IBM Lotus Domino 8.5.x Multiple Vulnerabilities

According to its banner, the version of Lotus Domino on the remote host is 8.5.x and is, therefore, affected by the following vulnerabilities : - Some scripts inside the Web Help application are vulnerable to open redirect attacks. CVE-2012-2159 - The Web Help component contains a reflected...

CVE-2013-0489

Cross-site request forgery CSRF vulnerability in webadmin.nsf aka the Web Administrator client in IBM Domino 8.5.x allows remote authenticated users to hijack the authentication of administrators...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in webadmin.nsf aka the Web Administrator client in IBM Domino 8.5.x allows remote authenticated users to hijack the authentication of administrators...

Cross site scripting

Cross-site scripting XSS vulnerability in webadmin.nsf aka the Web Administrator client in IBM Domino 8.5.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-0488

Cross-site scripting XSS vulnerability in webadmin.nsf aka the Web Administrator client in IBM Domino 8.5.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-0489

Cross-site request forgery CSRF vulnerability in webadmin.nsf aka the Web Administrator client in IBM Domino 8.5.x allows remote authenticated users to hijack the authentication of administrators...

CVE-2013-0488

CVE-2013-0488 is an XSS vulnerability in IBM Domino 8.5.x Web Administrator (webadmin.nsf). Enabling remote script/HTML injection via unspecified vectors. Affected: IBM Domino Web Administrator client, 8.5.x. Root cause: input validation error on Web Administrator/webadmin.nsf, per multiple scans...

CVE-2011-3320

Cross-site scripting XSS vulnerability in the Web Administrator component in GE Intelligent Platforms Proficy Historian 4.x and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...

Cross site scripting

Cross-site scripting XSS vulnerability in the Web Administrator component in GE Intelligent Platforms Proficy Historian 4.x and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...

Symantec LiveUpdate Administrator Cross Site Request Forgery

NSOADV-2011-001: Symantec LiveUpdate Administrator CSRF vulnerability 111101111 11111 00110 00110001111 111111 01 01 1 11111011111111 11111 0 11 01 0 11 1 1 111011001 11111111101 1 11 0110111 1 1111101111 1001 0 1 10 11 0 10 11 1111111 1 111 111001 111111111 0 10 1111 0 11 11 111111111 1 1101 10...

mailman: XSS triggerable by list administrator

Multiple cross-site scripting XSS vulnerabilities in Mailman before 2.1.10b1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to 1 editing templates and 2 the list's "info attribute" in the web administrator interface, a different vulnerability than...

Code injection

The Web Administrator service STEMWADM.EXE in Websense Personal Email Manager 7.1 before Hotfix 4 and Email Security 7.1 before Hotfix 4 allows remote attackers to cause a denial of service crash by sending a HTTP GET request to TCP port 8181 and closing the socket before the service can send a...

CVE-2009-3749

The Web Administrator service STEMWADM.EXE in Websense Personal Email Manager 7.1 before Hotfix 4 and Email Security 7.1 before Hotfix 4 allows remote attackers to cause a denial of service crash by sending a HTTP GET request to TCP port 8181 and closing the socket before the service can send a...

CVE-2009-3749

The CVE-2009-3749 vulnerability affects Websense Web Administrator service (STEMWADM.EXE) in Websense Personal Email Manager 7.1 before Hotfix 4 and Websense Email Security 7.1 before Hotfix 4. An attacker can remotely trigger a denial-of-service (crash) by sending an HTTP GET to TCP port 8181 an...

CVE-2009-3748

Websense Web Administrator in Websense Personal Email Manager 7.1.x before Hotfix 4 and Websense Email Security 7.1 before Hotfix 4 contains multiple cross-site scripting (XSS) flaws. The vulnerabilities affect the Web Administrator component and allow remote attackers to inject arbitrary script/...

Websense Email Security DoS

No description provided by source. Security Advisory NSOADV-2009-002 Title: Websense Email Security Web Administrator DoS Severity: Low Advisory ID: NSOADV-2009-002 Found Date: 28.09.2009 Date Reported: 01.10.2009 Release Date: 20.10.2009 Author: Nikolas Sotiriu Mail: nso-research at sotiriu.de...

Websense Email Security - Denial of Service

Websense Email Security - Denial of Service Security Advisory NSOADV-2009-002 Title: Websense Email Security Web Administrator DoS Severity: Low Advisory ID: NSOADV-2009-002 Found Date: 28.09.2009 Date Reported: 01.10.2009 Release Date: 20.10.2009 Author: Nikolas Sotiriu Mail: nso-research at...

Websense Email Security - Cross-Site Scripting

Websense Email Security - Cross-Site Scripting Security Advisory NSOADV-2009-003 Title: Websense Email Security Cross Site Scripting Severity: Low Advisory ID: NSOADV-2009-003 Found Date: 28.09.2009 Date Reported: 01.10.2009 Release Date: 20.10.2009 Author: Nikolas Sotiriu Mail: nso-research at...

Websense Email Security - Cross-Site Scripting

Security Advisory NSOADV-2009-003 Title: Websense Email Security Cross Site Scripting Severity: Low Advisory ID: NSOADV-2009-003 Found Date: 28.09.2009 Date Reported: 01.10.2009 Release Date: 20.10.2009 Author: Nikolas Sotiriu Mail: nso-research at sotiriu.de URL:...

Websense Email Security - Denial of Service

Security Advisory NSOADV-2009-002 Title: Websense Email Security Web Administrator DoS Severity: Low Advisory ID: NSOADV-2009-002 Found Date: 28.09.2009 Date Reported: 01.10.2009 Release Date: 20.10.2009 Author: Nikolas Sotiriu Mail: nso-research at sotiriu.de URL:...