PT-2013-4821

Name of the Vulnerable Software and Affected Versions IBM Domino versions 8.5 through 9.0 Description A cross-site scripting XSS issue exists in the webadmin.nsf component of the Domino Web Administrator, allowing remote authenticated users to inject arbitrary web script or HTML. This can be...

CVE-2013-4050: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in webadmin.nsf in Domino Web Administrator in IBM Domino 8.5 and 9.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...

PT-2013-4818

Name of the Vulnerable Software and Affected Versions IBM Domino versions 8.5 through 9.0 Description A cross-site scripting XSS issue exists in the webadmin.nsf component of the Domino Web Administrator, allowing remote authenticated users to inject arbitrary web script or HTML. This is achieved...

Cisco Wireless LAN Controller Multiple Parameter Handling Denial of Service Vulnerability

A vulnerability in the Web Administrator Interface of Cisco Wireless LAN Controllers WLC could allow an authenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to a failure to properly validate certain parameters prior to processing them on the device. ...

Design/Logic Flaw

The Web Administrator Interface on Cisco Wireless LAN Controller WLC devices allows remote authenticated users to cause a denial of service device crash by leveraging membership in the Full Manager managers group, Read Only managers group, or Lobby Ambassador managers group, and sending a request...

CVE-2013-3474

CVE-2013-3474 affects Cisco Wireless LAN Controller (WLC) Web Administrator Interface. An authenticated attacker who is a member of Full Manager, Read Only, or Lobby Ambassador groups can cause a DoS (device crash) by submitting a request with a missing or malformed parameter value, triggering th...

CVE-2013-3474: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Web Administrator Interface on Cisco Wireless LAN Controller WLC devices allows remote authenticated users to cause a denial of service device crash by leveraging membership in the Full Manager managers group, Read Only managers group, or Lobby Ambassador managers group, and sending a request...

IBM Lotus Domino 8.5.x Multiple Vulnerabilities

According to its banner, the version of Lotus Domino on the remote host is 8.5.x and is, therefore, affected by the following vulnerabilities : - Some scripts inside the Web Help application are vulnerable to open redirect attacks. CVE-2012-2159 - The Web Help component contains a reflected...

CVE-2013-0489

Cross-site request forgery CSRF vulnerability in webadmin.nsf aka the Web Administrator client in IBM Domino 8.5.x allows remote authenticated users to hijack the authentication of administrators...

Cross site scripting

Cross-site scripting XSS vulnerability in webadmin.nsf aka the Web Administrator client in IBM Domino 8.5.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in webadmin.nsf aka the Web Administrator client in IBM Domino 8.5.x allows remote authenticated users to hijack the authentication of administrators...

CVE-2013-0489

Cross-site request forgery CSRF vulnerability in webadmin.nsf aka the Web Administrator client in IBM Domino 8.5.x allows remote authenticated users to hijack the authentication of administrators...

CVE-2013-0488

CVE-2013-0488 is an XSS vulnerability in IBM Domino 8.5.x Web Administrator (webadmin.nsf). Enabling remote script/HTML injection via unspecified vectors. Affected: IBM Domino Web Administrator client, 8.5.x. Root cause: input validation error on Web Administrator/webadmin.nsf, per multiple scans...

CVE-2013-0488

Cross-site scripting XSS vulnerability in webadmin.nsf aka the Web Administrator client in IBM Domino 8.5.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-3320

Cross-site scripting XSS vulnerability in the Web Administrator component in GE Intelligent Platforms Proficy Historian 4.x and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...

Cross site scripting

Cross-site scripting XSS vulnerability in the Web Administrator component in GE Intelligent Platforms Proficy Historian 4.x and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...

CVE-2011-3320: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Web Administrator component in GE Intelligent Platforms Proficy Historian 4.x and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...

Symantec LiveUpdate Administrator Cross Site Request Forgery

NSOADV-2011-001: Symantec LiveUpdate Administrator CSRF vulnerability 111101111 11111 00110 00110001111 111111 01 01 1 11111011111111 11111 0 11 01 0 11 1 1 111011001 11111111101 1 11 0110111 1 1111101111 1001 0 1 10 11 0 10 11 1111111 1 111 111001 111111111 0 10 1111 0 11 11 111111111 1 1101 10...

mailman: XSS triggerable by list administrator

Multiple cross-site scripting XSS vulnerabilities in Mailman before 2.1.10b1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to 1 editing templates and 2 the list's "info attribute" in the web administrator interface, a different vulnerability than...

Code injection

The Web Administrator service STEMWADM.EXE in Websense Personal Email Manager 7.1 before Hotfix 4 and Email Security 7.1 before Hotfix 4 allows remote attackers to cause a denial of service crash by sending a HTTP GET request to TCP port 8181 and closing the socket before the service can send a...