2549 matches found
CVE-2013-5409
IBM Sterling B2B Integrator 5.2 and IBM Sterling File Gateway 2.2 are affected by SQL Injection. An authenticated remote attacker could send crafted SQL statements to various screens, enabling view/add/modify/delete data in back-end DB. For affected versions, remediation is available: apply Fix P...
CVE-2013-5407
IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 do not properly restrict use of FRAME elements, which allows remote authenticated users to bypass intended access restrictions or obtain sensitive information via a crafted web site, related to a "frame injection" issue...
CVE-2013-5411
IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote attackers to inject links and trigger unintended navigation or actions via unspecified vectors...
CVE-2013-3626
Directory traversal vulnerability in the Session Server in Attachmate Verastream Host Integrator VHI 6.0 through 7.5 SP 1 HF 1 allows remote attackers to upload and execute arbitrary files via a crafted message...
Directory traversal
Directory traversal vulnerability in the Session Server in Attachmate Verastream Host Integrator VHI 6.0 through 7.5 SP 1 HF 1 allows remote attackers to upload and execute arbitrary files via a crafted message...
CVE-2013-3626
Vulnerability CVE-2013-3626 affects Attachmate Verastream Host Integrator (VHI) Session Server. A directory traversal flaw in VHI 6.0 to 7.5 SP 1 HF 1 allows unauthenticated remote attackers to upload and execute arbitrary files via a crafted message, potentially gaining full server control. A ho...
CVE-2013-3626
Directory traversal vulnerability in the Session Server in Attachmate Verastream Host Integrator VHI 6.0 through 7.5 SP 1 HF 1 allows remote attackers to upload and execute arbitrary files via a crafted message...
Attachmate Verastream Host Integrator (VHI) allows arbitrary file upload and execution
Overview The Attachmate Verastream Host Integrator VHI is vulnerable to arbitrary file uploads and execution. Description CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' - CVE-2013-3626The Attachmate VHI Session Server, on all platforms, allows unauthenticated...
CVE-2013-0494
IBM Sterling B2B Integrator 5.0 and 5.1 allows remote attackers to cause a denial of service memory and CPU consumption via a crafted HTTP 1 Range or 2 Request-Range header...
Design/Logic Flaw
IBM Sterling B2B Integrator 5.0 and 5.1 allows remote attackers to cause a denial of service memory and CPU consumption via a crafted HTTP 1 Range or 2 Request-Range header...
CVE-2013-0494
Summary of CVE-2013-0494 : IBM Sterling B2B Integrator (versions 5.0 and 5.1; and related components like Sterling File Gateway 2.1/2.2) is affected by an HTTP Byte Range denial-of-service vulnerability. A remote, unauthenticated attacker can trigger memory and CPU exhaustion by sending specially...
CVE-2013-0494
IBM Sterling B2B Integrator 5.0 and 5.1 allows remote attackers to cause a denial of service memory and CPU consumption via a crafted HTTP 1 Range or 2 Request-Range header...
Sybase EAServer 6.3.1 - Multiple Vulnerabilities
Sybase EAServer fully supports all the Web services standards and enables enterprises to rapidly expose business functions as Web services. EAServer also provides a graphical interface to automate the publication and management of your company’s Web services. Today, EAServer supports EJB and...
CVE-2013-0539
An unspecified third-party component in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 uses short session ID values, which makes it easier for remote attackers to hijack sessions, and consequently obtain sensitive information, via a brute-force attack...
CVE-2013-0567
IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-0463, CVE-2013-2985, CVE-2013-2987, CVE-2013-3020,...
CVE-2013-2985
IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-0463, CVE-2013-2987, CVE-2013-3020, CVE-2013-0568,...
CVE-2013-3020
IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-0463, CVE-2013-2985, CVE-2013-2987, CVE-2013-0568,...
CVE-2013-0481
The console in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allows remote attackers to read stack traces by triggering 1 an error or 2 an exception...