CVE-2014-3052: Undefined Security Weakness

The reverse-proxy feature in IBM Security Access Manager ISAM for Web 8.0 with firmware 8.0.0.2 and 8.0.0.3 interprets the jct-nist-compliance parameter in the opposite of the intended manner, which makes it easier for remote attackers to obtain sensitive information by leveraging weak SSL...

PT-2014-5047

Name of the Vulnerable Software and Affected Versions IBM Security Access Manager ISAM for Mobile versions 8.0.0.0 through 8.0.0.3 IBM Security Access Manager for Web versions 7.0, 8.0.0.2, 8.0.0.3 Description The issue allows remote attackers to bypass authentication via a login action with...

CVE-2014-0963

The Reverse Proxy feature in IBM Global Security Kit aka GSKit in IBM Security Access Manager ISAM for Web 7.0 before 7.0.0-ISS-SAM-IF0006 and 8.0 before 8.0.0.3-ISS-WGA-IF0002 allows remote attackers to cause a denial of service infinite loop via crafted SSL messages...

PT-2014-3979

Name of the Vulnerable Software and Affected Versions IBM Security Access Manager ISAM for Web versions 7.0 through 7.0.0-ISS-SAM-IF0005 IBM Security Access Manager ISAM for Web versions 8.0 through 8.0.0.3-ISS-WGA-IF0001 Description The issue allows remote attackers to cause a denial of service,...

PT-2013-4820

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 6.1 before 6.1.0.47 IBM WebSphere Application Server versions 7.0 before 7.0.0.31 IBM WebSphere Application Server versions 8.0 before 8.0.0.8 IBM WebSphere Application Server versions 8.5 before 8.5.5...

ESA-2013-031: RSA® Authentication Agent Cross-Site Scripting (XSS) Vulnerability

ESA-2013-031.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-031: RSA® Authentication Agent Cross-Site Scripting XSS Vulnerability EMC Identifier: ESA-2013-031 CVE Identifier: CVE-2013-0942 Severity Rating: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P Affected Products: RSA®...

CVE-2011-3218

The "Save for Web" selection in QuickTime Player in Apple Mac OS X through 10.6.8 exports HTML documents that contain an http link to a script file, which allows man-in-the-middle attackers to conduct cross-site scripting XSS attacks by spoofing the http server during local viewing of an exported...

Cross site scripting

The "Save for Web" selection in QuickTime Player in Apple Mac OS X through 10.6.8 exports HTML documents that contain an http link to a script file, which allows man-in-the-middle attackers to conduct cross-site scripting XSS attacks by spoofing the http server during local viewing of an exported...

PT-2011-4311

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions through 10.6.8 Description The issue allows man-in-the-middle attackers to conduct cross-site scripting XSS attacks. This occurs when the "Save for Web" selection in QuickTime Player exports HTML documents containing an...

CVE-2011-3218: Improper Neutralization of Input During Web Page Generation

The "Save for Web" selection in QuickTime Player in Apple Mac OS X through 10.6.8 exports HTML documents that contain an http link to a script file, which allows man-in-the-middle attackers to conduct cross-site scripting XSS attacks by spoofing the http server during local viewing of an exported...

CVE-2009-0903: Undefined Security Weakness

IBM WebSphere Application Server WAS 7.0 before 7.0.0.3, and the Feature Pack for Web Services for WAS 6.1 before 6.1.0.25, when a WS-Security policy is established at the operation level, does not properly handle inbound requests that lack a SOAPAction or WS-Addressing Action, which allows remot...

CVE-2008-5414: Undefined Security Weakness

Unspecified vulnerability in the Feature Pack for Web Services in the Web Services Security component in IBM WebSphere Application Server WAS 7 before 7.0.0.1 has unknown impact and attack vectors related to "userNameToken."...

CVE-2007-5531: Undefined Security Weakness

Unspecified vulnerability in Oracle Help for Web, as used in Oracle Application Server, Oracle Database 10.2.0.3, and Enterprise Manager 10.1.0.6, has unknown impact and remote attack vectors, aka EM02...

mimesweeperXSS.txt

This is a multi-part message in MIME format. ------=NextPart00101C6A369.3FE6BA2F Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable =20 MIMESweeper For Web 5.X Cross Site Scripting =20 =20 I. INTRODUCTION =20 MIMESweeper For Web is a policy-based content...

CVE-2006-3522: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Clearswift MIMEsweeper for Web before 5.1.15 Hotfix allows remote attackers to inject arbitrary web script or HTML via the URL, which is reflected back in an error message when trying to access a blocked web site...

CVE-2006-3523: Undefined Security Weakness

Clearswift MIMEsweeper for Web before 5.1.15 Hotfix allows remote attackers to cause a denial of service crash via an encrypted archived .RAR file, which triggers a scan error and causes the Web Policy Engine service to terminate...

CVE-2005-4734: Undefined Security Weakness

Stack-based buffer overflow in IISWebAgentIF.dll in RSA Authentication Agent for Web aka SecurID Web Agent 5.2 and 5.3 for IIS allows remote attackers to execute arbitrary code via a long url parameter in the Redirect method...

CVE-2005-4526: Undefined Security Weakness

Clearswift MIMEsweeper For Web a.k.a. WEBsweeper 4.0 through 5.1 allows remote attackers to bypass filtering via a URL that does not include a .exe extension but returns an executable file...

CVE-2005-3329: Undefined Security Weakness

Cross-site scripting XSS vulnerability in RSA Authentication Agent for Web 5.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the image parameter in a GetPic operation...

SEC-20051025-1.txt

SEC-CONSULT Security Advisory 20051025-1 ===================================================================== title: RSA ACE Web Agent XSS program: RSA ACE/Agent for Web vulnerable version: 5.1, 5.1.1 newer versions may be vulnerable homepage: www.rsasecurity.com found: 2005-10 by: SEC-CONSULT /...