CVE-2013-3034

Cross-site scripting XSS vulnerability in IBM InfoSphere Information Server through 8.5 FP3, 8.7 through FP2, and 9.1 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to the web console...

PT-2013-4108

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions prior to 8.5 FP4 IBM InfoSphere Information Server versions 8.7 through FP2 IBM InfoSphere Information Server version 9.1 Description A cross-site scripting XSS issue allows remote authenticated users...

CVE-2013-0585: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in IBM InfoSphere Information Server through 8.5 FP3, 8.7 through FP2, and 9.1 allow remote authenticated users to inject arbitrary web script or HTML via vectors related to the 1 web console and 2 repository management user interfaces...

CVE-2013-3034: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM InfoSphere Information Server through 8.5 FP3, 8.7 through FP2, and 9.1 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to the web console...

PT-2013-2443

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions prior to 8.5 FP4 IBM InfoSphere Information Server versions 8.7 through FP2 IBM InfoSphere Information Server version 9.1 Description The issue allows remote authenticated users to inject arbitrary we...

Mozilla Firefox ESR Multiple Vulnerabilities (Aug 2012) - Mac OS X

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Firefox ESR Multiple Vulnerabilities (Aug 2012) - Windows

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Thunderbird ESR Multiple Vulnerabilities - August12 (Mac OS X)

This host is installed with Mozilla Thunderbird ESR and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillathunderbirdesrmultvulnaug12macosx.nasl 6115 2017-05-12 09:03:25Z teissa $ Mozilla Thunderbird ESR Multiple Vulnerabilities - August12 Mac OS X Authors: Arun Kalla...

Mozilla Thunderbird ESR Multiple Vulnerabilities (Aug 2012) - Windows

Mozilla Thunderbird ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Thunderbird Multiple Vulnerabilities - August12 (Mac OS X)

This host is installed with Mozilla Thunderbird and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillathunderbirdmultvulnaug12macosx.nasl 6074 2017-05-05 09:03:14Z teissa $ Mozilla Thunderbird Multiple Vulnerabilities - August12 Mac OS X Authors: Arun Kallavi Copyrigh...

Mozilla Firefox ESR Multiple Vulnerabilities - August12 (Mac OS X)

This host is installed with Mozilla Firefox ESR and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillafirefoxesrmultvulnaug12macosx.nasl 6086 2017-05-09 09:03:30Z teissa $ Mozilla Firefox ESR Multiple Vulnerabilities - August12 Mac OS X Authors: Arun Kallavi Copyright...

activemq: Unauthenticated access to web console

The web console in Apache ActiveMQ before 5.8.0 does not require authentication, which allows remote attackers to obtain sensitive information or cause a denial of service via HTTP requests...

Directory traversal

Directory traversal vulnerability in the Web Console in IBM Data Studio 3.1.0 and 3.1.1 allows remote attackers to read arbitrary files via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Web Console in IBM Data Studio 3.1.0 and 3.1.1 allows remote attackers to hijack the authentication of arbitrary users for requests that access monitored database information...

CVE-2013-2981

CVE-2013-2981 affects IBM Data Studio Web Console versions 3.1.0 and 3.1.1. A directory traversal vulnerability allows a remote attacker who has authenticated to the web application to read arbitrary files from the server filesystem. The root cause is improper validation of file paths in the Web ...

CVE-2013-2980

Cross-site request forgery CSRF vulnerability in the Web Console in IBM Data Studio 3.1.0 and 3.1.1 allows remote attackers to hijack the authentication of arbitrary users for requests that access monitored database information...

CVE-2013-2981: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Web Console in IBM Data Studio 3.1.0 and 3.1.1 allows remote attackers to read arbitrary files via unspecified vectors...

PT-2013-4076

Name of the Vulnerable Software and Affected Versions IBM Data Studio versions 3.1.0 through 3.1.1 Description A directory traversal issue in the Web Console of IBM Data Studio allows remote attackers to read arbitrary files. Recommendations For versions 3.1.0 and 3.1.1, update to a version that...

CVE-2013-2980: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Web Console in IBM Data Studio 3.1.0 and 3.1.1 allows remote attackers to hijack the authentication of arbitrary users for requests that access monitored database information...

PT-2013-4075

Name of the Vulnerable Software and Affected Versions IBM Data Studio versions 3.1.0 through 3.1.1 Description A cross-site request forgery issue in the Web Console allows remote attackers to hijack user authentication for requests accessing monitored database information. Recommendations For IBM...