Camtron CMNC-200 IP Camera - Authentication Bypass

Camtron CMNC-200 IP Camera - Authentication Bypass Finding 3: Web Based Administration Interface Bypass CVE: CVE-2010-4232 The CMNC-200 IP Camera has an administrative web interface that does not handle authentication properly. Using a properly formatted request, an attacker can bypass the...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM OmniFind Enterprise Edition before 9.1 allows remote attackers to inject arbitrary web script or HTML via the command parameter to the administration interface, as demonstrated by the command parameter to ESAdmin/collection.do...

CVE-2010-3894

Stack-based buffer overflow in the JavacomibmesossCryptionNativeESEncrypt function in /opt/IBM/es/lib/libffq.cryptionjni.so in the login form in the administration interface in IBM OmniFind Enterprise Edition before 8.5 FP6 allows remote attackers to execute arbitrary code via a long password...

CVE-2010-3890

IBM OmniFind Enterprise Edition (pre-9.1) contains multiple vulnerabilities tied to the administration interface. The primary issue CVE-2010-3890 is a Cross-Site Scripting (XSS) flaw where the GET parameter command in ESAdmin/collection.do is embedded into HTML without input validation, enabling ...

CVE-2010-3890

Cross-site scripting XSS vulnerability in IBM OmniFind Enterprise Edition before 9.1 allows remote attackers to inject arbitrary web script or HTML via the command parameter to the administration interface, as demonstrated by the command parameter to ESAdmin/collection.do...

PT-2010-5148

Name of the Vulnerable Software and Affected Versions IBM OmniFind Enterprise Edition versions prior to 8.5 FP6 Description The issue is related to a stack-based buffer overflow in the Java com ibm es oss CryptionNative ESEncrypt function. This function is located in the...

PT-2010-5144

Name of the Vulnerable Software and Affected Versions IBM OmniFind Enterprise Edition versions prior to 9.1 Description The issue allows remote attackers to inject arbitrary web script or HTML via the command parameter to the administration interface. This can be demonstrated by the command...

CVE-2010-3890: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM OmniFind Enterprise Edition before 9.1 allows remote attackers to inject arbitrary web script or HTML via the command parameter to the administration interface, as demonstrated by the command parameter to ESAdmin/collection.do...

IBM OmniFind Buffer Overflow Vulnerability

Exploit for multiple platform in category dos / poc ========================================== IBM OmniFind Buffer Overflow Vulnerability ========================================== Remote buffer overflow CVE-2010-3894 The administration interface has a login form with an username- and a...

IBM OmniFind - Buffer Overflow

IBM OmniFind - Buffer Overflow Remote buffer overflow CVE-2010-3894 The administration interface has a login form with an username- and a passwordfield. Entering a valid username default value is »esadmin« and a very long string into the password field a buffer overflow is triggered. The function...

IBM OmniFind - Buffer Overflow

Remote buffer overflow CVE-2010-3894 The administration interface has a login form with an username- and a passwordfield. Entering a valid username default value is »esadmin« and a very long string into the password field a buffer overflow is triggered. The function...

[SECURITY] Fedora 13 Update: glpi-0.72.4-3.svn11497.fc13

GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...

[SECURITY] Fedora 12 Update: glpi-0.72.4-3.svn11497.fc12

GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...

[SECURITY] Fedora 14 Update: luci-0.22.4-2.0.b9faf868074git.fc14

Luci is a web-based high availability administration application built on t he TurboGears 2 framework...

[SECURITY] Fedora 13 Update: luci-0.22.4-2.0.b9faf868074git.fc13

Luci is a web-based high availability administration application built on t he TurboGears 2 framework...

Symantec IM Manager < 8.4.16 Multiple SQL Injections (SYM10-010)

The version of Symantec IM Manager installed on the remote Windows host is earlier than 8.4.16. Such versions are reportedly affected by multiple SQL injection vulnerabilities in its administration console. An unauthenticated, remote attacker may be able to exploit these issues to compromise the...

New Rules Enable Military Assistance During Domestic Cyber-Attacks

The Obama administration has revised federal policy, enabling the military to assist during a domestic cyber-attack, reported the New York Times on Oct. 21. Typically, the military cannot deploy units within the country's borders, except for natural disasters, and even then, a presidential order ...

Civil Liberties Grade Drops for Obama Administration in Latest Privacy Report

The Electronic Privacy Information Center EPIC has released its annual Privacy Report Card for the Obama Administration. Compared to last year's results, the administration has retained its good grade in only one privacy subject: cybersecurity. "One of the most difficult subjects for any...

Oracle iPlanet Web Server Multiple Unspecified Vulnerabilities (cpuoct2010)

Oracle iPlanet Web Server is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Novell iManager getMultiPartParameters Unauthorized File Upload

Novell iManager is a web-based administration console that provides management of many other Novell products. The iManager service itself is a Java web application running on top of the Tomcat application container. An unauthorized file upload vulnerability has been reported in Novell iManager. T...