332 matches found
CVE-2007-5582: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the login page in Cisco CiscoWorks Server CS, possibly 2.6 and earlier, when using CiscoWorks Common Services 3.0.x and 3.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
[Full-disclosure] CAID 34013 - CA Common Services CAIRIM on z/OS LMP SVC vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: CAID 34013 - CA Common Services CAIRIM on z/OS LMP SVC vulnerability CA Vulnerability ID: 34013 CA Advisory Date: 2006-05-02 Discovered By: IBM Global Services Impact: Local attacker can gain escalated privileges. Summary: A potential...
CA Common Services CAIRIM on z/OS LMP SVC privilege escalation
No description provided...
Design/Logic Flaw
Unspecified vulnerability in CA Resource Initialization Manager CAIRIM 1.x before 20060502, as used in z/OS Common Services and the LMP component in multiple products, allows attackers to violate integrity via a certain "problem state program" that uses SVC to gain access to supervisor state, key...
CVE-2006-2201
Unspecified vulnerability in CA Resource Initialization Manager CAIRIM 1.x before 20060502, as used in z/OS Common Services and the LMP component in multiple products, allows attackers to violate integrity via a certain "problem state program" that uses SVC to gain access to supervisor state, key...
CVE-2006-2201
CAIRIM (CA Resource Initialization Manager) 1.x before 20060502 has an integrity violation due to a "problem state program" that uses SVC to elevate to supervisor state (key 0) in z/OS Common Services and LMP components across multiple products. This CVE affects CAIRIM and is documented with a vu...
CVE-2006-2201
Unspecified vulnerability in CA Resource Initialization Manager CAIRIM 1.x before 20060502, as used in z/OS Common Services and the LMP component in multiple products, allows attackers to violate integrity via a certain "problem state program" that uses SVC to gain access to supervisor state, key...
CVE-2006-2201: Undefined Security Weakness
Unspecified vulnerability in CA Resource Initialization Manager CAIRIM 1.x before 20060502, as used in z/OS Common Services and the LMP component in multiple products, allows attackers to violate integrity via a certain "problem state program" that uses SVC to gain access to supervisor state, key...
CVE-2004-2436
The vulnerability in Computer Associates Unicenter Common Services 3.0 and earlier stems from storing the SA database password in cleartext inside the TndAddNspTmp.bat file, enabling local privilege escalation. Affected software: Unicenter Common Services 3.0 and earlier. Root cause: cleartext cr...
CVE-2004-2436
Computer Associates Unicenter Common Services 3.0 and earlier stores the database "SA" password in cleartext in the TndAddNspTmp.bat file, which could allow local users to gain privileges...
CVE-2004-2436: Undefined Security Weakness
Computer Associates Unicenter Common Services 3.0 and earlier stores the database "SA" password in cleartext in the TndAddNspTmp.bat file, which could allow local users to gain privileges...