CVE-2013-3038: Undefined Security Weakness

Unspecified vulnerability in IBM Rational Requirements Composer before 4.0.4 makes it easier for remote attackers to discover credentials via unknown vectors...

CVE-2013-3039: Improper Authentication

IBM Rational Requirements Composer before 4.0.4 does not properly perform authentication, which has unspecified impact and remote attack vectors...

CVE-2013-3037: Undefined Security Weakness

Unspecified vulnerability in IBM Rational Requirements Composer before 4.0.4 makes it easier for local users to gain privileges via unknown vectors...

PT-2013-4112

Name of the Vulnerable Software and Affected Versions IBM Rational Requirements Composer versions prior to 4.0.4 Description The issue makes it easier for remote attackers to discover credentials. Recommendations For versions prior to 4.0.4, update to version 4.0.4 or later to resolve the issue...

PT-2013-4110

Name of the Vulnerable Software and Affected Versions IBM Rational Requirements Composer versions prior to 4.0.4 Description The issue allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL. Recommendations For versions prior to...

PT-2013-4111

Name of the Vulnerable Software and Affected Versions IBM Rational Requirements Composer versions prior to 4.0.4 Description The issue makes it easier for local users to gain privileges via unknown vectors. Recommendations For versions prior to 4.0.4, update to version 4.0.4 or later to resolve t...

CVE-2012-4883

Multiple untrusted search path vulnerabilities in 3DVIA Composer V6R2012 HF1 Build 6.8.1.1652 allow local users to gain privileges via a Trojan horse 1 dwmapi.dll or 2 ibfs32.dll file in the current working directory, as demonstrated by a directory that contains a .smg file. NOTE: the provenance ...

CVE-2012-4883

Multiple untrusted search path vulnerabilities in 3DVIA Composer V6R2012 HF1 Build 6.8.1.1652 allow local users to gain privileges via a Trojan horse 1 dwmapi.dll or 2 ibfs32.dll file in the current working directory, as demonstrated by a directory that contains a .smg file. NOTE: the provenance ...

CVE-2012-4883

CVE-2012-4883 affects 3DVIA Composer V6R2012 HF1 Build 6.8.1.1652. The issue is an untrusted search path vulnerability that lets local users gain privileges via a Trojan horse (dwmapi.dll or ibfs32.dll) placed in the current working directory, demonstrated by a directory containing a .smg file. T...

CVE-2012-4883: Undefined Security Weakness

Multiple untrusted search path vulnerabilities in 3DVIA Composer V6R2012 HF1 Build 6.8.1.1652 allow local users to gain privileges via a Trojan horse 1 dwmapi.dll or 2 ibfs32.dll file in the current working directory, as demonstrated by a directory that contains a .smg file. NOTE: the provenance ...

PT-2012-5635

Name of the Vulnerable Software and Affected Versions 3DVIA Composer V6R2012 HF1 Build 6.8.1.1652 Description The issue allows local users to gain privileges via a Trojan horse dwmapi.dll or ibfs32.dll file in the current working directory. This can be demonstrated by a directory that contains a...

Mac OS X Multiple Vulnerabilities (2012-002)

This host is missing an important security update according to Mac OS X 10.6.8 Update/Mac OS X Security Update 2012-002. OpenVAS Vulnerability Test $Id: gbmacosxsu12-002.nasl 6521 2017-07-04 14:51:10Z cfischer $ Mac OS X Multiple Vulnerabilities 2012-002 Authors: Madhuri D Copyright: Copyright c...

CVE-2012-0657

Quartz Composer in Apple Mac OS X before 10.7.4, when the RSS Visualizer screensaver is enabled, allows physically proximate attackers to bypass screen locking and launch a Safari process via unspecified vectors...

Design/Logic Flaw

Quartz Composer in Apple Mac OS X before 10.7.4, when the RSS Visualizer screensaver is enabled, allows physically proximate attackers to bypass screen locking and launch a Safari process via unspecified vectors...

CVE-2012-0657

Technical details about CVE-2012-0657 are not provided in the connected documents. The initial description mentions OS X before 10.7.4 RSS Visualizer and screen-lock bypass, but no explicit affected versions beyond that are specified in the supplied sources.

CVE-2012-0657

Quartz Composer in Apple Mac OS X before 10.7.4, when the RSS Visualizer screensaver is enabled, allows physically proximate attackers to bypass screen locking and launch a Safari process via unspecified vectors...

CVE-2012-0657: Undefined Security Weakness

Quartz Composer in Apple Mac OS X before 10.7.4, when the RSS Visualizer screensaver is enabled, allows physically proximate attackers to bypass screen locking and launch a Safari process via unspecified vectors...

Mac OS X 10.7.x < 10.7.4 Multiple Vulnerabilities (BEAST)

The remote host is running a version of Mac OS X 10.7.x that is prior to 10.7.4. The newer version contains numerous security-related fixes for the following components : - Login Window - Bluetooth - curl - HFS - Kernel - libarchive - libsecurity - libxml - LoginUIFramework - PHP - Quartz Compose...

Mac OS X Multiple Vulnerabilities (Security Update 2012-002) (BEAST)

The remote host is running a version of Mac OS X 10.6 that does not have Security Update 2012-002 applied. This update contains multiple security-related fixes for the following components : - curl - Directory Service - ImageIO - libarchive - libsecurity - libxml - Quartz Composer - QuickTime -...

Security Release: Symfony 2.0.11 released

Symfony 2.0.11 has just been released and it contains a security vulnerability fix for the Serializer Component. If you are using the Serializer component, you should upgrade as soon as possible. The security vulnerability has been reported this morning by Sense of Security: "The XMLEncoder...