CVE-2012-0226

Invensys Wonderware Information Server 4.0 SP1 and 4.5 Portal/Client are affected by CVE-2012-0226, a SQL injection vulnerability that could allow a remote attacker to execute arbitrary SQL commands via unspecified vectors. The ICS-CERT advisory confirms multiple vulnerabilities in these products...

CVE-2012-0225

Cross-site scripting XSS vulnerability in Invensys Wonderware Information Server 4.0 SP1 and 4.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-0225

Invensys Wonderware Information Server 4.0 SP1 and 4.5 (Portal and Client) contain a Cross-Site Scripting (CVE-2012-0225) vulnerability. ICS-CERT/ICS advisories indicate that, if exploited, these flaws could lead to denial of service, information disclosure, remote code execution, or session cred...

Buffer overflow

IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM InfoSphere DataStage 8.5 and 8.5.0.1 and other products, assigns incorrect ownership to unspecified files, which allows local users to gain privileges via unknown vectors...

CVE-2011-3124

IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM InfoSphere DataStage 8.5 and 8.5.0.1 and other products, assigns incorrect ownership to unspecified files, which allows local users to gain privileges via unknown vectors...

CVE-2011-3123

IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix/Linux (as used in IBM InfoSphere DataStage 8.5/8.5.0.1 and other products) is vulnerable to local privilege escalation caused by weak permissions on unspecified files. The description indicates that local users can gain privileges via unkn...

CVE-2011-2962

Multiple stack-based buffer overflows in Invensys Wonderware Information Server 3.1, 4.0, and 4.0 SP1 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via two unspecified ActiveX controls...

CVE-2011-2962

Multiple stack-based buffer overflows in Invensys Wonderware Information Server 3.1, 4.0, and 4.0 SP1 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via two unspecified ActiveX controls...

CVE-2011-2962

CVE-2011-2962 affects Wonderware Information Server 3.1, 4.0 and 4.0 SP1. The ICS-CERT advisory details a stack-based buffer overflow in two ActiveX controls that could allow remote code execution on vulnerable clients when a malicious page or file is opened. Invensys issued a patch to address th...

RSA Authentication Agent for Web Buffer Overflow (CVE-2005-1471)

The RSA Authentication Agent for Web for Internet Information Services IIS provides protection for selected web pages by securing them with the RSA SecurID authentication mechanism. When a user attempts to access a resource that is secured with the RSA SecurID, the RSA Agent authenticates the use...

Unisys Business Information Server Stack Buffer Overflow (CVE-2009-1628)

The Unisys Business Information Server is a business information management solution that provides data access, analysis and reporting in an open, enterprise-wide computing environment. Business Information Server transforms corporate data into information that is made available throughout the...

IBM InfoSphere Information Server存在缓冲区溢出和跨站脚本漏洞

Bugraq ID: 37245, 37246 IBM InfoSphere Information Server是一款数据集成软件平台，可以帮助企业从分散在系统中的复杂的异类信息中获得更多价值。 IBM InfoSphere Information Server存在多个安全漏洞，本地用户可以提升特权或进行跨站脚本攻击。 -传递给信息服务器WEB控制台的参数缺少充分过滤，攻击者可以进行跨站脚本攻击，获得敏感信息。 -DataStage中的部分SETUID程序存在错误，可触发缓冲区溢出。 IBM InfoSphere Information Server 8.1 IBM InfoSpher...

Buffer overflow

Multiple buffer overflows in unspecified setuid executables in the DataStage subsystem in IBM InfoSphere Information Server 8.1 before FP1 have unknown impact and attack vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Web console in IBM InfoSphere Information Server 8.1 before FP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-4240

Multiple buffer overflows in unspecified setuid executables in the DataStage subsystem in IBM InfoSphere Information Server 8.1 before FP1 have unknown impact and attack vectors...

CVE-2009-4240

CVE-2009-4240 affects IBM InfoSphere Information Server 8.1 before FP1, specifically the DataStage subsystem. The vulnerability consists of multiple buffer overflows in unspecified setuid executables, with unknown impact and attack vectors as described in the CVE entry. The NVD metrics assign a b...

CVE-2009-4239

CVE-2009-4239 describes a Cross-site scripting (XSS) vulnerability in the Web console of IBM InfoSphere Information Server 8.1 prior to FP1. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Connected documents reaffirm the same core details; no exp...

Unisys Business Information Server Detection

Unisys Business Information Server BIS, a highly scalable, multimode, enterprise-level, rapid-application development and information access tool, is listening on the remote host. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid42843; scriptversion"1.8";...

Unisys Business Information Server Stack Overflow

Unisys Business Information Server is installed on the remote system. The installed version is affected by a stack overflow vulnerability. By sending a specially crafted request to the remote service, an attacker may be able to overflow the stack, and potentially execute arbitrary code with syste...

Unisys Business Information Server mnet.exe buffer overflow

Added: 06/30/2009 CVE: CVE-2009-1628 BID: 35494 OSVDB: 55435 Background The Unisys Business Information Server is an information management solution which provides data access across an enterprise. It includes the mnet.exe program which listens for connections on ports 3985/TCP and 3986/TCP...