Code injection

Unspecified vulnerability in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 has unknown impact and remote attack vectors related to the "server error response."...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Design/Logic Flaw

IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 does not properly handle exceptions, which has unspecified impact and remote attack vectors...

Code injection

The Login component in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote authenticated users to cause a denial of service license consumption by trying to login to DOORS Web Access with a new user account that has never been used for a DOORS login...

CVE-2011-2682

The Login component in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote authenticated users to cause a denial of service license consumption by trying to login to DOORS Web Access with a new user account that has never been used for a DOORS login...

CVE-2011-2679

Cross-site scripting XSS vulnerability in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-2680

Unspecified vulnerability in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 has unknown impact and remote attack vectors related to the "server error response."...

CVE-2011-2679

CVE-2011-2679 describes a cross-site scripting (XSS) flaw in IBM Rational DOORS Web Access 1.4.x prior to 1.4.0.4. The vulnerability allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, implying user-interaction or trust boundaries could be leveraged to execute ...

CVE-2011-2682

CVE-2011-2682 : The Login component in IBM Rational DOORS Web Access 1.4.x prior to 1.4.0.4 allows remote authenticated users to cause a denial of service via license consumption by logging with a new user account that has never been used to log in before. This is a confirmed issue with affected ...

CVE-2011-2681

IBM Rational DOORS Web Access 1.4.x prior to 1.4.0.4 is affected by an issue where exceptions are not handled properly, described as having unspecified impact and remote attack vectors. The root cause is improper exception handling in the affected component. Remediation is to upgrade to 1.4.0.4 o...

CVE-2011-2681

IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 does not properly handle exceptions, which has unspecified impact and remote attack vectors...

CVE-2011-2680

CVE-2011-2680 affects IBM Rational DOORS Web Access 1.4.x before 1.4.0.4. The description is explicit that impact is unknown and that there are remote attack vectors related to the server error response. The NVD entry assigns a high base score (10.0) with network attack vector, no authentication,...

Report: Reused, Third Party Code Major Sources of Insecurity

A new report out from security testing firm Veracode suggests that reused and third party code is a big source of application insecurity. Application security is a sore spot for many organizations, as attackers shift the battlefield from operating system and network attacks to application specifi...

CVE-2009-0874

Multiple unspecified vulnerabilities in the Doors subsystem in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv94, allow local users to cause a denial of service process hang, or possibly bypass file permissions or gain kernel-context privileges, via vectors including ones relat...

Design/Logic Flaw

Multiple unspecified vulnerabilities in the Doors subsystem in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv94, allow local users to cause a denial of service process hang, or possibly bypass file permissions or gain kernel-context privileges, via vectors including ones relat...

Race condition

Race condition in the Doors subsystem in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv94, allows local users to cause a denial of service process hang, or possibly bypass file permissions or gain kernel-context privileges, via vectors involving the time at which control is...

CVE-2009-0874

Multiple unspecified vulnerabilities in the Doors subsystem in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv94, allow local users to cause a denial of service process hang, or possibly bypass file permissions or gain kernel-context privileges, via vectors including ones relat...

CVE-2009-0875

Race condition in the Doors subsystem in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv94, allows local users to cause a denial of service process hang, or possibly bypass file permissions or gain kernel-context privileges, via vectors involving the time at which control is...

Security Best Practice: Familiarize Yourself with the General HTTP Worm Catcher

A worm is a self-replicating malware, which propagates by actively sending itself to new machines. There are worms that propagate by using security vulnerabilities in HTTP servers or clients. Some worms are able to open back doors, launch Trojans, stop security applications and destroy computer...