EUVD-2013-5238

Malware in sbrugna...

EUVD-2014-0870

Malware in sbrugna...

EUVD-2014-0873

Malware in sbrugna...

EUVD-2014-0872

Malware in sbrugna...

EUVD-2014-0869

Malware in sbrugna...

EUVD-2014-0883

Malware in sbrugna...

EUVD-2014-0871

Malware in sbrugna...

EUVD-2013-5237

Malware in sbrugna...

EUVD-2013-2964

Malware in sbrugna...

CVE-2014-0841

IBM Rational Focal Point 6.4.0, 6.4.1, 6.5.1, 6.5.2, and 6.6.0 use a weak algorithm to hash passwords, which makes it easier for context-dependent attackers to obtain cleartext values via a brute-force attack. IBM X-Force ID: 90704...

Design/Logic Flaw

IBM Rational Focal Point 6.4.0, 6.4.1, 6.5.1, 6.5.2, and 6.6.0 use a weak algorithm to hash passwords, which makes it easier for context-dependent attackers to obtain cleartext values via a brute-force attack. IBM X-Force ID: 90704...

IBM Rational Focal Point Cross-Site Scripting Vulnerability (CNVD-2015-01906)

IBM Rational Focal Point is a Web-based product management system for IBM Rational with a built-in customer- and market-oriented product management process that provides workflow automation, information relevance analysis, statistical analysis of information, and prioritization analysis of...

IBM Rational Focal Point Default Credentials

Nessus was able to login to the remote IBM Rational Focal Point install using a default set of known credentials. A remote attacker using these credentials can gain administrative access to the web application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

IBM Rational Focal Point Login Servlet File Disclosure

Nessus was able to exploit a file disclosure vulnerability in the Login servlet on the remote IBM Focal Point install. A remote attacker could potentially use this vulnerability to view sensitive files such as configuration files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

CVE-2014-0839

IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 allows remote authenticated users to modify data via vectors involving a direct object reference...

CVE-2014-0840

Multiple cross-site scripting XSS vulnerabilities in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-0853

Multiple cross-site scripting XSS vulnerabilities in the 1 ForwardController and 2 AttributeEditor scripts in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-0842

The account-creation functionality in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 places the new user's default password within the creation page, which allows remote attackers to obtain sensitive information by reading the HTML source code...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 allows remote authenticated users to inject arbitrary web script or HTML by uploading a file...