PT-2016-4155

Name of the Vulnerable Software and Affected Versions IBM Security Identity Manager ISIM Virtual Appliance versions 7.0.0.0 through 7.0.1.1 Description The issue is related to the mishandling of session expiration, which can be exploited by remote attackers to hijack sessions. This can occur when...

PT-2016-4153

Name of the Vulnerable Software and Affected Versions IBM Security Identity Manager ISIM Virtual Appliance versions 7.0.0.0 through 7.0.1.1 Description The issue allows local users to discover cleartext passwords by either reading a configuration file or examining a process. Recommendations For I...

PT-2016-4160

Name of the Vulnerable Software and Affected Versions IBM Security Identity Manager ISIM Virtual Appliance versions 7.0.0.0 through 7.0.1.1 Description The issue allows remote attackers to conduct clickjacking attacks via a crafted web site. Recommendations For versions 7.0.0.0 through 7.0.1.1,...

PT-2016-4151

Name of the Vulnerable Software and Affected Versions IBM Security Identity Manager ISIM Virtual Appliance versions 7.0.0.0 through 7.0.1.1 Description The issue concerns the mishandling of password creation, making it easier for remote attackers to obtain access by leveraging an attack against t...

PT-2016-4154

Name of the Vulnerable Software and Affected Versions IBM Security Identity Manager ISIM Virtual Appliance versions 7.0.0.0 through 7.0.1.1 Description The issue makes it easier for remote attackers to spoof users by leveraging knowledge of "traffic records" after logout, due to mishandled sessio...

CVE-2016-0340: Improper Access Control

IBM Security Identity Manager ISIM Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles session expiration, which allows remote attackers to hijack sessions by leveraging an unattended workstation...

CVE-2016-0338: Exposure of Sensitive Information to an Unauthorized Actor

IBM Security Identity Manager ISIM Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 allows local users to discover cleartext passwords by 1 reading a configuration file or 2 examining a process...

CVE-2016-0339: Improper Access Control

IBM Security Identity Manager ISIM Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles session identifiers after logout, which makes it easier for remote attackers to spoof users by leveraging knowledge of "traffic records."...

CVE-2016-0357: Improper Access Control

IBM Security Identity Manager ISIM Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 allows remote attackers to conduct clickjacking attacks via a crafted web site...

CVE-2014-0961

CVE-2014-0961 affects IBM Tivoli Identity Manager (ITIM) 5.0 (before 5.0.0.15), ITIM 5.1 (before 5.1.0.15), and IBM Security Identity Manager (ISIM) 6.0 (before 6.0.0.2). The root issue is a Cross-Site Request Forgery (CSRF) vulnerability that enables remote authenticated users to hijack the auth...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in mesajformu.asp in ASP Ziyaretci Defteri 1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 Isim, 2 Mesajiniz, and 3 E-posta fields. NOTE: these probably correspond to the isim, mesaj, and posta parameters to save.php...

CVE-2007-3887

Multiple cross-site scripting XSS vulnerabilities in mesajformu.asp in ASP Ziyaretci Defteri 1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 Isim, 2 Mesajiniz, and 3 E-posta fields. NOTE: these probably correspond to the isim, mesaj, and posta parameters to save.php...

CVE-2007-3887: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in mesajformu.asp in ASP Ziyaretci Defteri 1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 Isim, 2 Mesajiniz, and 3 E-posta fields. NOTE: these probably correspond to the isim, mesaj, and posta parameters to save.php...

Mini-Nuke<=1.8.2 SQL injection (6)

//mini-nuke board turk have many sql injection founded by Moroccan Security Team //Creetz to: Moroccan Security Team Dr.E-vil,Dr.Erase,H0550N,|ucifer,DaBDouB-MoSiKaR OverclockiX,ki11er ,Dranzelz,Esp!onLeRaVaGe,ameer,www.lezr.com and all muslim morocco 1...