The vulnerability of the Cisco UCS Central device’s centralized management system allows a hacker to execute arbitrary code.

The vulnerability of the web-component of the Cisco UCS Central device management system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using a specially crafted HTTP request from a remote location...

CVE-2014-3103

The Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an...

CVE-2014-3103

The Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an...

CVE-2014-3101

The login form in the Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not insert a delay after a failed authentication attempt, which makes it easier for remote attackers to obtain access via a brute-force attack...

Authentication flaw

The login form in the Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not insert a delay after a failed authentication attempt, which makes it easier for remote attackers to obtain access via a brute-force attack...

CVE-2014-3101

The login form in the Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not insert a delay after a failed authentication attempt, which makes it easier for remote attackers to obtain access via a brute-force attack...

CVE-2014-3101

The CVE-2014-3101 issue affects IBM Rational ClearQuest Web login: the login form fails to insert a delay after failed attempts in affected releases (7.1.x prior to 7.1.2.15, 8.0.0.x prior to 8.0.0.12, and 8.0.1.x prior to 8.0.1.5). This omission enables brute-force attempts to gain access. The I...

Microsoft Office 2003 Web Component Memory Access Violation Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/26405/info Microsoft Office Web Component is prone to a denial-of-service vulnerability because of a memory access violation. Attackers can exploit this issue to crash Internet Explorer and deny service to legitimate user...

CVE-2012-6350

Cross-site scripting XSS vulnerability in the Web component in IBM Cognos TM1 before 9.5.2 FP3 and 10.1 before 10.1 FP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Web component in IBM Cognos TM1 before 9.5.2 FP3 and 10.1 before 10.1 FP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Splunk 4.1.6 Web Component - Remote Denial of Service

Splunk 4.1.6 Web Component - Remote Denial of Service source: https://www.securityfocus.com/bid/50298/info Splunk is prone to a remote denial-of-service vulnerability. Exploiting this issue will exhaust system resources and cause the application to crash, denying service to legitimate users...

Juniper Junos debug.php J-Web Component Unauthenticated Debug Access (PSN-2011-02-158)

According to its self-reported version number, the remote device is running a version of Junos with a vulnerable J-Web component. The 'debug.php' file was inadvertently included with this Junos release. This file enables unspecified debugging functions and output. A remote, unauthenticated attack...

Joomla Component com_rsappt_pro2 LFI Vulnerability

Exploit for php platform in category web applications Appointment Booking Pro is a native Joomla component ================================= Last login: Tue Jun 7 2010 10:20:22 on ttys000 / / / / / / / / / / / / / : / / / / / / / / / / / / / / / | / / / / / / / / / / / / / // / // / / / /...

Joomla! Component MyHome - Blind SQL Injection

Name : Joomla commyhome BSQLi Vulnerability Date : july 10,2010 Critical Level : HIGH vendor URL :http://www.unisoft.me/ Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger greetz to :www.topsecure.net ,All ICW members and my...

Microsoft OWC Spreadsheet msDataSourceObject Memory Corruption

$Id: ms09043owcmsdso.rb 8686 2010-03-02 07:50:25Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

Microsoft OWC Spreadsheet msDataSourceObject Memory Corruption

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Microsoft OW...

CVE-2009-2356

Multiple stack-based buffer overflows in the pgsqlQuery function in NullLogic Groupware 1.2.7, when PostgreSQL is used, might allow remote attackers to execute arbitrary code via input to the 1 POP3, 2 SMTP, or 3 web component that triggers a long SQL query...

Trend Micro OfficeScan buffer overflow

Buffer overflow in cgiRecvFile.exe Web component...

Microsoft Office Web Component Memory Access Violation Denial of Service Vulnera

Microsoft Office Web组件一款基与Web的数据透视表控件。 Microsoft Office Web包含的ActiveX控件存在设计错误，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 构建恶意的EWB页，诱使用户访问，可导致对应用程序进行拒绝服务攻击。 Microsoft Office Web Components 2003 0 + Microsoft BizTalk Server 2002 Developer Edition + Microsoft BizTalk Server 2002 Enterprise Edition + Microsoft Commer...

Microsoft Office 2003 - Web Component Memory Access Violation Denial of Service

Microsoft Office 2003 - Web Component Memory Access Violation Denial of Service source: https://www.securityfocus.com/bid/26405/info Microsoft Office Web Component is prone to a denial-of-service vulnerability because of a memory access violation. Attackers can exploit this issue to crash Interne...