achievo-xss.txt

============================================================ Achievo-1.3.2-STABLE Cross Site Scripting XSS ============================================================ AUTHOR : ROHIT BANSAL DATE : 19th Sept,2008 Mail: RoHiTiSbAcK at GmAiL.com...

Trend Micro Multiple Products Token Prediction Security Bypass

The remote host is either running Trend Micro OfficeScan or Worry-Free Business Security. The installed version is affected by a security bypass vulnerability because it reportedly implements a weak algorithm to generate random session tokens typically assigned to a successful authentication...

SAP Netviewer 7.0 — XSS Security Vulnerability

Application: SAP Web Application Server, Web Dynpro ABAP and for BSP Versions Affected: Version 7.0 Vendor URL: Bugs: XSS Exploits: YES Reported: 25.01.2008 Vendor response: 25.01.2008 Date of Public Advisory: 21.05.2008 CVE number: 2008-2421 Description: XSS IN BPELCONSOLE/DEFAULT/ACTIVITIES.JSP...

CVE-2001-0950

ValiCert Enterprise Validation Authority EVA Administration Server 3.3 through 4.2.1 uses insufficiently random data to 1 generate session tokens for HSMs using the C rand function, or 2 generate certificates or keys using /dev/urandom instead of another source which blocks when the entropy pool ...

CVE-2001-0950

ValiCert Enterprise Validation Authority EVA Administration Server 3.3 through 4.2.1 uses insufficiently random data to 1 generate session tokens for HSMs using the C rand function, or 2 generate certificates or keys using /dev/urandom instead of another source which blocks when the entropy pool ...

PT-2001-2103 · Valicert · Valicert Enterprise Validation Authority (Eva) Administration Server

Name of the Vulnerable Software and Affected Versions: ValiCert Enterprise Validation Authority EVA Administration Server versions 3.3 through 4.2.1 Description: The issue arises from the use of insufficiently random data. This affects two main areas: 1 the generation of session tokens for HSMs,...