CVE-2010-0184

Summary: CVE-2010-0184 affects the (1) domainutility and (2) domainutilitycmd components in TIBCO Domain Utility within TIBCO Runtime Agent prior to 5.6.2 . The vulnerability is due to weak permissions on domain properties files, which could allow local users to obtain domain administrator creden...

CVE-2008-3338

Multiple buffer overflows in TIBCO Hawk 1 AMI C library libtibhawkami and 2 Hawk HMA tibhawkhma, as used in TIBCO Hawk before 4.8.1; Runtime Agent TRA before 5.6.0; iProcess Engine 10.3.0 through 10.6.2 and 11.0.0; and Mainframe Service Tracker before 1.1.0 might allow remote attackers to execute...

Solaris 8 (sparc) : 126928-02

SunOS 5.8: rpcsecgss patch. Date this patch was last updated by Sun : Oct/19/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Sql injection

Multiple SQL injection vulnerabilities in Free LAN Intra|ternet Portal FLIP before 1.0-RC3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: some sources mention the escapesqlData, implodesql, and implodesqlIn functions, but these are protection schemes, not...

Cross site scripting

Cross-site scripting XSS vulnerability in error messages in Free LAN Intra|ternet Portal FLIP before 1.0-RC3 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, different vectors than CVE-2007-0611...

CVE-2007-0695

Multiple SQL injection vulnerabilities in Free LAN Intra|ternet Portal FLIP before 1.0-RC3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: some sources mention the escapesqlData, implodesql, and implodesqlIn functions, but these are protection schemes, not...

CVE-2007-0695

Multiple SQL injection vulnerabilities in Free LAN Intra|ternet Portal FLIP before 1.0-RC3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: some sources mention the escapesqlData, implodesql, and implodesqlIn functions, but these are protection schemes, not...

CVE-2007-0611

Multiple cross-site scripting XSS vulnerabilities in Free LAN Intra|ternet Portal FLIP before 1.0-RC2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors in 1 inc.page.php and 2 inc.text.php...

CVE-2007-0611

The CVE-2007-0611 entry describes XSS vulnerabilities in Free LAN In(tra|ter)net Portal (FLIP) before 1.0-RC2, exploitable via unspecified vectors in the files inc.page.php and inc.text.php. Affected component: FLIP web portal. Impact is the ability to inject arbitrary web script/HTML in the cont...

CVE-2007-0611

Multiple cross-site scripting XSS vulnerabilities in Free LAN Intra|ternet Portal FLIP before 1.0-RC2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors in 1 inc.page.php and 2 inc.text.php...

Buffer overflow

Buffer overflow in TIBCO Rendezvous before 7.5.1, TIBCO Runtime Agent TRA before 5.4, and Hawk before 4.6.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the HTTP administrative interface...