4415 matches found
Threat Outbreak Alert: Fake Bank Account Fraud Notification Email Messages on March 3, 2014
Medium Alert ID: 33156 First Published: 2014 March 3 15:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a bank account fraudulent transaction notice for the recipient. The text in the email message attempts to convinc...
SAP Internet Transaction Server wgate.dll service Parameter XSS - Ver2 (CVE-2003-0749)
A cross-site scripting vulnerability has been reported in SAP Internet Transaction Server. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
SAP Internet Transaction Server Directory Traversal - Ver2 (CVE-2003-0748)
A directory traversal vulnerability has been reported in wgate.dll for SAP Internet Transaction Server ITS. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...
php cloud talent system UC API not initialized injection vulnerability-vulnerability warning-the black bar safety net
Detailed description: api/alipaydual/notifyurl.php requireonce"alipay.config.php"; requireonce"lib/alipaynotify.class.php"; requireoncedirnamedirnamedirnameFILE."/ data/db.config.php"; requireoncedirnamedirnamedirnameFILE."/ include/mysql.class.php"; $db = new mysql$dbconfig'dbhost',...
Threat Outbreak Alert: Fake Account Transfer Notification Email Messages on February 19, 2014
Medium Alert ID: 32926 First Published: 2014 February 19 20:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an account transaction notification for the recipient. The text in the email message attempts to convince the...
Threat Outbreak Alert: Fake Wire Transaction Notification Email Messages on February 18, 2014.
Medium Alert ID: 32920 First Published: 2014 February 19 16:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a wire transaction notification for the recipient. The text in the email message attempts to convince the...
CVE-2014-0830
Directory traversal vulnerability in the table-export implementation in the OAC component in IBM Financial Transaction Manager FTM 2.0 before 2.0.0.3 and 2.1 before 2.1.0.1 allows remote authenticated users to read arbitrary files via a modified pathname...
CVE-2014-0831
Cross-site request forgery CSRF vulnerability in the OAC component in IBM Financial Transaction Manager FTM 2.0 before 2.0.0.3 allows remote attackers to hijack the authentication of arbitrary users for requests that modify configuration data...
CVE-2014-0833
The OAC component in IBM Financial Transaction Manager FTM 2.0 before 2.0.0.3 does not properly enforce operator-intervention requirements, which allows remote authenticated users to bypass intended access restrictions via an unspecified process step...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the OAC component in IBM Financial Transaction Manager FTM 2.0 before 2.0.0.3 allows remote attackers to hijack the authentication of arbitrary users for requests that modify configuration data...
Design/Logic Flaw
The OAC component in IBM Financial Transaction Manager FTM 2.0 before 2.0.0.3 does not properly enforce operator-intervention requirements, which allows remote authenticated users to bypass intended access restrictions via an unspecified process step...
Directory traversal
Directory traversal vulnerability in the table-export implementation in the OAC component in IBM Financial Transaction Manager FTM 2.0 before 2.0.0.3 and 2.1 before 2.1.0.1 allows remote authenticated users to read arbitrary files via a modified pathname...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in configuration-details screens in the OAC component in IBM Financial Transaction Manager FTM 2.0 before 2.0.0.3 allow remote authenticated users to inject arbitrary web script or HTML via a crafted text value...
CVE-2014-0832
Multiple cross-site scripting XSS vulnerabilities in configuration-details screens in the OAC component in IBM Financial Transaction Manager FTM 2.0 before 2.0.0.3 allow remote authenticated users to inject arbitrary web script or HTML via a crafted text value...
CVE-2014-0832
IBM Financial Transaction Manager 2.0/2.1 OAC contains cross-site scripting vulnerabilities in the configuration-details screens. Root cause: injected JavaScript/HTML via crafted text values; impacts authenticated users viewing those records. CVSS base 3.5. Affected: FTM 2.0 (and 2.1). Remediatio...
CVE-2014-0833
The OAC component in IBM Financial Transaction Manager FTM 2.0 before 2.0.0.3 does not properly enforce operator-intervention requirements, which allows remote authenticated users to bypass intended access restrictions via an unspecified process step...
CVE-2014-0830
Directory traversal vulnerability in the table-export implementation in the OAC component in IBM Financial Transaction Manager FTM 2.0 before 2.0.0.3 and 2.1 before 2.1.0.1 allows remote authenticated users to read arbitrary files via a modified pathname...
CVE-2014-0833
IBM Financial Transaction Manager (FTM) 2.0 before 2.0.0.3 is affected by CVE-2014-0833 where the OAC component does not properly enforce operator-intervention requirements, allowing an authenticated remote user to bypass intended access restrictions via an unspecified process step. The affected ...
CVE-2014-0831
Cross-site request forgery CSRF vulnerability in the OAC component in IBM Financial Transaction Manager FTM 2.0 before 2.0.0.3 allows remote attackers to hijack the authentication of arbitrary users for requests that modify configuration data...
CVE-2014-0831
CVE-2014-0831: IBM Financial Transaction Manager (FTM) 2.0 OAC is vulnerable to Cross-Site Request Forgery. An authenticated attacker could trigger edits to configuration data. Affected product: FTM 2.0 (OAC). Root cause: CSRF in the OAC component. Impact: potential unauthorized configuration cha...