Searching meeting software vulnerabilities

Meeting Maker uses weak encryption (a polyalpha

encryption | Meeting | Maker | weak | uses |

Meeting Maker uses weak encryption (a polyalphabetic substitution cipher) for passwords, which allows remote attackers to sniff and decrypt passwords for Meeting Maker accounts.


Multiple unspecified vulnerabilities in IBM Lot

vulnerabilities | unspecified | Multiple | Domino | Server | before | Lotus | Notes | IBM |

Multiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 have unknown impact and attack vectors, due to "potential security issues" as identified by SPR numbers (1) GPKS6C9J67 in Agents, (2) JGAN6B6TZ3 and (3) KSPR699NBP in the Router, (4) GPKS5YQGPT in Security, or (5) HSAO6BNL6Y in the Web Server. NOTE: vector 3 is related to an issue in NROUTER in IBM Lotus Notes and Domino Server before 6.5.4 FP1, 6.5.5, and 7.0, which allows remote attackers to cause a denial of service (CPU consumption) via a crafted vCal meeting request sent via SMTP (aka SPR# KSPR699NBP).


Cross-site scripting (XSS) vulnerability in sea

Cross-site | scripting |

Cross-site scripting (XSS) vulnerability in searchresult.php in Meeting Reserve 1.0 beta allows remote attackers to inject arbitrary web script or HTML via the search_term parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information.


index.php in Eduha Meeting does not properly re

extensions | permitting | attackers | arbitrary | security | indexphp | restrict | properly | Meeting | execute | allows | bypass | remote | action | checks | upload | before | Eduha | which | code | does | file | add | via | not | php |

index.php in Eduha Meeting does not properly restrict file extensions before permitting a file upload, which allows remote attackers to bypass security checks and upload or execute arbitrary php code via the add action.


Research in Motion (RIM) BlackBerry Enterprise

Research | Motion |

Research in Motion (RIM) BlackBerry Enterprise Server 4.1 SP2 before Hotfix 1 for IBM Lotus Domino might allow attackers with meeting organizer privileges to cause a denial of service (application hang) via a deleted recurrent meeting instance when changing the attendee's calendar meeting time.


Microsoft Outlook 2002 and 2003 allows user-ass

Microsoft | Outlook |

Microsoft Outlook 2002 and 2003 allows user-assisted remote attackers to execute arbitrary code via a malformed VEVENT record in an .iCal meeting request or ICS file.


DFSR.exe in Windows Meeting Space in Microsoft

connections | Microsoft | available | Windows | remains | DFSRexe | Meeting | remote | Space | Vista | port | TCP |

DFSR.exe in Windows Meeting Space in Microsoft Windows Vista remains available for remote connections on TCP port 5722 for 2 minutes after Windows Meeting Space is closed, which allows remote attackers to have an unknown impact by connecting to this port during the time window.


Cross-site scripting (XSS) vulnerability in IBM

Cross-site | scripting |

Cross-site scripting (XSS) vulnerability in IBM Lotus Sametime Server 7.5.1 before Tuesday, July 31, 2007 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving a crafted Sametime meeting.


Software vulnerabilities results 1 to 9 of 9     
Page: 1