304 matches found
CVE-2004-2729
Inetd32 Administration Tool of Hummingbird Connectivity 7.1 and 9.0 allows local users to execute arbitrary code by changing the program for handling incoming connections...
Hummingbird Connectivity 10 SP5 LPD Buffer Overflow
This module exploits a stack buffer overflow in Hummingbird Connectivity 10 LPD Daemon. This module has only been tested against Hummingbird Exceed v10 with SP5. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...
Cross site scripting
Cross-site scripting XSS vulnerability in the file manager utility in Hummingbird Collaboration aka Hummingbird Enterprise Collaboration 5.21 and earlier allows remote attackers to inject arbitrary web script or HTML in an uploaded page, which is published without a check for hostile scripting...
Design/Logic Flaw
Hummingbird Collaboration aka Hummingbird Enterprise Collaboration 5.21 and earlier allows remote attackers to obtain sensitive information intranet IP addresses and enumerations of valid parameter values via a direct request to hc, which reveals the information in an error message or a cookie...
CVE-2006-0173
Hummingbird Collaboration aka Hummingbird Enterprise Collaboration 5.21 and earlier allows remote attackers to misrepresent the type and name of a file via modified docext and id parameters, which might trick a user into downloading dangerous or unexpected content...
CVE-2006-0174
Hummingbird Collaboration aka Hummingbird Enterprise Collaboration 5.21 and earlier allows remote attackers to obtain sensitive information intranet IP addresses and enumerations of valid parameter values via a direct request to hc, which reveals the information in an error message or a cookie...
CVE-2006-0172
Cross-site scripting XSS vulnerability in the file manager utility in Hummingbird Collaboration aka Hummingbird Enterprise Collaboration 5.21 and earlier allows remote attackers to inject arbitrary web script or HTML in an uploaded page, which is published without a check for hostile scripting...
CVE-2006-0172
The CVE-2006-0172 entry describes a Cross-site Scripting (XSS) vulnerability in the file manager utility of Hummingbird Collaboration (Hummingbird Enterprise Collaboration) 5.21 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML into an uploaded page, which is p...
CVE-2006-0173
Hummingbird Collaboration (Hummingbird Enterprise Collaboration)
CVE-2006-0174
Vulnerability CVE-2006-0174 affects Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier. A direct request to hc can cause information disclosure: intranet IP addresses and enumerations of valid parameter values are exposed, typically in an error message or a cook...
CVE-2006-0172
Cross-site scripting XSS vulnerability in the file manager utility in Hummingbird Collaboration aka Hummingbird Enterprise Collaboration 5.21 and earlier allows remote attackers to inject arbitrary web script or HTML in an uploaded page, which is published without a check for hostile scripting...
CVE-2006-0173
Hummingbird Collaboration aka Hummingbird Enterprise Collaboration 5.21 and earlier allows remote attackers to misrepresent the type and name of a file via modified docext and id parameters, which might trick a user into downloading dangerous or unexpected content...
CVE-2006-0174
Hummingbird Collaboration aka Hummingbird Enterprise Collaboration 5.21 and earlier allows remote attackers to obtain sensitive information intranet IP addresses and enumerations of valid parameter values via a direct request to hc, which reveals the information in an error message or a cookie...
Hummingbird Collaboration - Crafted URL File Property Obscuration Download
Hummingbird Collaboration - Crafted URL File Property Obscuration Download source: https://www.securityfocus.com/bid/16195/info Hummingbird Enterprise Collaboration is prone to multiple vulnerabilities. The following specific issues were identified: The application reportedly allows remote...
Hummingbird Collaboration - Application Cookie Internal Network Information Disclosure
Hummingbird Collaboration - Application Cookie Internal Network Information Disclosure source: https://www.securityfocus.com/bid/16195/info Hummingbird Enterprise Collaboration is prone to multiple vulnerabilities. The following specific issues were identified: The application reportedly allows...
Hummingbird Collaboration - Crafted URL File Property Obscuration Download
source: https://www.securityfocus.com/bid/16195/info Hummingbird Enterprise Collaboration is prone to multiple vulnerabilities. The following specific issues were identified: The application reportedly allows remote attackers to upload arbitrary HTML files and script code to the application...
Hummingbird Collaboration - Application Cookie Internal Network Information Disclosure
source: https://www.securityfocus.com/bid/16195/info Hummingbird Enterprise Collaboration is prone to multiple vulnerabilities. The following specific issues were identified: The application reportedly allows remote attackers to upload arbitrary HTML files and script code to the application...
Hummingbird InetD LPD buffer overflow
Added: 11/29/2005 CVE: CVE-2005-1815 BID: 13788 OSVDB: 16957 Background Hummingbird InetD implements common UNIX services on Windows platforms. Problem The Hummingbird InetD LPD service is affected by a buffer overflow which allows remote command execution. Resolution Apply the patch. References...
Hummingbird InetD LPD buffer overflow
Added: 11/29/2005 CVE: CVE-2005-1815 BID: 13788 OSVDB: 16957 Background Hummingbird InetD implements common UNIX services on Windows platforms. Problem The Hummingbird InetD LPD service is affected by a buffer overflow which allows remote command execution. Resolution Apply the patch. References...
Hummingbird InetD LPD buffer overflow
Added: 11/29/2005 CVE: CVE-2005-1815 BID: 13788 OSVDB: 16957 Background Hummingbird InetD implements common UNIX services on Windows platforms. Problem The Hummingbird InetD LPD service is affected by a buffer overflow which allows remote command execution. Resolution Apply the patch. References...