Skip to content
OpenAdvisories

Archive

8 October 2012

Vulnerabilities first published on this day (UTC), newest first.

50 results · Feed

  • Unscored —

    Open redirect vulnerability in servlet/traveler in IBM Lotus Notes Traveler 8.5.3 before 8.5.3.3 Interim Fix 1 allows r…

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability in servlet/traveler in IBM Lotus Notes Traveler through 8.5.3.3 Interim…

  • Unscored —

    servlet/traveler in IBM Lotus Notes Traveler through 8.5.3.3 Interim Fix 1 does not properly restrict invalid authentic…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in servlet/traveler in IBM Lotus Notes Traveler before 8.5.3.3 Interim Fix 1, …

  • Unscored —

    popup.php in Virtual War (aka VWar) 1.6.1 R2 allows remote attackers to bypass intended member restrictions and read ne…

  • Unscored —

    Virtual War (aka VWar) 1.6.1 R2 uses static session cookies that depend only on a user's password, which makes it easie…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Virtual War (aka VWar) 1.6.1 R2 allow remote attackers to inject…

  • Unscored —

    article.php in Virtual War (aka VWar) 1.6.1 R2 allows remote attackers to cause a denial of service (memory consumption…

  • Unscored —

    The createRandomPassword function in includes/functions_common.php in Virtual War (aka VWar) 1.6.1 R2 uses a small rang…

  • Unscored —
    CVE-2010-5063 Public exploit

    SQL injection vulnerability in article.php in Virtual War (aka VWar) 1.6.1 R2 allows remote attackers to execute arbitr…