Code injection

The bookmarklet pop-up in the Bookmarks component in IBM Lotus Connections 2.5.x before 2.5.0.2 does not properly follow the "force SSL" setting, which might make it easier for remote attackers to obtain the cleartext of network communication by sniffing the network, or spoof arbitrary servers vi...

Design/Logic Flaw

The Top Updates implementation in the Homepage component in IBM Lotus Connections 2.5.x before 2.5.0.2, when "forced SSL" is enabled, uses http for links, which has unspecified impact and remote attack vectors...

Open redirect

Open redirect vulnerability in the Mobile component in IBM Lotus Connections 2.5.x before 2.5.0.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, related to "mobile edit actions," aka SPR ASRE83PPVH...

CVE-2010-2277

Multiple cross-site scripting XSS vulnerabilities in IBM Lotus Connections 2.5.x before 2.5.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 create or 2 edit form in the Communities component, the 3 verbiage field in the Bookmarks component, or 4 unspecified vectors...

CVE-2010-2278

The vulnerability CVE-2010-2278 affects IBM Lotus Connections 2.5.x prior to 2.5.0.2, where the bookmarklet pop-up in the Bookmarks component does not properly enforce the force SSL setting. This could allow remote attackers to sniff or MITM network traffic or spoof arbitrary servers. Impact is p...

CVE-2010-2280

CVE-2010-2280 describes an open redirect vulnerability in the Mobile component of IBM Lotus Connections 2.5.x when not updated to 2.5.0.2 . The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attempts via unspecified vectors, related to the module’s “mo...

CVE-2010-2278

The bookmarklet pop-up in the Bookmarks component in IBM Lotus Connections 2.5.x before 2.5.0.2 does not properly follow the "force SSL" setting, which might make it easier for remote attackers to obtain the cleartext of network communication by sniffing the network, or spoof arbitrary servers vi...

CVE-2010-2279

The CVE-2010-2279 entry documents a flaw in IBM Lotus Connections 2.5.x before 2.5.0.2 where the Top Updates implementation in the Homepage component uses http links when forced SSL is enabled. The underlying impact and exploitation are described as unspecified in the sources. The Red Hat, NVD, a...

CVE-2010-2277

CVE-2010-2277 affects IBM Lotus Connections 2.5.x before 2.5.0.2. The vulnerability involves multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via (1) the create or (2) edit form in the Communities component, (3) the verbiage field in the...

CVE-2010-2280

Open redirect vulnerability in the Mobile component in IBM Lotus Connections 2.5.x before 2.5.0.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, related to "mobile edit actions," aka SPR ASRE83PPVH...

CVE-2010-2279

The Top Updates implementation in the Homepage component in IBM Lotus Connections 2.5.x before 2.5.0.2, when "forced SSL" is enabled, uses http for links, which has unspecified impact and remote attack vectors...

CVE-2010-1408

WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to bypass intended restrictions on outbound connections to "non-default TCP ports" via a crafted port number, related to an "integer truncation issue." NOTE: this...

Integer overflow

WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to bypass intended restrictions on outbound connections to "non-default TCP ports" via a crafted port number, related to an "integer truncation issue." NOTE: this...

CVE-2010-1408

WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to bypass intended restrictions on outbound connections to "non-default TCP ports" via a crafted port number, related to an "integer truncation issue." NOTE: this...

GLSA-201006-12 : Fetchmail: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201006-12 Fetchmail: Multiple vulnerabilities Multiple vulnerabilities have been reported in Fetchmail: The sdump function might trigger a heap-based buffer overflow during the escaping of non-printable characters with the high bi...

[SECURITY] Fedora 12 Update: libprelude-0.9.24.1-2.fc12

Libprelude is a library that guarantees secure connections between all sensors and the Prelude Manager. Libprelude provides an Application Programming Interface API for the communication with Prelude sub-systems, it supplies the necessary functionality for generating and emitting IDMEF events wit...

Family Connections 2.2.3 Multiple SQL Injection Vulnerabilities

Family Connections is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabiliti...

Family Connections 2.2.3 Multiple Remote Vulnerabilities

Family Connections 2.2.3 Multiple Remote Vulnerabilities Name Family Connections Vendor http://www.familycms.com Versions Affected 2.2.3 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-10-05 X. INDEX I. ABOUT THE...

Family Connections 2.2.3 SQL / SNMP Injection

Family Connections 2.2.3 Multiple Remote Vulnerabilities Name Family Connections Vendor http://www.familycms.com Versions Affected 2.2.3 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-10-05 X. INDEX I. ABOUT THE...

Family Connections 2.2.3 Multiple Remote Vulnerabilities

Exploit for php platform in category web applications ======================================================== Family Connections 2.2.3 Multiple Remote Vulnerabilities ======================================================== Family Connections 2.2.3 Multiple Remote Vulnerabilities Name Family...