CVE-2014-4778: Improper Input Validation

IBM License Metric Tool 9 before 9.1.0.2 and Endpoint Manager for Software Use Analysis 9 before 9.1.0.2 do not send an X-Frame-Options HTTP header in response to requests for the login page, which allows remote attackers to conduct clickjacking attacks via vectors involving a FRAME element...

IBM License Metric Tool Directory Traversal Vulnerability

The IBM License Metric Tool is a free tool from IBM USA that helps IBM Passport Advantage Software Upgrade and Support Services customers determine their Processor Value Unit PVU license requirements. A directory traversal vulnerability exists in the IBM License Metric Tool and Tivoli Asset...

CVE-2014-8924

The server in IBM License Metric Tool 7.2.2 before IF15 and 7.5 before IF24 and Tivoli Asset Discovery for Distributed 7.2.2 before IF15 and 7.5 before IF24 allows remote attackers to read arbitrary files or send TCP requests to intranet servers via XML data containing an external entity...

Xxe

The server in IBM License Metric Tool 7.2.2 before IF15 and 7.5 before IF24 and Tivoli Asset Discovery for Distributed 7.2.2 before IF15 and 7.5 before IF24 allows remote attackers to read arbitrary files or send TCP requests to intranet servers via XML data containing an external entity...

CVE-2014-4776

IBM License Metric Tool 9 before 9.1.0.2 does not have an off autocomplete attribute for authentication fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation...

Design/Logic Flaw

IBM License Metric Tool 9 before 9.1.0.2 does not have an off autocomplete attribute for authentication fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation...

CVE-2014-4776

IBM License Metric Tool 9 before 9.1.0.2 does not have an off autocomplete attribute for authentication fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation...

CVE-2014-8924

The server in IBM License Metric Tool 7.2.2 before IF15 and 7.5 before IF24 and Tivoli Asset Discovery for Distributed 7.2.2 before IF15 and 7.5 before IF24 allows remote attackers to read arbitrary files or send TCP requests to intranet servers via XML data containing an external entity...

CVE-2014-4776

IBM License Metric Tool (LM Tool) 9 prior to 9.1.0.2 is affected. The root cause is the absence of an off autocomplete attribute on authentication fields, which can allow local attackers on unattended workstations to obtain access. This is described in the CVE-2014-4776 entry and corroborated by ...

CVE-2014-8924

CVE-2014-8924 describes an XML External Entity (XXE) vulnerability in IBM License Metric Tool (LM Tool) and Tivoli Asset Discovery for Distributed. Affected products/versions include LM Tool 7.2.2 before IF15 and 7.5 before IF24, and Tivoli Asset Discovery for Distributed 7.2.2 before IF15 and 7....

PT-2015-4128

Name of the Vulnerable Software and Affected Versions IBM License Metric Tool versions 7.2.2 before IF15 and 7.5 before IF24 Tivoli Asset Discovery for Distributed versions 7.2.2 before IF15 and 7.5 before IF24 Description The issue allows remote attackers to read arbitrary files or send TCP...

CVE-2014-4776: Exposure of Sensitive Information to an Unauthorized Actor

IBM License Metric Tool 9 before 9.1.0.2 does not have an off autocomplete attribute for authentication fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation...

PT-2015-3775

Name of the Vulnerable Software and Affected Versions IBM License Metric Tool versions prior to 9.1.0.2 Description The issue makes it easier for remote attackers to obtain access by leveraging an unattended workstation, as the authentication fields lack an off autocomplete attribute...

CVE-2014-8924: Undefined Security Weakness

The server in IBM License Metric Tool 7.2.2 before IF15 and 7.5 before IF24 and Tivoli Asset Discovery for Distributed 7.2.2 before IF15 and 7.5 before IF24 allows remote attackers to read arbitrary files or send TCP requests to intranet servers via XML data containing an external entity...

IBM License Metric Tool Information Disclosure Vulnerability

IBM License Metric Tool is a tool dedicated to software license statistics. IBM License Metric Tool fails to disable the browser autocomplete validation field, allowing local users to exploit a vulnerability to obtain sensitive information...

ShrimpTest 1.0b2 - plugins/metric-conversion.php Multiple Unspecified XSS

The shrimptest WordPress plugin was affected by a plugins/metric-conversion.php Multiple Unspecified XSS security vulnerability...

WordPress ShrimpTest Plugin <= 1.0b2 - Cross Site Scripting

This plugin is prone to a plugins/metric-conversion.php multiple unspecified cross site scripting vulnerability. Solution Update this plugin...

[SECURITY] Fedora 20 Update: openstack-ceilometer-2013.2.3-2.fc20

OpenStack ceilometer provides services to measure and collect metrics from OpenStack components...

Multiple CA Service Management Products Unspecified Remote Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/33161/info Multiple CA Service Management products are prone to a vulnerability that attackers can leverage to execute arbitrary commands. This issue is the result of insufficient access restrictions. Successful attacks c...

MKPortal modules metric XSS Vulnerability

========================================= MKPortal modules metric XSS Vulnerability ========================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' /' / /' 0 0 /, // ,/ / 1 1 // /' / // /' / /' 0 0 / / / / / / 1 1 / / 0 0 ////// // // //...