CVE-2011-1356

IBM WebSphere Application Server WAS 6.1 before 6.1.0.39 and 7.0 before 7.0.0.19 allows local users to obtain sensitive stack-trace information via a crafted Administration Console request...

CVE-2011-1356: Exposure of Sensitive Information to an Unauthorized Actor

IBM WebSphere Application Server WAS 6.1 before 6.1.0.39 and 7.0 before 7.0.0.19 allows local users to obtain sensitive stack-trace information via a crafted Administration Console request...

PT-2011-3081

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server WAS versions 6.1 before 6.1.0.39 IBM WebSphere Application Server WAS versions 7.0 before 7.0.0.19 Description The issue allows local users to obtain sensitive stack-trace information via a crafted Administrati...

Authentication flaw

IDSWebApp in the Web Administration Tool in IBM Tivoli Directory Server TDS 6.2 before 6.2.0.3-TIV-ITDS-IF0004 does not require authentication for access to LDAP Server log files, which allows remote attackers to obtain sensitive information via a crafted URL...

CVE-2011-2758

IDSWebApp in the Web Administration Tool in IBM Tivoli Directory Server TDS 6.2 before 6.2.0.3-TIV-ITDS-IF0004 does not require authentication for access to LDAP Server log files, which allows remote attackers to obtain sensitive information via a crafted URL...

CVE-2011-2759: Exposure of Sensitive Information to an Unauthorized Actor

The login page of IDSWebApp in the Web Administration Tool in IBM Tivoli Directory Server TDS 6.2 before 6.2.0.3-TIV-ITDS-IF0004 does not have an off autocomplete attribute for authentication fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstati...

CVE-2011-2758: Improper Authentication

IDSWebApp in the Web Administration Tool in IBM Tivoli Directory Server TDS 6.2 before 6.2.0.3-TIV-ITDS-IF0004 does not require authentication for access to LDAP Server log files, which allows remote attackers to obtain sensitive information via a crafted URL...

PT-2011-4069

Name of the Vulnerable Software and Affected Versions IBM Tivoli Directory Server versions prior to 6.2.0.3-TIV-ITDS-IF0004 Description The issue concerns the login page of IDSWebApp in the Web Administration Tool, where the lack of an autocomplete attribute for authentication fields makes it...

PT-2011-4068

Name of the Vulnerable Software and Affected Versions IBM Tivoli Directory Server TDS versions 6.2 through 6.2.0.3-TIV-ITDS-IF0004 Description The issue allows remote attackers to obtain sensitive information via a crafted URL because authentication is not required for access to LDAP Server log...

[SECURITY] Fedora 15 Update: phpMyAdmin-3.4.3.1-1.fc15

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index es, users, permissions, while you still have the ability to directly...

[SECURITY] Fedora 14 Update: phpMyAdmin-3.4.3.1-1.fc14

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index es, users, permissions, while you still have the ability to directly...

CVE-2011-0287

Unspecified vulnerability in the BlackBerry Administration API in Research In Motion RIM BlackBerry Enterprise Server BES software 5.0.1 through 5.0.3, and BlackBerry Enterprise Server Express software 5.0.1 through 5.0.3, allows remote attackers to read text files or cause a denial of service vi...

Design/Logic Flaw

Unspecified vulnerability in the BlackBerry Administration API in Research In Motion RIM BlackBerry Enterprise Server BES software 5.0.1 through 5.0.3, and BlackBerry Enterprise Server Express software 5.0.1 through 5.0.3, allows remote attackers to read text files or cause a denial of service vi...

CVE-2011-0287

Unspecified vulnerability in the BlackBerry Administration API in Research In Motion RIM BlackBerry Enterprise Server BES software 5.0.1 through 5.0.3, and BlackBerry Enterprise Server Express software 5.0.1 through 5.0.3, allows remote attackers to read text files or cause a denial of service vi...

CVE-2011-0287: Undefined Security Weakness

Unspecified vulnerability in the BlackBerry Administration API in Research In Motion RIM BlackBerry Enterprise Server BES software 5.0.1 through 5.0.3, and BlackBerry Enterprise Server Express software 5.0.1 through 5.0.3, allows remote attackers to read text files or cause a denial of service vi...

Aruba Advisory AID-070611 Cross Site Scripting vulnerability in ArubaOS and AirWave Administration Web Interfaces

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ADVISORY NUMBER AID-070611 Advisory 1: TITLE Cross Site Scripting vulnerability in ArubaOS and AirWave Administration Web Interfaces. SUMMARY A persistent Cross Site Scripting vulnerability XSS was discovered where an attacker could plant an AP with...

Netgear VMDG480 Cross Site Scripting

Persistent HTML Injection/XSS in Netgear VMDG480 Routers ---------------------------------------------------------- This vulnerability requires the user to be logged in as the administrator. The vulnerability exists in the RgFirewallEL.asp page of the router and is typically accessible within a L...

Portech MV-372 Denial Of Service / Bypass

Portech MV-372 Mobile VoIP Multiple Vulnerabilities 1. Description Multiple vulnerabilities have been found in Portech MV-372 Mobile VoIP Gateway which allows an attacker to compromise the device and/or initiate a denial of service attack against it’s telnet service. The ’Device details’ section...

FreeBSD : mambo -- multiple SQL injection vulnerabilities (8a5770b4-54b5-11db-a5ae-00508d6a62df)

James Bercegay reports : Mambo is vulnerable to an Authentication Bypass issue that is due to a SQL Injection in the login function. The SQL Injection is possible because the $passwd variable is only sanitized when it is not passed as an argument to the function. Omid reports : There are several...

CVE-2011-1480

CVE-2011-1480 affects PHP-Nuke (admin.php) in the admin backend of PHP-Nuke 8.0 and earlier. The vulnerability is an SQL injection via the chng_uid parameter, allowing remote attackers to execute arbitrary SQL commands. The available connected documents confirm the affected software/version range...