CVE-2013-0571

Cross-site scripting XSS vulnerability in IBM Document Connect for Application Support Facility aka DC4ASF before 1.0.0.1218 in Application Support Facility ASF 3.4 for z/OS on Windows, Linux, and AIX allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Document Connect for Application Support Facility aka DC4ASF before 1.0.0.1218 in Application Support Facility ASF 3.4 for z/OS on Windows, Linux, and AIX allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Document Connect for Application Support Facility aka DC4ASF before 1.0.0.1218 in Application Support Facility ASF 3.4 for z/OS on Windows, Linux, and AIX allows remote authenticated users to inject content, and conduct phishing attacks, via unspecifi...

CVE-2013-0571

Cross-site scripting XSS vulnerability in IBM Document Connect for Application Support Facility aka DC4ASF before 1.0.0.1218 in Application Support Facility ASF 3.4 for z/OS on Windows, Linux, and AIX allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2013-0572

CVE-2013-0572 affects IBM Document Connect for Application Support Facility (DC4ASF) before 1.0.0.1218 in ASF 3.4 for z/OS, Windows, Linux, and AIX. The vulnerability is a cross-site scripting (XSS) issue that could allow remote authenticated users to inject content and conduct phishing attacks v...

CVE-2013-0571: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Document Connect for Application Support Facility aka DC4ASF before 1.0.0.1218 in Application Support Facility ASF 3.4 for z/OS on Windows, Linux, and AIX allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2013-0572: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Document Connect for Application Support Facility aka DC4ASF before 1.0.0.1218 in Application Support Facility ASF 3.4 for z/OS on Windows, Linux, and AIX allows remote authenticated users to inject content, and conduct phishing attacks, via unspecifi...

PT-2013-2433

Name of the Vulnerable Software and Affected Versions IBM Document Connect for Application Support Facility DC4ASF version 1.0.0.1217 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a crafted URL. This can be exploited by...

PT-2013-2434

Name of the Vulnerable Software and Affected Versions IBM Document Connect for Application Support Facility DC4ASF versions prior to 1.0.0.1218 Description The issue allows remote authenticated users to inject content and conduct phishing attacks via unspecified vectors, due to a cross-site...

RedHat Update for kernel RHSA-2013:0744-01

Check for the Version of kernel OpenVAS Vulnerability Test RedHat Update for kernel RHSA-2013:0744-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Scientific Linux Security Update : Scientific Linux 6 kernel on SL6.x i386/x86_64

The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues : - The proc file system could allow a local, unprivileged user to obtain sensitive information or possibly cause integrity issues. CVE-2011-1020, Moderate -...

Chinese spied on NATO officials using Facebook Friends

Chinese spied on NATO officials using Facebook Friends An online scam has been exposed in which senior British military and government officials were tricked into becoming Facebook friends with someone masquerading as U.S. Admiral James Stavridis, NATO's Supreme Allied Commander and lead officer ...

Celebrating 5th Birthday of Wikileaks (Born : 4th Oct 2006)

Celebrating 5th Birthday of Wikileaks Born : 4th Oct 2006 The wikileaks.org domain name was registered on 4 October 2006. The website was unveiled, and published its first document, in December 2006. The site claims to have been "founded by Chinese dissidents, journalists, mathematicians and...

RedHat Update for dbus RHSA-2011:1132-01

Check for the Version of dbus OpenVAS Vulnerability Test RedHat Update for dbus RHSA-2011:1132-01 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Debian DSA-2154-1 : exim4 - privilege escalation

A design flaw CVE-2010-4345 in exim4 allowed the local Debian-exim user to obtain root privileges by specifying an alternate configuration file using the -C option or by using the macro override facility -D option. Unfortunately, fixing this vulnerability is not possible without some changes in...

Stuxnet

Before WikiLeaks emerged to dominate the news cycle in November, Stuxnet was the leader in the clubhouse for most overhyped, misconstrued and misunderstood story of the year. The worm burst onto the scene in July when researchers discovered it using four previously unknown Windows bugs and...

CVE-2010-3739

The audit facility in the Security component in IBM DB2 UDB 9.5 before FP6a uses instance-level audit settings to capture connection aka CONNECT and AUTHENTICATION events in certain circumstances in which database-level audit settings were intended, which might make it easier for remote attackers...

CVE-2010-3739: Improper Authentication

The audit facility in the Security component in IBM DB2 UDB 9.5 before FP6a uses instance-level audit settings to capture connection aka CONNECT and AUTHENTICATION events in certain circumstances in which database-level audit settings were intended, which might make it easier for remote attackers...

PT-2010-5033

Name of the Vulnerable Software and Affected Versions IBM DB2 UDB version 9.5 before FP6a Description The issue affects the audit facility in the Security component, where instance-level audit settings are used to capture connection events, such as CONNECT and AUTHENTICATION, under certain...

IBM DB2 9.5 < Fix Pack 6a Multiple Vulnerabilities

According to its version, the installation of IBM DB2 9.5 running on the remote host is prior to 9.5 Fix Pack 6. It is, therefore, affected by one or more of the following issues : - The Install component on Linux, UNIX, and Windows enforces an unintended limit on password length, which makes it...