|
300091
|
- |
|
apple
|
mac_os_x_server
|
Password Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 does not properly perform replication, which allows remote authenticated users to bypass verification of the current password via uns…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2010-3783
|
2024-11-21 10:19 |
2010-11-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
300092
|
- |
|
ibm
|
omnifind
|
IBM OmniFind Enterprise Edition 8.x and 9.x performs web crawls with an unlimited recursion depth, which allows remote web servers to cause a denial of service (infinite loop) via a crafted series of…
|
CWE-399
Resource Management Errors
|
CVE-2010-3899
|
2024-11-21 10:19 |
2010-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
300093
|
- |
|
ibm
|
omnifind
|
IBM OmniFind Enterprise Edition 8.x and 9.x does not properly restrict the cookie path of administrator (aka ESAdmin) cookies, which might allow remote attackers to bypass authentication by leveragin…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2010-3898
|
2024-11-21 10:19 |
2010-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
300094
|
- |
|
ibm
|
omnifind
|
ESSearchApplication/palette.do in IBM OmniFind Enterprise Edition 8.x and 9.x includes the administrator password in the HTML source code, which might allow remote attackers to obtain sensitive infor…
|
CWE-255
Credentials Management
|
CVE-2010-3897
|
2024-11-21 10:19 |
2010-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
300095
|
- |
|
ibm
|
omnifind
|
The ESSearchApplication directory tree in IBM OmniFind Enterprise Edition 8.x and 9.x does not require authentication, which allows remote attackers to modify the server configuration via a request t…
|
CWE-287
Improper Authentication
|
CVE-2010-3896
|
2024-11-21 10:19 |
2010-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
300096
|
- |
|
ibm
|
omnifind
|
esRunCommand in IBM OmniFind Enterprise Edition before 9.1 allows local users to gain privileges by specifying an arbitrary command name as the first argument.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2010-3895
|
2024-11-21 10:19 |
2010-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
300097
|
- |
|
ibm
|
omnifind
|
Stack-based buffer overflow in the Java_com_ibm_es_oss_CryptionNative_ESEncrypt function in /opt/IBM/es/lib/libffq.cryptionjni.so in the login form in the administration interface in IBM OmniFind Ent…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2010-3894
|
2024-11-21 10:19 |
2010-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
300098
|
- |
|
ibm
|
omnifind
|
The administrator interface in IBM OmniFind Enterprise Edition 8.x and 9.x does not restrict use of a session ID (aka SID) value to a single IP address, which allows remote attackers to perform arbit…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2010-3893
|
2024-11-21 10:19 |
2010-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
300099
|
- |
|
ibm
|
omnifind
|
Session fixation vulnerability in the login form in the administrator interface in IBM OmniFind Enterprise Edition 8.x and 9.x allows remote attackers to hijack web sessions by replaying a session ID…
|
NVD-CWE-Other
|
CVE-2010-3892
|
2024-11-21 10:19 |
2010-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
300100
|
- |
|
ibm
|
omnifind
|
Cross-site request forgery (CSRF) vulnerability in ESAdmin/security.do in the administrator interface in IBM OmniFind Enterprise Edition before 9.1 allows remote attackers to hijack the authenticatio…
|
CWE-352
Origin Validation Error
|
CVE-2010-3891
|
2024-11-21 10:19 |
2010-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|