PT-2014-3898

Name of the Vulnerable Software and Affected Versions IBM BladeCenter Advanced Management Module AMM versions prior to 3.66E IBM Integrated Management Module IMM versions prior to 1.43 IBM Integrated Management Module II IMM2 versions prior to 4.15 Description The issue allows attackers to execut...

PT-2014-2732

Name of the Vulnerable Software and Affected Versions Integrated Management Module IMM 2 versions 1.00 through 2.00 Description The issue allows remote attackers to defeat cryptographic protection mechanisms via a brute-force attack against SSL or TLS traffic, due to the support of SSL cipher...

Default credentials

The Intelligent Platform Management Interface IPMI implementation in Integrated Management Module IMM on IBM BladeCenter, Flex System, System x iDataPlex, and System x3 servers uses cleartext for password storage, which allows context-dependent attackers to obtain sensitive information by reading...

PT-2013-4801

Name of the Vulnerable Software and Affected Versions Integrated Management Module IMM and Integrated Management Module II IMM2 affected versions not specified Description The issue concerns the Intelligent Platform Management Interface IPMI implementation, which has a default password for the IP...

CVE-2013-4037: Undefined Security Weakness

The RAKP protocol support in the Intelligent Platform Management Interface IPMI implementation in Integrated Management Module IMM and Integrated Management Module II IMM2 on IBM BladeCenter, Flex System, System x iDataPlex, and System x3 servers sends a password hash to the client, which makes i...

CVE-2011-4823: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Vik Real Estate comvikrealestate component 1.0 for Joomla! allow remote attackers to execute arbitrary SQL commands via the 1 contract parameter in a results action and 2 imm parameter in a show action to index.php...

PT-2011-5123

Name of the Vulnerable Software and Affected Versions com vikrealestate version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the contract parameter in a results action and the imm parameter in a show action to "index.php"...