejobboard-cmsqlxss.txt
--------------------------------------------------------- Portal Name: Pre Job Board Vendor : http://www.preproject.com/ Author : PouyaServer , [email protected] Vulnerability : SQL,CM,XSS --------------------------------------------------------- SQL:...
phpjobwebsite-cmsqlxss.txt
--------------------------------------------------------- Portal Name: PHP JOBWEBSITE PRO Vendor : http://preproject.com Author : PouyaServer , [email protected] Vulnerability : CM,XSS,SQL --------------------------------------------------------- SQL:...
aspforum-cmsqlxss.txt
--------------------------------------------------------- Portal Name: ASP Forum Script Vendor : http://codetoad.com/demos/forum/ Author : PouyaServer , [email protected] Vulnerability : CM,XSS,SQL --------------------------------------------------------- SQL:...