3843 matches found
CVE-2007-3604
vtiger CRM before 5.0.3 allows remote authenticated users with access to the Analytics DashBoard menu to bypass data restrictions and read the pipeline of the entire organization, possibly involving modules/Potentials/Potentials.php...
CVE-2007-3604
CVE-2007-3604 affects vtiger CRM prior to 5.0.3. The issue allows remote authenticated users with access to the Analytics Dashboard to bypass data restrictions and read the pipeline of the entire organization, potentially involving modules/Potentials/Potentials.php. The available documents do not...
CVE-2002-2148
The CVE covers Lucent Ascend devices: MAX Router 5.0 and earlier, Pipeline Router 6.0.2 and earlier, and DSLTerminator. Affected component/behavior is a UDP port 9 discard handling that causes the device to leak sensitive interface details (hostname, MAC, IP) in the response when an attacker send...
CVE-2002-2148: Undefined Security Weakness
Lucent Ascend MAX Router 5.0 and earlier, Lucent Ascend Pipeline Router 6.0.2 and earlier and Lucent DSLTerminator allows remote attackers to obtain sensitive information such as hostname, MAC, and IP address of the Ethernet interface via a discard UDP port 9 packet, which causes the device to le...
CVE-2004-1935
Cross-site scripting XSS vulnerability in SCT Campus Pipeline allows remote attackers to inject arbitrary web script or HTML via onload, onmouseover, and other Javascript events in an e-mail attachment...
CVE-2004-1935
CVE-2004-1935 describes a cross-site scripting (XSS) vulnerability in SCT Campus Pipeline where remote attackers can inject arbitrary web script or HTML via onload, onmouseover, and other Javascript events in an email attachment. The NVD metrics indicate the impact is limited to partial integrity...
CVE-2004-1935: Undefined Security Weakness
Cross-site scripting XSS vulnerability in SCT Campus Pipeline allows remote attackers to inject arbitrary web script or HTML via onload, onmouseover, and other Javascript events in an e-mail attachment...
CVE-2004-1593
Cross-site scripting XSS vulnerability in render.UserLayoutRootNode.uP in SCT Campus Pipeline allows remote attackers to inject arbitrary web script or HTML via the utf parameter...
CVE-2004-1593
SCT Campus Pipeline is affected by a cross-site scripting (XSS) flaw in render.UserLayoutRootNode.uP; the vulnerability is exploitable by supplying arbitrary script/HTML via the utf parameter. The CVSSv2 base score is 4.3 (MEDIUM) with network attack vector and no authentication required, affecti...
CVE-2004-1593: Undefined Security Weakness
Cross-site scripting XSS vulnerability in render.UserLayoutRootNode.uP in SCT Campus Pipeline allows remote attackers to inject arbitrary web script or HTML via the utf parameter...
CVE-2004-1593
Cross-site scripting XSS vulnerability in render.UserLayoutRootNode.uP in SCT Campus Pipeline allows remote attackers to inject arbitrary web script or HTML via the utf parameter...
XXS in SCT email client
Vendor : SCT URL : http://www.SCT.com/ Version: Campus Pipeline Risk : Cross site scripting Description: Fusetalk SCT Campus Pipeline is the Web platform of choice at over 175 institutions. It improves efficiency, builds community, and provides freedom of choice by integrating disparate systems a...
SCT javascript execution vulnerability
Vendor : SCT URL : http://www.sct.com/Education/Products/ConnectedLearning/CampusPipeline.html Version : CampusPipeline Risk : javascript execution Description: SCT Campus Pipeline is the Web platform of choice at over 175 institutions. It improves efficiency, builds community, and provides freed...
CVE-2004-1935
Cross-site scripting XSS vulnerability in SCT Campus Pipeline allows remote attackers to inject arbitrary web script or HTML via onload, onmouseover, and other Javascript events in an e-mail attachment...
CVE-1999-0060
CVE-1999-0060 affects Ascend MAX and Pipeline routers. A malformed UDP/packet to the discard port (used by the Java Configurator tool) can trigger a denial-of-service, with observed impact described as router crashes/reboots and degraded availability. The issue is documented across multiple sourc...
CVE-1999-0060
Attackers can cause a denial of service in Ascend MAX and Pipeline routers with a malformed packet to the discard port, which is used by the Java Configurator tool...
CVE-1999-0060: Undefined Security Weakness
Attackers can cause a denial of service in Ascend MAX and Pipeline routers with a malformed packet to the discard port, which is used by the Java Configurator tool...
Lucent Ascend MAX 5.0/Pipeline 6.0/TNT 1.0/2.0 Router - MAX UDP Port 9 (2)
source: https://www.securityfocus.com/bid/714/info Certain versions of Ascends Lucent router software listen on port 9 UDP Discard. Ascend provides configuration tools for MAX and Pipeline routers that locate locally installed routers by broadcasting a specially formatted packet to UDP port 9. An...
Lucent Ascend MAX 5.0Pipeline 6.0TNT 1.02.0 Router - MAX UDP Port 9 (2)
Lucent Ascend MAX 5.0Pipeline 6.0TNT 1.02.0 Router - MAX UDP Port 9 2 source: https://www.securityfocus.com/bid/714/info Certain versions of Ascends Lucent router software listen on port 9 UDP Discard. Ascend provides configuration tools for MAX and Pipeline routers that locate locally installed...