Mantis BugTracker 1.2.19 Open Redirect

Mantis BugTracker 1.2.19 URL Redirection to Untrusted Site 'Open Redirect' - Affected Vendor: Mantis - Affected System: BugTracker 1.2.19 - Vulnerabilities' Status: Fixed - Associated CWEs: CWE-601: URL Redirection to Untrusted Site 'Open Redirect' http://cwe.mitre.org/data/definitions/601.html...

MX-SmartTimer 13.18.5.11 SQL Injection

"CVE-2014-5440 MX-SmartTimer SQL Injection" - Vendor Status: CONFIRMED - Vendor Disclosure Date: July, 17th, 2014 - Public Disclosure Date: August, 29th, 2014 - Affected Vendor: MPEX Business Solutions http://www.mpexsolutions.com/ - Affected System: MX-SmartTimer Version 13.18.5.11 - Vulnerabili...

Titan FTP Server 10.32 Build 1816 - Directory Traversal Vulnerability

Titan FTP server version 10.32 Build 1816 suffers from multiple directory traversal vulnerabilities. "Titan FTP Server Directory Traversal Vulnerabilities" - Affected Vendor: South River Technologies - Affected System: Titan FTP Server software Version 10.32 Build 1816 - Vendor Disclosure Date:...

Titan FTP Server 10.32 Build 1816 - Directory Traversal

Titan FTP Server 10.32 Build 1816 - Directory Traversal "Titan FTP Server Directory Traversal Vulnerabilities" - Affected Vendor: South River Technologies - Affected System: Titan FTP Server software Version 10.32 Build 1816 - Vendor Disclosure Date: January 27th, 2014 - Public Disclosure Date:...

SilverStripe(R) Information Exposure Through Query Strings in GET Request (CWE-598)

SilverStripeR Information Exposure Through Query Strings in GET Request CWE-598 - CVE: CVE-2013-2653 - CWE: CWE-598 - Deloitte Argentina Advisory Code: DTTAR-20130002 - Vendor Status: CONFIRMED - Vendor Disclosure Date: May, 8th, 2013. - Public Disclosure Date: August, 1st, 2013. - Vendors...

SilverStripe CMS 3.0.3 Information Disclosure

SilverStripeR Information Exposure Through Query Strings in GET Request CWE-598 - CVE: CVE-2013-2653 - CWE: CWE-598 - Deloitte Argentina Advisory Code: DTTAR-20130002 - Vendor Status: CONFIRMED - Vendor Disclosure Date: May, 8th, 2013. - Public Disclosure Date: August, 1st, 2013. - Vendors...

Trimble® Infrastructure GNSS Series Receivers Cross Site Scripting (XSS) vulnerability

Trimble® Infrastructure GNSS Series Receivers Cross Site Scripting XSS vulnerability: - CVE: CVE-2012-5053 - Deloitte Argentina Advisory Code: DTTAR-20130001 - Vendor Status: CONFIRMED - Public Disclosure Date: January, 15th, 2013. - Vendors Affected: Trimble - http://www.trimble.com/ - Systems...

Polycom® HDX® Video End Points Web Management Cross Site Scripting (XSS) vulnerability

Polycom® HDX® Video End Points Web Management Cross Site Scripting XSS vulnerability: - CVE: CVE-2012-4970 - Deloitte Argentina Advisory Code: DTTAR-20120001 - Vendor Status: CONFIRMED - Public Disclosure Date: December, 23rd, 2012. - Vendors Affected: Polycom - http://www.polycom.com/ - Systems...

Axway Secure Transport 5.1 SP2 Path Traversal Vulnerability

Exploit for windows platform in category web applications Secure Transport Path Traversal Vulnerability Public Disclosure Date: November 11, 2012 Vendors Affected: Axway http://www.axway.com Systems Affected: Secure Transport Problem: A path traversal vulnerability was identified in SecureTranspo...