EUVD-2010-4560

Malware in sbrugna...

EUVD-2010-4558

Malware in sbrugna...

EUVD-2011-4391

Malware in sbrugna...

EUVD-2010-4561

Malware in sbrugna...

EUVD-2010-4557

Malware in sbrugna...

EUVD-2010-4556

Malware in sbrugna...

CVE-2010-4595

The Connection Manager in IBM Lotus Mobile Connect before 6.1.4 disables the http.device.stanza blacklisting functionality for HTTP Access Services HTTP-AS, which allows remote attackers to bypass intended access restrictions via an HTTP request that contains a disallowed User-Agent header...

CVE-2010-4590

Cross-site scripting XSS vulnerability in HTTP Access Services HTTP-AS in the Connection Manager in IBM Lotus Mobile Connect LMC before 6.1.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Lotus Mobile Connect LMC 6.1.4 allows remote attackers to inject arbitrary web script or HTML via vectors related to a hidden redirect URL...

IBM Lotus Mobile Connect重定向URL跨站脚本漏洞

IBM Lotus Mobile Connect是一款通信软件平台，可为企业提供了一个移动虚拟私人网络。 提交给HTTP访问服务重定向URL的输入在返回用户之前缺少过滤，可被利用执行在用户浏览器上任意HTML和脚本代码。 IBM Lotus Mobile Connect 6.x 厂商解决方案 IBM Lotus Mobile Connect 6.1.4 build 20110909已经修复此漏洞，建议用户下载使用： http://www-947.ibm.com/support/entry/portal/Overview/Software/Lotus/LotusMobileConnect...

CVE-2010-4595

The Connection Manager in IBM Lotus Mobile Connect before 6.1.4 disables the http.device.stanza blacklisting functionality for HTTP Access Services HTTP-AS, which allows remote attackers to bypass intended access restrictions via an HTTP request that contains a disallowed User-Agent header...

CVE-2010-4591

The Connection Manager in IBM Lotus Mobile Connect LMC before 6.1.4, when HTTP Access Services HTTP-AS is enabled, does not delete LTPA tokens in response to use of the iNotes Logoff button, which might allow physically proximate attackers to obtain access via an unattended client, related to a...

CVE-2010-4592

The Mobile Network Connections functionality in the Connection Manager in IBM Lotus Mobile Connect before 6.1.4, when HTTP Access Services HTTP-AS is enabled, does not properly handle failed attempts at establishing HTTP-TCP sessions, which allows remote attackers to cause a denial of service...

Design/Logic Flaw

The Connection Manager in IBM Lotus Mobile Connect LMC before 6.1.4, when HTTP Access Services HTTP-AS is enabled, does not delete LTPA tokens in response to use of the iNotes Logoff button, which might allow physically proximate attackers to obtain access via an unattended client, related to a...

Cross site scripting

Cross-site scripting XSS vulnerability in HTTP Access Services HTTP-AS in the Connection Manager in IBM Lotus Mobile Connect LMC before 6.1.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Design/Logic Flaw

The Connection Manager in IBM Lotus Mobile Connect before 6.1.4 does not properly maintain a certain reference count, which allows remote authenticated users to cause a denial of service IP address exhaustion by making invalid attempts to establish sessions with the same VPN ID from multiple...

CVE-2010-4591

The Connection Manager in IBM Lotus Mobile Connect LMC before 6.1.4, when HTTP Access Services HTTP-AS is enabled, does not delete LTPA tokens in response to use of the iNotes Logoff button, which might allow physically proximate attackers to obtain access via an unattended client, related to a...

CVE-2010-4594

CVE-2010-4594 affects IBM Lotus Mobile Connect (Connection Manager) before 6.1.4 when HTTP Access Services is enabled. The vulnerability arises from improper handling of TCP connection requests, allowing remote attackers to trigger queue size delta errors that cause memory consumption and an HTTP...

CVE-2010-4590

CVE-2010-4590 describes a Cross-site scripting (XSS) vulnerability in the HTTP Access Services (HTTP-AS) component of IBM Lotus Mobile Connect (LMC) prior to version 6.1.4. The flaw affects the Connection Manager and allows remote attackers to inject arbitrary web script or HTML via unspecified v...

CVE-2010-4593

The CVE-2010-4593 issue affects IBM Lotus Mobile Connect connections manager prior to version 6.1.4. It stems from improper maintenance of a reference count, enabling remote authenticated users to trigger a denial of service (IP address exhaustion) by issuing invalid session attempts using the sa...