Multiple cross-site scripting (XSS) vulnerabilities in the administrative user interface in IBM Lotus Protector for Mail Security 2.1, 2.5, 2.5.1, and 2.8 and IBM ISS Proventia Network Mail Security. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.
IBM
XSS
Proventia Network Mail Security System Firmware
Proventia Network Mail Security System
Lotus Protector For Mail Security
NVD
Exploit-DB
CVSS 2.0
4.3
EPSS
5.2%
The SQLite functionality in PHP before 5.3.15 allows remote attackers to bypass the open_basedir protection mechanism via unspecified vectors. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
PHP
Privilege Escalation
NVD
CVSS 2.0
5.0
EPSS
0.9%