Open redirect

The web interface in Open Computer and Software Inventory Next Generation OCS Inventory NG 1.01 generates different error messages depending on whether a username is valid, which allows remote attackers to enumerate valid usernames...

CVE-2009-1769

CVE-2009-1769 affects OCS Inventory NG (notably around 1.01-era interfaces) where the web UI may disclose valid usernames via differing error messages. OpenVAS/Nessus records tie this to Fedora advisories FEDORA-2009-5764/5769/5773 for ocsinventory, noting additional mentions of SQL injection and...

CVE-2009-1769

The web interface in Open Computer and Software Inventory Next Generation OCS Inventory NG 1.01 generates different error messages depending on whether a username is valid, which allows remote attackers to enumerate valid usernames...

CVE-2009-1769

The web interface in Open Computer and Software Inventory Next Generation OCS Inventory NG 1.01 generates different error messages depending on whether a username is valid, which allows remote attackers to enumerate valid usernames...

CVE-2009-1443

Multiple unspecified vulnerabilities in the Server component in OCS Inventory NG before 1.02 have unknown impact and attack vectors...

Design/Logic Flaw

Multiple unspecified vulnerabilities in the Server component in OCS Inventory NG before 1.02 have unknown impact and attack vectors...

CVE-2009-1443

Multiple unspecified vulnerabilities in the Server component in OCS Inventory NG before 1.02 have unknown impact and attack vectors...

DEBIAN-CVE-2009-1443

Multiple unspecified vulnerabilities in the Server component in OCS Inventory NG before 1.02 have unknown impact and attack vectors...

CVE-2009-1443

Multiple unspecified vulnerabilities in the Server component in OCS Inventory NG before 1.02 have unknown impact and attack vectors...

CVE-2009-1443

Multiple unspecified vulnerabilities in the Server component in OCS Inventory NG before 1.02 have unknown impact and attack vectors...

CVE-2009-1443

OCS Inventory NG is affected in versions before 1.02, with multiple unspecified vulnerabilities in the Server component. The available sources note unknown impact and attack vectors, and there are no explicit root-cause or patch details in the provided connected documents. No exploitation informa...

CVE-2009-1443

Multiple unspecified vulnerabilities in the Server component in OCS Inventory NG before 1.02 have unknown impact and attack vectors...

Code injection

Unspecified vulnerability in Microsoft Office Communications Server OCS, Office Communicator, and Windows Live Messenger allows remote attackers to cause a denial of service crash via a crafted Real-time Transport Control Protocol RTCP receiver report packet...

CVE-2008-5179

The CVE-2008-5179 entry describes an unspecified vulnerability in Microsoft Office Communications Server (OCS), Office Communicator, and Windows Live Messenger that enables remote attackers to trigger a denial-of-service (crash) by sending a crafted RTCP receiver report packet. The vulnerability ...

CVE-2006-5308

Open Conference Systems (OCS) before 1.1.6 is affected by multiple PHP remote file inclusion vulnerabilities. The issue is triggered via a URL in the fullpath parameter used by include/theme.inc.php or include/footer.inc.php, potentially allowing an unauthenticated attacker to view arbitrary file...