PT-2014-5024

Name of the Vulnerable Software and Affected Versions IBM Sametime Proxy Server and Web Client versions 9.0 through 9.0.0.1 Description A cross-site request forgery CSRF issue exists in the Web player, allowing remote attackers to hijack the authentication of arbitrary users for requests that...

CVE-2014-3015: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Web player in IBM Sametime Proxy Server and Web Client 9.0 through 9.0.0.1 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...

PT-2016-6999

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 4.0.0 through 4.0.10.17 phpMyAdmin versions 4.4.0 through 4.4.15.8 phpMyAdmin versions 4.6.0 through 4.6.4 Description An issue was discovered involving improper enforcement of IP-based authentication rules. When used with...

Oracle iPlanet Web Proxy Server Detection

Binary data iplanetwebproxyinstalled.nbin...

Oracle iPlanet Web Proxy Server 4.0 < 4.0.23 Unspecified Vulnerability

The remote host has a version of Oracle iPlanet Web Proxy Server formerly Sun Java System Web Proxy Server 4.0 prior to 4.0.23. It is, therefore, affected by an unspecified vulnerability related to Administration. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid72035;...

CVE-2013-5808

Unspecified vulnerability in the Oracle iPlanet Web Proxy Server component in Oracle Fusion Middleware 4.0 allows remote attackers to affect confidentiality via unknown vectors related to Administration...

Design/Logic Flaw

Unspecified vulnerability in the Oracle iPlanet Web Proxy Server component in Oracle Fusion Middleware 4.0 allows remote attackers to affect confidentiality via unknown vectors related to Administration...

CVE-2013-5808

Unspecified vulnerability in the Oracle iPlanet Web Proxy Server component in Oracle Fusion Middleware 4.0 allows remote attackers to affect confidentiality via unknown vectors related to Administration...

CVE-2013-5808

CVE-2013-5808 affects Oracle iPlanet Web Proxy Server 4.0 prior to 4.0.23 (Sun Java System Web Proxy Server). The vulnerability is described as unspecified and related to Administration . The Nessus/NVD records indicate a remote, network-exposed issue with low base score (CVSS v2: 2.6, Confidenti...

PT-2014-2958

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware version 4.0 Description The issue affects confidentiality and is related to the Administration component of the Oracle iPlanet Web Proxy Server. The exact vectors of the issue are not specified. Recommendations For...

CVE-2013-5808: Undefined Security Weakness

Unspecified vulnerability in the Oracle iPlanet Web Proxy Server component in Oracle Fusion Middleware 4.0 allows remote attackers to affect confidentiality via unknown vectors related to Administration...

CVE-2013-4522

lib/filelib.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x before 2.5.3 does not send "Cache-Control: private" HTTP headers, which allows remote attackers to obtain sensitive information by requesting a file that had been previously retrieved by a caching proxy...

Design/Logic Flaw

lib/filelib.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x before 2.5.3 does not send "Cache-Control: private" HTTP headers, which allows remote attackers to obtain sensitive information by requesting a file that had been previously retrieved by a caching proxy...

CVE-2013-4522

lib/filelib.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x before 2.5.3 does not send "Cache-Control: private" HTTP headers, which allows remote attackers to obtain sensitive information by requesting a file that had been previously retrieved by a caching proxy...

CVE-2013-4522

CVE-2013-4522 affects Moodle: lib/filelib.php (various 2.2–2.5 branches) fails to send Cache-Control: private headers, enabling a caching proxy to serve previously retrieved files and potentially expose sensitive information. Impact is information exposure via cached responses; no exploit details...

CVE-2013-4522

lib/filelib.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x before 2.5.3 does not send "Cache-Control: private" HTTP headers, which allows remote attackers to obtain sensitive information by requesting a file that had been previously retrieved by a caching proxy...

LinkedIn Intro App a Man in the Middle Attack

This is one introduction you may not want to make. LinkedIn’s release of its Intro app yesterday for Apple iOS mobile devices raised more than a few eyebrows for behaviors that are causing security experts to worry. Intro is an integrated service that works hand-in-hand with the Apple Mail app...

CVE-2013-2961

The internal web server in the Basic Services component in IBM Tivoli Monitoring ITM 6.2.0 through FP3, 6.2.1 through FP4, 6.2.2 through FP9, and 6.2.3 before FP3, as used in IBM Application Manager for Smart Business formerly Tivoli Foundations Application Manager 1.2.1 before...

Code injection

The internal web server in the Basic Services component in IBM Tivoli Monitoring ITM 6.2.0 through FP3, 6.2.1 through FP4, 6.2.2 through FP9, and 6.2.3 before FP3, as used in IBM Application Manager for Smart Business formerly Tivoli Foundations Application Manager 1.2.1 before...

CVE-2013-2961

The internal web server in the Basic Services component in IBM Tivoli Monitoring ITM 6.2.0 through FP3, 6.2.1 through FP4, 6.2.2 through FP9, and 6.2.3 before FP3, as used in IBM Application Manager for Smart Business formerly Tivoli Foundations Application Manager 1.2.1 before...