CVE-2016-0324

IBM Security Identity Manager (ISIM) Virtual Appliance versions 7.0.0.0–7.0.1.0 before 7.0.1-ISS-SIM-FP0001 are affected by CVE-2016-0324, a vulnerability that allows remote authenticated users to execute arbitrary code with administrator privileges via unspecified vectors. The issue is documente...

CVE-2016-0327

IBM Security Identity Manager ISIM Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS-SIM-FP0001 allows local users to gain administrator privileges via unspecified vectors. IBM X-Force ID: 111643...

CVE-2016-0332

IBM Security Identity Manager ISIM Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS-SIM-FP0001 do not properly restrict failed login attempts, which makes it easier for remote attackers to obtain access via a brute-force approach. IBM X-Force ID: 111695...

CVE-2016-0338

IBM Security Identity Manager ISIM Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 allows local users to discover cleartext passwords by 1 reading a configuration file or 2 examining a process...

Design/Logic Flaw

IBM Security Identity Manager ISIM Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles session identifiers after logout, which makes it easier for remote attackers to spoof users by leveraging knowledge of "traffic records."...

Design/Logic Flaw

IBM Security Identity Manager ISIM Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles password creation, which makes it easier for remote attackers to obtain access by leveraging an attack against the password algorithm...

CVE-2016-0338

CVE-2016-0338 affects IBM Security Identity Manager Virtual Appliance 7.0.0.0–7.0.1.1 (before 7.0.1-ISS-SIM-FP0003). The issue allows local attackers to disclose cleartext passwords by reading a configuration file or by examining running processes. This disclosure constitutes information exposure...

CVE-2016-0339

The issue CVE-2016-0339 affects IBM Security Identity Manager (ISIM) Virtual Appliance versions 7.0.0.0–7.0.1.1, where logout handling mishandles session identifiers, enabling a remote attacker to spoof a user by leveraging knowledge of traffic records. Root cause: improper session identifier man...

CVE-2016-0340

CVE-2016-0340 affects IBM Security Identity Manager (ISIM) Virtual Appliance versions 7.0.0.0–7.0.1.1 prior to FP0003. Root cause: mishandled session expiration allows a remote attacker to hijack a session by leveraging an unattended workstation. Impact: remote session hijacking with attacker-con...

CVE-2016-0330

CVE-2016-0330 affects IBM Security Identity Manager Virtual Appliance. The issue is a weak password algorithm used during password creation in ISIM VA versions 7.0.0.0–7.0.1.1 prior to FP0003, which could allow remote attackers to gain access by exploiting the password mechanism. The published re...

CVE-2016-0357

CVE-2016-0357 affects IBM Security Identity Manager Virtual Appliance 7.0.0.0–7.0.1.1 (before FP0003). A remote attacker can hijack the user’s clicking action via a crafted website (clickjacking). The advisory lists remediation by upgrading to IBM Security Identity Manager (ISIM) Virtual Applianc...

CVE-2016-0338

IBM Security Identity Manager ISIM Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 allows local users to discover cleartext passwords by 1 reading a configuration file or 2 examining a process...

CVE-2014-0961

CVE-2014-0961 affects IBM Tivoli Identity Manager (ITIM) 5.0 (before 5.0.0.15), ITIM 5.1 (before 5.1.0.15), and IBM Security Identity Manager (ISIM) 6.0 (before 6.0.0.2). The root issue is a Cross-Site Request Forgery (CSRF) vulnerability that enables remote authenticated users to hijack the auth...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in mesajformu.asp in ASP Ziyaretci Defteri 1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 Isim, 2 Mesajiniz, and 3 E-posta fields. NOTE: these probably correspond to the isim, mesaj, and posta parameters to save.php...

CVE-2007-3887

Multiple cross-site scripting XSS vulnerabilities in mesajformu.asp in ASP Ziyaretci Defteri 1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 Isim, 2 Mesajiniz, and 3 E-posta fields. NOTE: these probably correspond to the isim, mesaj, and posta parameters to save.php...

Mini-Nuke<=1.8.2 SQL injection (6)

//mini-nuke board turk have many sql injection founded by Moroccan Security Team //Creetz to: Moroccan Security Team Dr.E-vil,Dr.Erase,H0550N,|ucifer,DaBDouB-MoSiKaR OverclockiX,ki11er ,Dranzelz,Esp!onLeRaVaGe,ameer,www.lezr.com and all muslim morocco 1...