CVE-2011-2679: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-2682: Undefined Security Weakness

The Login component in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote authenticated users to cause a denial of service license consumption by trying to login to DOORS Web Access with a new user account that has never been used for a DOORS login...

PT-2011-4026

Name of the Vulnerable Software and Affected Versions IBM Rational DOORS Web Access versions 1.4.x before 1.4.0.4 Description The issue allows remote authenticated users to cause a denial of service by consuming licenses when attempting to log in to DOORS Web Access with a new, unused user accoun...

PT-2011-4024

Name of the Vulnerable Software and Affected Versions IBM Rational DOORS Web Access versions 1.4.x through 1.4.0.3 Description The issue is related to an unspecified vulnerability with an unknown impact and remote attack vectors. It is connected to the "server error response." Recommendations For...

CVE-2011-2680: Undefined Security Weakness

Unspecified vulnerability in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 has unknown impact and remote attack vectors related to the "server error response."...

PT-2011-4023

Name of the Vulnerable Software and Affected Versions IBM Rational DOORS Web Access versions 1.4.x through 1.4.0.3 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions 1.4.x through 1.4.0.3, update to version...

CVE-2011-2681: Improper Input Validation

IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 does not properly handle exceptions, which has unspecified impact and remote attack vectors...

PT-2011-4025

Name of the Vulnerable Software and Affected Versions IBM Rational DOORS Web Access versions 1.4.x before 1.4.0.4 Description The issue is related to improper exception handling, which has an unspecified impact and can be exploited remotely. Recommendations For versions 1.4.x before 1.4.0.4, upda...

Sybase M-Business Anywhere multiple security vulnerabilities

Buffer overflows during web access authentication TCP/80, TCP/443, buffer overflow on SOAP request processing TCP/8093, TCP/8094...

Linksys WRT54G - read router password from file placed on FTP

Environment: Linksys WRT54G - Firmware Version: v7.00.1 Default settings of Linksys WRT54G allows to get FTP without password: rafal@localhost $ lftp 192.168.1.1 lftp 192.168.1.1: dir size date time name -------- ------ ------ -------- 956756 Jan-01-2003 02:13:12 ap61.sys 224664 Jan-01-2003...

Linksys WRT54G Password Disclosure

Environment: Linksys WRT54G - Firmware Version: v7.00.1 Default settings of Linksys WRT54G allows to get FTP without password: rafal@localhost $ lftp 192.168.1.1 lftp 192.168.1.1: dir size date time name -------- ------ ------ -------- 956756 Jan-01-2003 02:13:12 ap61.sys 224664 Jan-01-2003...

Password Vault Web Access vulnerable to cross-site scripting

Overview Password Vault Web Access PVWA provided by Cyber-Ark Software, Ltd. contains a cross-site scripting vulnerability. Password Vault Web Access PVWA is a module in the Privileged Identity Management Suite that allows access via a web portal. PVWA contains a cross-site scripting vulnerabilit...

CVE-2010-2779

Cross-site scripting XSS vulnerability in WebAccess in Novell GroupWise 8.x before 8.0 SP2 allows remote attackers to inject arbitrary web script or HTML via a crafted message, related to "replies."...

MS KB2401593: Microsoft Outlook Web Access (OWA) CSRF

The remote host is running a version of Outlook Web Access OWA for Exchange Server that is affected by a cross-site request forgery vulnerability. By tricking an authenticated user to click on a link to a specially crafted web page, it may be possible for an attacker to perform unauthorized actio...

JVN#35605523: Cross-site scripting vulnerability in Access Analyzer CGI by futomi's CGI Cafe

Access Analyzer CGI provided by futomi's CGI Cafe is a software to analyze web access logs. Access Analyzer CGI contains a cross-site scripting vulnerability. This is caused by a particular method in which tags are embedded into the web page. Impact An arbitrary script may be executed on the user...

CVE-2010-3213

Cross-site request forgery CSRF vulnerability in Microsoft Outlook Web Access owa/ev.owa 2007 through SP2 allows remote attackers to hijack the authentication of e-mail users for requests that perform Outlook requests, as demonstrated by setting the auto-forward rule...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Microsoft Outlook Web Access owa/ev.owa 2007 through SP2 allows remote attackers to hijack the authentication of e-mail users for requests that perform Outlook requests, as demonstrated by setting the auto-forward rule...

CVE-2010-3213

Cross-site request forgery CSRF vulnerability in Microsoft Outlook Web Access owa/ev.owa 2007 through SP2 allows remote attackers to hijack the authentication of e-mail users for requests that perform Outlook requests, as demonstrated by setting the auto-forward rule...

CVE-2010-3213

CVE-2010-3213 is a CSRF in Microsoft Outlook Web Access (OWA) for Exchange Server 2007–SP2. The vulnerability allows an authenticated user to be tricked into performing Outlook actions (e.g., creating or modifying outbound rules) via forged requests, hijacking the user’s session in the OWA contex...

CVE-2010-3213: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Microsoft Outlook Web Access owa/ev.owa 2007 through SP2 allows remote attackers to hijack the authentication of e-mail users for requests that perform Outlook requests, as demonstrated by setting the auto-forward rule...