VMSA-2010-0005:VMware products address vulnerabilities in WebAccess

VMSA-2010-0005 VMware products address vulnerabilities in WebAccess VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2010-0005 VMware Security Advisory Synopsis: VMware products address vulnerabilities in WebAccess VMware Security Advisory Issue date: 2010-03-29 VMware Security...

Cross site scripting

Cross-site scripting XSS vulnerability in the WebAccess component in Novell GroupWise 7.0 before 7.03 HP4 and 8.0 before 8.0 SP1 allows remote attackers to inject arbitrary web script or HTML via the User.Theme.index parameter...

CVE-2009-4662

Cross-site scripting XSS vulnerability in the WebAccess component in Novell GroupWise 7.0 before 7.03 HP4 and 8.0 before 8.0 SP1 allows remote attackers to inject arbitrary web script or HTML via the User.Theme.index parameter...

CVE-2009-4662

CVE-2009-4662 affects Novell GroupWise WebAccess (7.0 up to 7.03 HP4; 8.0 up to 8.0 SP1). It is a cross-site scripting vulnerability in the WebAccess component allowing remote attackers to inject arbitrary web script or HTML via the User.Theme.index parameter. The provided connected documents con...

CVE-2009-4662

Cross-site scripting XSS vulnerability in the WebAccess component in Novell GroupWise 7.0 before 7.03 HP4 and 8.0 before 8.0 SP1 allows remote attackers to inject arbitrary web script or HTML via the User.Theme.index parameter...

VMware vCenter Lab Manager WebWorks Help跨站脚本漏洞

CVE ID：CVE-2009-3731 VMware vCenter Lab Manager使IT能够为开发测试创建和管理内部云，并通过自助访问研发、测试、配置和部署复杂的、多级别的应用程序所需的资源，为用户提供更高的服务等级。 WebWorks Help某个输出格式允许在线帮助在多种平台和浏览器上提交，可更加容易的在WEB或企业内网中发布信息。 WebWorks Help没有充分过滤入站请求，可导致内置WebWorks Help的应用程序触发跨站脚本攻击。 成功利用VMware产品中的此漏洞需要诱使用户点击恶意链接或在目标用户登录到vCenter时，ESX或VMware...

VMSA-2009-0017 VMware vCenter, ESX patch and vCenter Lab Manager releases address cross-site scripting issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ----------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2009-0017 Synopsis: VMware vCenter, ESX patch and vCenter Lab Manager releases address cross-site scripting issues Issue date:...

Novell GroupWise WebAccess Basic Authentication Buffer Overflow (CVE-2007-2171)

Novell GroupWise is an enterprise collaboration system that provides secure e-mail, calendaring, scheduling, and instant messaging. GroupWise also includes task management, contact management, document management, and other productivity tools. GroupWise can be used on the users' desktop and can b...

Novell Groupwise fails to properly sanitize emails.

Affected product ---------------- Novell Groupwise webaccess Affected software: 7.x and 8.0 Vulnerability details --------------------- Groupwise WebAccess implements a security parser designed to prevent embedded scripts in HTML emails from executing in the users's browser. Unfortunately this...

Novell GroupWise WebAccess crossite scripting

Multiple crossite scripting and request forgery vulnerabilities...

Novell GroupWise WebAccess Login Page User.lang Parameter XSS

The remote host is running Novell GroupWise WebAccess, which is vulnerable to a cross-site scripting issue in the 'User.lang' field of the login page. There are other issues known to be associated with this version of GroupWise WebAccess that Nessus has not tested for. Refer to the Secunia adviso...

CVE-2009-1634

The WebAccess component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 does not properly implement session management mechanisms, which allows remote attackers to gain access to user accounts via unspecified vectors...

Session fixation

The WebAccess component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 does not properly implement session management mechanisms, which allows remote attackers to gain access to user accounts via unspecified vectors...

CVE-2009-1634

The CVE-2009-1634 affects the WebAccess component in Novell GroupWise 7.x (before 7.03 HP3) and 8.x (before 8.0 HP2). It arises from improper session management, allowing remote attackers to gain access to user accounts via unspecified vectors. According to NVD, the vulnerability has CVSSv2 base ...

CVE-2009-1634

The WebAccess component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 does not properly implement session management mechanisms, which allows remote attackers to gain access to user accounts via unspecified vectors...

CVE-2009-1635

Multiple cross-site scripting XSS vulnerabilities in the WebAccess component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 allow remote attackers to inject arbitrary web script or HTML via 1 the User.lang parameter to the login page aka gw/webacc, 2 style expressions in a message...

CVE-2009-1762

Multiple cross-site scripting XSS vulnerabilities in the WebAccess login page aka gw/webacc in Novell GroupWise 7.x before 7.03 HP2 allow remote attackers to inject arbitrary web script or HTML via the 1 GWAP.version or 2 User.Theme aka User.Theme.index parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the WebAccess login page aka gw/webacc in Novell GroupWise 7.x before 7.03 HP2 allow remote attackers to inject arbitrary web script or HTML via the 1 GWAP.version or 2 User.Theme aka User.Theme.index parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the WebAccess component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 allow remote attackers to inject arbitrary web script or HTML via 1 the User.lang parameter to the login page aka gw/webacc, 2 style expressions in a message...

CVE-2009-1635

CVE-2009-1635 : Novell GroupWise WebAccess (7.x pre-7.03 HP3 and 8.x pre-8.0 HP2) is affected by cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary script/HTML via (1) the login page User.lang parameter, (2) style expressions in HTML emails, or (3) vectors ...