Lucene search
K

5 matches found

Cvelist
Cvelist
added 2010/09/14 4:39 p.m.11 views

CVE-2010-0154

Directory traversal vulnerability in sla/index.php in the Local Management Interface LMI on the IBM Proventia Network Mail Security System PNMSS appliance with firmware before 2.5 allows remote authenticated users to read arbitrary files via a .. dot dot in the l parameter, related to an "Insecur...

6AI score0.00134EPSS
Exploits2References2
securityvulns
securityvulns
added 2010/09/14 12:0 a.m.61 views

MVSA-10-007 / CVE-2010-0152 - IBM Proventia Mail Security System - Multiple persistent and reflected XSS vulnerabilities

Security Advisory: MVSA-10-007 / CVE-2010-0152 Vendor: IBM Products: Proventia Network Mail Security System Vulnerabilities: Multiple Cross-Site Scripting XSS Risk: High Attack Vector: From Remote Authentication: Not Required/Required Reference:...

4.3CVSS0.5AI score0.00202EPSS
Exploits2
securityvulns
securityvulns
added 2010/09/14 12:0 a.m.52 views

MVSA-10-006 / CVE-2010-0153 - IBM Proventia Network Mail Security System - Cross-Site Request Forgery vulnerabilities

Security Advisory: MVSA-10-006 / CVE-2010-0153 Vendor: IBM Products: Proventia Network Mail Security System Vulnerabilities: Cross-Site Request Forgery XSRF Risk: High Attack Vector: From Remote Authentication: Required Reference: http://www.ventuneac.net/security-advisories/MVSA-10-006 Descripti...

6.8CVSS0.7AI score0.0013EPSS
Exploits0
Packet Storm
Packet Storm
added 2010/09/14 12:0 a.m.32 views

Proventia Network Mail Security System Cross Site Scripting

Security Advisory: MVSA-10-007 / CVE-2010-0152 Vendor: IBM Products: Proventia Network Mail Security System Vulnerabilities: Multiple Cross-Site Scripting XSS Risk: High Attack Vector: From Remote Authentication: Not Required/Required Reference:...

4.3CVSS0.2AI score0.00202EPSS
Exploits2
Packet Storm
Packet Storm
added 2010/09/14 12:0 a.m.34 views

Proventia Network Mail Security System CRLF Injection

Security Advisory: MVSA-10-009 / CVE-2010-0155 Vendor: IBM Products: Proventia Network Mail Security System Vulnerabilities: CRLF Injection Risk: Medium Attack Vector: From Remote Authentication: Required Reference: http://www.ventuneac.net/security-advisories/MVSA-10-009 Description Web-based...

3.5CVSS0.2AI score0.00155EPSS
Exploits1
Rows per page
Query Builder