CVE-2016-3029

IBM Security Access Manager for Web is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...

StoreFront errors with "Cannot complete your request" & event log "Failed to run discovery"

While users attempt to connect to the Receiver for Web site and enumerate applications published, the page displays an error "Cannot Complete your Request". Below errors will be seen in the DebugView logs: Citrix.Web.DeliveryServicesProxy.ConfigLoader.DiscoveryServiceException: An error occurred...

ICA Connection Stuck at "Connection in Progress" on StoreFront

When users launch an application from the Receiver for web, after getting the ICA file to the connection, the progress bar gets stuck at"Connection in Progress". The VDAs in this scenario are PVS provisioned machines, which works only for few initial hours post the reboot...

Unspecified Vulnerability in Oracle Enterprise Manager Grid Control Oracle Application Testing Suite Load Testing for Web Apps Component (CNVD-2016-00674)

Oracle Enterprise Manager is an enhanced management suite for ORACLE Fusion endpoint software. An unspecified security vulnerability in the Oracle Application Testing Suite Load Testing for Web Apps component of Oracle Enterprise Manager Grid Control allows remote attackers to exploit the...

Unspecified Vulnerability in Oracle Enterprise Manager Grid Control Oracle Application Testing Suite Test Manager for Web Apps Component (CNVD-2016-00670)

Oracle Enterprise Manager is an enhanced management suite for ORACLE Fusion endpoint software. An unspecified vulnerability in the Oracle Application Testing Suite Test Manager for Web Apps component of Oracle Enterprise Manager Grid Control allows remote attackers to exploit the vulnerability to...

CVE-2016-0490

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Test Manager for Web Apps, a different vulnerability than...

CVE-2016-0486

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps, a different vulnerability than CVE-2016-0480,...

CVE-2016-0484

CVE-2016-0484 affects Oracle Application Testing Suite (in Oracle Enterprise Manager Grid Control) with a DownloadServlet scriptPath directory traversal in 12.4.0.2/12.5.0.2. Exploitation described in ZDI-16-034 and CPAI-2016-0342 indicates remote, unauthenticated file exfiltration via scriptPath...

CVE-2016-0491

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect integrity and availability via unknown vectors related to Load Testing for Web Apps. NOTE: the previous information is from...

CVE-2016-0488

CVE-2016-0488 affects the Oracle Application Testing Suite component within Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2. The description describes an unspecified vulnerability impacting confidentiality and integrity via load testing for web apps; specific attack vectors are not p...

CVE-2016-0478

CVE-2016-0478 corresponds to a directory traversal vulnerability in Oracle Application Testing Suite’s DownloadServlet. Affected products/versions cited: Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2, involving the DownloadServlet scriptName parameter; exploitation could allow read...

CVE-2016-0492

CVE-2016-0492 affects Oracle Application Testing Suite (ATS) within Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2. The vulnerability enables remote attackers to bypass authentication and potentially access or modify data through a directory traversal scenario involving the isAllowe...

IBM Security Access Manager for Web Information Disclosure Vulnerability

IBM Security Access Manager for Web is a suite of products used in user authentication, authorization and Web single sign-on solutions that provide user access management and Web application protection. An information disclosure vulnerability exists in IBM Security Access Manager for Web, which...

Font <= 7.5 - Authenticated Path Traversal

The Font - official webfonts plugin of Fonts For Web. NO CODING! Just click & change font size, color and font face visually! WordPress plugin was affected by an Authenticated Path Traversal security vulnerability...

Microsoft Web Services on Devices API Memory Corruption (MS09-063) - Ver2 (CVE-2009-2512)

The WSDAPI is an implementation of the Devices Profile for Web Services DPWS for Windows Vista and Windows Server 2008. The DPWS constrains Web Services specifications so that clients can easily discover devices. A remote code execution vulnerability has been reported in the Web Service on Device...

CVE-2014-6088

IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 allow remote attackers to obtain sensitive information by sniffing the network during use of the null SSL cipher...

Code injection

IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 allow remote authenticated users to cause a denial of service disrupted system operations by uploading a file to a protected area...

CVE-2014-0963

The Reverse Proxy feature in IBM Global Security Kit aka GSKit in IBM Security Access Manager ISAM for Web 7.0 before 7.0.0-ISS-SAM-IF0006 and 8.0 before 8.0.0.3-ISS-WGA-IF0002 allows remote attackers to cause a denial of service infinite loop via crafted SSL messages...

ESA-2013-031: RSA® Authentication Agent Cross-Site Scripting &#40;XSS&#41; Vulnerability

ESA-2013-031.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-031: RSA® Authentication Agent Cross-Site Scripting XSS Vulnerability EMC Identifier: ESA-2013-031 CVE Identifier: CVE-2013-0942 Severity Rating: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P Affected Products: RSA®...

CVE-2011-3218

The "Save for Web" selection in QuickTime Player in Apple Mac OS X through 10.6.8 exports HTML documents that contain an http link to a script file, which allows man-in-the-middle attackers to conduct cross-site scripting XSS attacks by spoofing the http server during local viewing of an exported...