CVE-2016-2076: Improper Authentication

Client Integration Plugin CIP in VMware vCenter Server 5.5 U3a, U3b, and U3c and 6.0 before U2; vCloud Director 5.5.5; and vRealize Automation Identity Appliance 6.2.4 before 6.2.4.1 mishandles session content, which allows remote attackers to hijack sessions via a crafted web site...

PT-2016-5003

Name of the Vulnerable Software and Affected Versions VMware vCenter Server versions 5.5 U3a through 5.5 U3c and 6.0 before U2 vCloud Director version 5.5.5 vRealize Automation Identity Appliance version 6.2.4 Description The issue is related to the mishandling of session content by the Client...

VMWare Releases Security Updates

VMware has released security updates to address a vulnerability in vCenter Server, vCloud Director, vRealize Automation Identity Appliance, and the Client Integration Plugin. Exploitation of this vulnerability may allow a remote attacker to obtain sensitive information. Users and administrators a...

PT-2014-4357

Name of the Vulnerable Software and Affected Versions VideoWhisper Live Streaming Integration plugin versions prior to 4.29.5 Description The issue allows remote attackers to read or delete arbitrary files due to directory traversal vulnerabilities in the VideoWhisper Live Streaming Integration...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ls/htmlchat.php in the VideoWhisper Live Streaming Integration plugin 4.25.3 and possibly earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 name or 2 message parameter. NOTE: some of these details are...

CVE-2011-5179

Cross-site scripting XSS vulnerability in skysa-official/skysa.php in Skysa App Bar Integration plugin, possibly before 1.04, for WordPress allows remote attackers to inject arbitrary web script or HTML via the submit parameter...

CVE-2007-4401

CVE-2007-4401 describes multiple CRLF injection vulnerabilities in the Advanced mIRC Integration Plugin (and possibly other unspecified mIRC scripts) that allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences embedded in the name of an mp3 file. The linked sour...

CVE-2007-4401: Undefined Security Weakness

Multiple CRLF injection vulnerabilities in the Advanced mIRC Integration Plugin and possibly other unspecified scripts in mIRC allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file...