62 matches found
EUVD-2006-4494
Malware in sbrugna...
EUVD-2006-4790
Malware in sbrugna...
EUVD-2013-1123
Malware in sbrugna...
EUVD-2013-1136
Malware in sbrugna...
EUVD-2010-4296
Malware in sbrugna...
EUVD-2007-6590
Malware in sbrugna...
EUVD-2011-2216
Malware in sbrugna...
EUVD-2014-4545
Malware in sbrugna...
EUVD-2014-4436
Malware in sbrugna...
EUVD-2011-1696
Malware in sbrugna...
EUVD-2010-3263
Malware in sbrugna...
EUVD-2007-4509
Malware in sbrugna...
CVE-2010-3264
The engine installer in Novell Identity Manager aka IDM 3.6.1 stores admin tree credentials in /tmp/idmInstall.log, which allows local users to obtain sensitive information by reading this file...
CVE-2013-1083
Unspecified vulnerability in the login functionality in the Reporting Module in Novell Identity Manager aka IDM Roles Based Provisioning Module 4.0.2 before Field Patch C has unknown impact and attack vectors...
CVE-2006-4506
idmlib.sh in nxdrv in Novell Identity Manager IDM 3.0.1 allows local users to execute arbitrary commands via unspecified vectors, possibly involving the " quote and \ backslash characters and eval injection...
SUSE CVE-2010-4324
Cross-site scripting XSS vulnerability in the Approval Form in the User Application in the Roles Based Provisioning Module 3.7.0 before 370D in Novell Identity Manager aka IDM allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
SUSE CVE-2013-1083
Unspecified vulnerability in the login functionality in the Reporting Module in Novell Identity Manager aka IDM Roles Based Provisioning Module 4.0.2 before Field Patch C has unknown impact and attack vectors...
SUSE CVE-2011-1696
Cross-site scripting XSS vulnerability in Novell Identity Manager aka IDM User Application 3.5.0, 3.5.1, 3.6.0, 3.6.1, 3.7.0, and 4.0.0, and Identity Manager Roles Based Provisioning Module 3.6.0, 3.6.1, 3.7.0, and 4.0.0, allows remote attackers to inject arbitrary web script or HTML via the...
CVE-2017-9280 Novell Identity Manager User Application get request url contains the session token.
Some NetIQ Identity Manager Applications before Identity Manager 4.5.6.1 included the session token in GET URLs, potentially allowing exposure of user sessions to untrusted third parties via proxies, referer urls or similar...
Authentication flaw
EMC RSA Identity Management and Governance IMG 6.5.x before 6.5.1 P11, 6.5.2 before P02HF01, and 6.8.x before 6.8.1 P07, when Novell Identity Manager aka NovellIM is used, allows remote attackers to bypass authentication via an arbitrary valid username...