CVE-2011-2888

IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service application hang via complex graphics in a presentation...

CVE-2011-2884

Multiple unspecified vulnerabilities in IBM Lotus Symphony 3 before FP3 have unknown impact and attack vectors, related to "critical security vulnerability issues."...

CVE-2011-2887

IBM Lotus Symphony 3 before FP3 on Linux allows remote attackers to cause a denial of service application crash via a certain sample document...

Code injection

IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service application hang via complex graphics in a presentation...

Design/Logic Flaw

Multiple unspecified vulnerabilities in IBM Lotus Symphony 3 before FP3 have unknown impact and attack vectors, related to "critical security vulnerability issues."...

Design/Logic Flaw

IBM Lotus Symphony 3 before FP3 on Linux allows remote attackers to cause a denial of service application crash via a certain sample document...

Code injection

IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service application crash via a .docx document with empty bullet styles for parent bullets...

CVE-2011-2886

IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service application crash via a .docx document with empty bullet styles for parent bullets...

CVE-2011-2884

Technical details for CVE-2011-2884 are not publicly available in the provided documents; monitor for updates.

CVE-2011-2888

IBM Lotus Symphony 3.x before Fix Pack 3 is affected. The vulnerability (CVE-2011-2888) involves processing complex graphics in a presentation and can cause an application hang/denial of service. The issue is tied to the rendering of complex graphics inside presentations, with impact described as...

CVE-2011-2884

Multiple unspecified vulnerabilities in IBM Lotus Symphony 3 before FP3 have unknown impact and attack vectors, related to "critical security vulnerability issues."...

CVE-2011-2885

IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service application crash via the sample .doc document that incorporates a user-defined toolbar...

CVE-2011-2888

IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service application hang via complex graphics in a presentation...

CVE-2011-2885

CVE-2011-2885 affects IBM Lotus Symphony 3 prior to Fix Pack 3. The vulnerability stems from processing a sample .doc that uses a user-defined toolbar, allowing remote attackers to trigger an application crash (DoS). The connected Nessus/OpenVAS entries corroborate the Fix Pack 3 remediation path...

CVE-2011-2887

IBM Lotus Symphony 3 before FP3 on Linux allows remote attackers to cause a denial of service application crash via a certain sample document...

CVE-2011-2893

IBM Lotus Symphony DataPilot in version 3 before FP3 is affected by a denial of service when processing a large .xls with an invalid Value reference, allowing a user-assisted remote attacker to crash the application. The issue is tied to DataPilot parsing/handling of malformed Excel content. Reme...

CVE-2011-2886

CVE-2011-2886 affects IBM Lotus Symphony 3.x prior to Fix Pack 3. The vulnerability allows remote attackers to crash the application by opening a .docx document with empty bullet styles for parent bullets, leading to a denial of service. Public technical details across connected documents specify...

CVE-2011-2887

IBM Lotus Symphony 3 on Linux is affected by CVE-2011-2887: a crafted sample document can remotely crash the application (denial of service). The issue is described as affecting Lotus Symphony 3 before FP3 on Linux; the fix is to apply Fix Pack 3 (FP3) for Linux. The vulnerability arises from pro...

Symphony token Parameter SQL Injection

The version of Symphony hosted on the remote web server fails to sanitize input to the 'token' parameter when 'action' is set to 'resetpass' before using it in the 'content.login.php' script to construct a database query. An unauthenticated, remote attacker can exploit this issue to manipulate...

Symphony CMS 2.1.2 Blind SQL Injection

Exploit for php platform in category web applications Symphony is a web-based content management system CMS that enables users to create and manage websites and web applications of all shapes and sizes?from the simplest of blogs to bustling news sites and feature-packed social networks. Taken fro...