PT-2012-4102

Name of the Vulnerable Software and Affected Versions HP Business Service Management BSM version 9.12 Description The issue allows remote attackers to execute arbitrary JSP code within the JBOSS Application Server component. This is achieved by uploading crafted .war files due to improper...

CVE-2011-0274

HP BAC (Business Availability Center) and BSM (Business Service Management) versions affected are BAC 7.x up to 7.55, BAC 8.x up to 8.05, and BSM up to 9.01. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via unspecified ...

CVE-2008-4081

admin/login.php in Stash 1.0.3 allows remote attackers to bypass authentication and gain administrative access by setting a bsm cookie...

Authentication flaw

admin/login.php in Stash 1.0.3 allows remote attackers to bypass authentication and gain administrative access by setting a bsm cookie...

CVE-2008-4081

admin/login.php in Stash 1.0.3 allows remote attackers to bypass authentication and gain administrative access by setting a bsm cookie...

CVE-2008-4081

CVE-2008-4081 affects Stash 1.0.3: admin/login.php permits remote authentication bypass by setting a bsm cookie, enabling administrative access. The NVD lists a CVSS 2.0 base score of 7.5 (HIGH) with network access and low attack complexity. No explicit remediation details are provided in the con...

CVE-2008-4081: Improper Authentication

admin/login.php in Stash 1.0.3 allows remote attackers to bypass authentication and gain administrative access by setting a bsm cookie...

CVE-2007-5422

Unspecified vulnerability in "Solaris Auditing" in the Basic Security Module BSM in Sun Solaris 10, when configured for auditing of networking nt events, allows local users to cause a denial of service panic via unspecified vectors...

CVE-2007-5422

CVE-2007-5422 affects Sun Solaris 10, specifically the Solaris Auditing feature within the Basic Security Module (BSM). When configured to audit networking (nt) events, a local attacker can trigger a denial-of-service (panic) via unspecified vectors. The available sources describe the affected co...

Sql injection

SQL injection vulnerability in BSM Store Dependent Forums 1.02 allows remote attackers to execute arbitrary SQL commands via a Username field in an unspecified component, probably the FrmUserName parameter in login.asp...

CVE-2007-4095

SQL injection vulnerability in BSM Store Dependent Forums 1.02 allows remote attackers to execute arbitrary SQL commands via a Username field in an unspecified component, probably the FrmUserName parameter in login.asp...

CVE-2007-4095

SQL injection vulnerability in BSM Store Dependent Forums 1.02 allows remote attackers to execute arbitrary SQL commands via a Username field in an unspecified component, probably the FrmUserName parameter in login.asp...

CVE-2007-4095

CVE-2007-4095 describes an SQL injection in BSM Store Dependent Forums 1.02, likely via the FrmUserName parameter in login.asp (Username field). The vulnerability allows remote attackers to execute arbitrary SQL commands, impacting data confidentiality, integrity, and potentially availability as ...

CVE-2007-4095: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in BSM Store Dependent Forums 1.02 allows remote attackers to execute arbitrary SQL commands via a Username field in an unspecified component, probably the FrmUserName parameter in login.asp...

BSM Store Dependent Forums 1.02 - Username SQL Injection

BSM Store Dependent Forums 1.02 - Username SQL Injection source: https://www.securityfocus.com/bid/25072/info BSM Store Dependent Forums is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...

CVE-2007-2465

CVE-2007-2465 affects Sun Solaris 9 (Solaris 9 SPARC and x86) when Solaris Auditing (BSM) is enabled for file read, write, attribute modify, create, or delete audit classes. The vulnerability reportedly allows local users to cause a denial of service (panic) via unknown vectors, possibly related ...

CVE-2007-1940

IBM Tivoli Business Service Manager TBSM 4.1 before Interim Fix 1 logs passwords in plaintext, which allows local users to obtain sensitive information by reading 1 ncisetup.db or 2 msi.log...

Solaris 2.5.1 (i386) : 104469-20

The remote host is missing Sun Security Patch number 104469-20 Solstice AdminSuite 2.3x86/AutoClient 2.1x86: y2000 NIS+ BSM. Date this patch was last updated by Sun : Thu Nov 17 07:35:39 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ Thi...

Solaris 7 (sparc) : 104468-20

The remote host is missing Sun Security Patch number 104468-20 Solstice AdminSuite 2.3/AutoClient 2.1: y2000 NIS+ BSM. Date this patch was last updated by Sun : Thu Nov 17 06:28:21 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This scri...

Solaris 2.6 (sparc) : 104468-20

The remote host is missing Sun Security Patch number 104468-20 Solstice AdminSuite 2.3/AutoClient 2.1: y2000 NIS+ BSM. Date this patch was last updated by Sun : Thu Nov 17 06:28:21 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This scri...