Autonomy Ultraseek - 'cs.html' Open Redirection

source: https://www.securityfocus.com/bid/33500/info Autonomy Ultraseek is prone to a remote URI-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing attacks...

Sun Java System Access Manager 7.1 - Username Enumeration

Sun Java System Access Manager 7.1 - Username Enumeration source: https://www.securityfocus.com/bid/33489/info Sun Java System Access Manager is prone to a username-enumeration weakness because of a design error in the application when verifying user-supplied input. Attackers may exploit this...

Pidgin 2.4.2 - 'msn_slplink_process_msg()' Denial of Service

source: https://www.securityfocus.com/bid/33414/info Pidgin is prone to a denial-of-service vulnerability because it fails to properly sanitize user-supplied input. Successful exploits will cause the affected application to crash, effectively denying service to legitimate users. Pidgin 2.4.1 is...

MoinMoin 1.8 - 'AttachFile.py' Cross-Site Scripting

source: https://www.securityfocus.com/bid/33365/info MoinMoin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Blog Manager - 'categoryId' Cross-Site Scripting

source: https://www.securityfocus.com/bid/33314/info DMXReady Blog Manager is prone to a cross-site scripting vulnerability and an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues could allow an attacker to steal...

Blog Manager - categoryId Cross-Site Scripting

Blog Manager - categoryId Cross-Site Scripting source: https://www.securityfocus.com/bid/33314/info DMXReady Blog Manager is prone to a cross-site scripting vulnerability and an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting thes...

Ganglia gmetad 3.0.6 - 'process_path()' Remote Stack Buffer Overflow

source: https://www.securityfocus.com/bid/33299/info Ganglia is prone to a remote stack-based buffer-overflow vulnerability because the software fails to perform adequate boundary checks on user-supplied input. Attackers can leverage this issue to execute arbitrary code in the context of the...

Ganglia gmetad 3.0.6 - process_path() Remote Stack Buffer Overflow

Ganglia gmetad 3.0.6 - processpath Remote Stack Buffer Overflow source: https://www.securityfocus.com/bid/33299/info Ganglia is prone to a remote stack-based buffer-overflow vulnerability because the software fails to perform adequate boundary checks on user-supplied input. Attackers can leverage...

Teamspeak Server -- Directory Traversal Vulnerability

SecurityFocus reports: TeamSpeak is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting the issue may allow an attacker to obtain sensitive information that could aid in further attacks...

Openfire 3.6.2 - log.jsp Cross-Site Scripting

Openfire 3.6.2 - log.jsp Cross-Site Scripting source: https://www.securityfocus.com/bid/32940/info Openfire is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code in...

Openfire 3.6.2 - 'log.jsp' Directory Traversal

source: https://www.securityfocus.com/bid/32945/info Openfire is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting the issue may allow an attacker to obtain sensitive information that could aid in further attacks. Openfire...

IBM Websphere DataPower XML Security Gateway 3.6.1 XS40 - Remote Denial of Service

IBM Websphere DataPower XML Security Gateway 3.6.1 XS40 - Remote Denial of Service source: https://www.securityfocus.com/bid/33169/info IBM WebSphere DataPower XML Security Gateway XS40 is prone to a remote denial-of-service vulnerability because it fails to handle user-supplied input. Remote...

PRTG Traffic Grapher 6.2.1 - url Cross-Site Scripting

PRTG Traffic Grapher 6.2.1 - url Cross-Site Scripting source: https://www.securityfocus.com/bid/40630/info PRTG Traffic Grapher is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary scri...

IBM Websphere DataPower XML Security Gateway 3.6.1 XS40 - Remote Denial of Service

source: https://www.securityfocus.com/bid/33169/info IBM WebSphere DataPower XML Security Gateway XS40 is prone to a remote denial-of-service vulnerability because it fails to handle user-supplied input. Remote attackers can exploit this issue to cause the device to reboot, denying service to...

Openfire 3.6.2 - log.jsp Directory Traversal

Openfire 3.6.2 - log.jsp Directory Traversal source: https://www.securityfocus.com/bid/32945/info Openfire is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting the issue may allow an attacker to obtain sensitive information...

PRTG Traffic Grapher 6.2.1 - 'url' Cross-Site Scripting

source: https://www.securityfocus.com/bid/40630/info PRTG Traffic Grapher is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Plunet BusinessManager 4.1 - pagesUTF8Sys_DirAnzeige.jsp?Pfad Direct Request Information Disclosure

Plunet BusinessManager 4.1 - pagesUTF8SysDirAnzeige.jsp?Pfad Direct Request Information Disclosure source: https://www.securityfocus.com/bid/33153/info Plunet BusinessManager is prone to multiple security-bypass and HTML-injection vulnerabilities because it fails to properly sanitize user-supplie...

Plunet BusinessManager 4.1 - 'pagesUTF8/Sys_DirAnzeige.jsp?Pfad' Direct Request Information Disclosure

source: https://www.securityfocus.com/bid/33153/info Plunet BusinessManager is prone to multiple security-bypass and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of a...

Plunet BusinessManager 4.1 - pagesUTF8auftrag_allgemeinauftrag.jsp Multiple Cross-Site Scripting Vulnerabilities

Plunet BusinessManager 4.1 - pagesUTF8auftragallgemeinauftrag.jsp Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/33153/info Plunet BusinessManager is prone to multiple security-bypass and HTML-injection vulnerabilities because it fails to properly sanitize...

Plunet BusinessManager 4.1 - '/pagesUTF8/auftrag_allgemeinauftrag.jsp' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/33153/info Plunet BusinessManager is prone to multiple security-bypass and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of a...