Authentication flaw

Passlogix v-GO Self-Service Password Reset SSPR and OEM before 7.0A allows physically proximate attackers to execute arbitrary programs without authentication by triggering use of an invalid SSL certificate and using the Internet Explorer interface to navigate through the filesystem via a "Save A...

CVE-2010-4506

CVE-2010-4506 concerns Passlogix v-GO Self-Service Password Reset (SSPR) and OEM prior to version 7.0A. The flaw enables physically proximate attackers to run arbitrary programs without authentication by abusing an invalid SSL certificate and using Internet Explorer to navigate the filesystem via...

CVE-2010-4506

Passlogix v-GO Self-Service Password Reset SSPR and OEM before 7.0A allows physically proximate attackers to execute arbitrary programs without authentication by triggering use of an invalid SSL certificate and using the Internet Explorer interface to navigate through the filesystem via a "Save A...

CVE-2010-0861

Technical details for CVE-2010-0861 are not publicly available in the provided documents. Monitor for updates released through Oracle CPU advisories and vendor notices before assuming vulnerability scope, impact, or fixes.

Microsoft Windows SMB Client Pool Corruption Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute code with SYSTEM-level privileges. Failed exploit attempts will likely cause denial-of-service conditions. Technologies Affected Avaya Meeting Exchange - Client...

CVE-2010-0075

CVE-2010-0075 affects Oracle E-Business Suite HRMS (Self Service) in versions 11.5.10.2, 12.0.6, and 12.1.1. The connected CPU advisory confirms a remotely exploitable vulnerability in the HRMS Self Service component, with HTTP as the attack vector and no authentication required, impacting confid...

CVE-2009-3262

Cross-site scripting XSS vulnerability in the Self Service UI SSUI in IBM Tivoli Identity Manager ITIM 5.0.0.5 allows remote authenticated users to inject arbitrary web script or HTML via the last name field in a profile...

Cross site scripting

Cross-site scripting XSS vulnerability in the Self Service UI SSUI in IBM Tivoli Identity Manager ITIM 5.0.0.5 allows remote authenticated users to inject arbitrary web script or HTML via the last name field in a profile...

CVE-2009-3262

Cross-site scripting XSS vulnerability in the Self Service UI SSUI in IBM Tivoli Identity Manager ITIM 5.0.0.5 allows remote authenticated users to inject arbitrary web script or HTML via the last name field in a profile...

CVE-2009-2316

Multiple cross-site scripting XSS vulnerabilities in IBM Tivoli Identity Manager ITIM 5.0 allow remote attackers to inject arbitrary web script or HTML by entering an unspecified URL in 1 the self-service UI interface or 2 the console interface. NOTE: it was later reported that 4.6.0 is also...

Microsoft Active Directory Memory Leak Denial Of Service Vulnerability

Description Microsoft Active Directory is prone to a denial-of-service vulnerability. An attacker can exploit this issue to crash the server, denying access to legitimate users. Technologies Affected Avaya Messaging Application Server Avaya Messaging Application Server MM 1.1 Avaya Messaging...

Microsoft DirectX DirectShow QuickTime Video Remote Code Execution Vulnerability

Description Microsoft DirectX is prone to a remote code-execution vulnerability because the DirectShow component fails to properly handle QuickTime media files. Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the user running the application...

Microsoft Internet Explorer CSS Memory Corruption Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise the application and possibly the underlying computer. Faile...

Microsoft Internet Explorer XML Handling Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise the application and possibly the underlying computer. Faile...

CVE-2007-5529

Unspecified vulnerability in the Oracle Self-Service Web Applications component in client-only installations of Oracle E-Business Suite 11.5.10.2 has unknown impact and remote attack vectors, aka APP08...

CVE-2007-5529

The CVE-2007-5529 issue affects Oracle E-Business Suite 11.5.10.2 in client-only installations, specifically the Oracle Self-Service Web Applications component. The vulnerability is described as unspecified with unknown impact and remote attack vectors (APP08); no concrete root-cause, affected ve...

CVE-2007-0319

Multiple stack-based buffer overflows in the Motive ActiveEmailTest.EmailData ActiveUtils EmailData ActiveX control in ActiveUtils.dll in Motive Service Activation Manager 5.1 and Self Service Manager 5.1 and earlier allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2007-0319

The CVE-2007-0319 entry concerns Motive Communications’ ActiveUtils EmailData ActiveX control (ActiveEmailTest.EmailData in ActiveUtils.dll) used by Motive Service Activation Manager 5.1 and Self Service Manager 5.1 and earlier. It describes multiple stack-based buffer overflows that could allow ...

Sun Solaris Telnet Remote Authentication Bypass Vulnerability

Description Sun Solaris 10 is prone to a vulnerability that allows remote attackers to bypass authentication. Successfully exploiting this issue allows remote attackers to gain remote access to vulnerable computers. If the targeted computer is configured to allow non-console logins for superusers...

CVE-2006-6308

Symantec LiveState 7.1 Agent for Windows allows local users to gain privileges by stopping the shstart.exe process and open "Web Self-Service" from the system tray icon, which will open a browser window running with elevated privileges. NOTE: several third-party researchers have noted that...