Microsoft Windows URI Handler Command Execution Vulnerability

Description Microsoft Windows XP and Server 2003 with Internet Explorer 7 is prone to a command-execution vulnerability because it fails to properly sanitize input. Successfully exploiting this issue allows remote attackers to execute arbitrary commands in the context of users that follow malicio...

Sun Java系统访问管理器多个安全漏洞

BUGTRAQ ID: 25842 Sun Java系统访问管理器是一个安全单点登录、认证、授权解决方案。 Sun Java系统访问管理器实现上存在多个漏洞，远程攻击者可能利用这些漏洞实现非授权访问。 如果在Sun Java系统应用服务器9.1容器中安装了Sun Java系统访问管理器7.1且重启了容器，就不会显示认证屏。任何基于认证使用容器的应用程序都无法正确运行，因为任何用户都会未经认证便给予访问。这可能导致非特权的非管理用户执行管理任务，例如，管理控制台在访问这个应用时不再提示用户进行认证。因此，任何用户无论是否拥有管理权限，都可以管理应用服务器。 在Sun...

Code injection

Unspecified vulnerability in Sun Java System Access Manager 7.1, when installed in a Sun Java System Application Server 8.x container, allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2007-5153

Unspecified vulnerability in Sun Java System Access Manager 7.1, when installed in a Sun Java System Application Server 8.x container, allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2007-5152

Sun Java System Access Manager 7.1, when installed in a Sun Java System Application Server 9.1 container, does not demand authentication after a container restart, which allows remote attackers to perform administrative tasks...

CVE-2007-4833

Unspecified vulnerability in the Edge Component in IBM WebSphere Application Server WAS 6.1 before Fix Pack 11 6.1.0.11 has unknown impact and attack vectors, aka PK44789...

CVE-2007-4839

Unspecified vulnerability in the PD tools component in IBM WebSphere Application Server WAS 6.1 before Fix Pack 11 6.1.0.11 has unknown impact and attack vectors, aka PK33803...

Design/Logic Flaw

Unspecified vulnerability in the Edge Component in IBM WebSphere Application Server WAS 6.1 before Fix Pack 11 6.1.0.11 has unknown impact and attack vectors, aka PK44789...

CVE-2007-4839

CVE-2007-4839 concerns IBM WebSphere Application Server 6.1 prior to Fix Pack 11 (6.1.0.11), specifically in the PD tools component. The vulnerability is described as unspecified with unknown impact and attack vectors (aka PK33803). The available connected sources corroborate the affected product...

CVE-2007-4839

Unspecified vulnerability in the PD tools component in IBM WebSphere Application Server WAS 6.1 before Fix Pack 11 6.1.0.11 has unknown impact and attack vectors, aka PK33803...

CVE-2007-4833

Unspecified vulnerability in the Edge Component in IBM WebSphere Application Server WAS 6.1 before Fix Pack 11 6.1.0.11 has unknown impact and attack vectors, aka PK44789...

IBM WebSphere Application Server未明漏洞

IBM WebSphere Application Server是一款商业性质的WEB应用服务程序。 IBM WebSphere Application Server包含的Edge组件存在未明错误，远程攻击者可以利用漏洞获得敏感信息或者进行拒绝服务攻击。 目前没有详细漏洞细节提供。 IBM WebSphere Application Server 6.1.x 升级程序： http://www-1.ibm.com/support/docview.wss?uid=swg24016159...

Code injection

Cosminexus Manager in Cosminexus Application Server 06-50 and later might assign the wrong user's group permissions to logical J2EE server processes, which allows local users to gain privileges...

Code injection

Cosminexus Manager in Cosminexus Application Server 07-00 and later might assign the wrong user's group permissions to logical user server processes, which allows local users to gain privileges...

CVE-2007-4563

Cosminexus Manager in Cosminexus Application Server 06-50 and later is affected by CVE-2007-4563, where backend processes for logical J2EE servers may receive incorrect group permissions. This could allow local users to gain privileges. The vulnerability is described as a local privilege escalati...

CVE-2007-4564

Cosminexus Manager in Cosminexus Application Server 07-00 and later may assign the wrong user’s group permissions to activated logical server processes, enabling local privilege escalation. Root cause: mis-assignment of group permissions to server processes started by Cosminexus Manager. Impact: ...

Code injection

The Sun Admin Console in Sun Application Server 9.00.1 does not apply certain configuration changes persistently, which causes the 1 SSL and 2 SSLMutualAuth ORB listener services to enable all protocols and ciphers after the services are restarted, possibly allowing remote attackers to bypass...

CVE-2007-4511

The CVE-2007-4511 issue affects Sun Admin Console in Sun Application Server 9.0_0.1. The root problem is that configuration changes are not persisted, causing the SSL and SSL_MutualAuth ORB listener services to enable all protocols and ciphers after a restart. This can allow remote attackers to b...

CVE-2007-4511

The Sun Admin Console in Sun Application Server 9.00.1 does not apply certain configuration changes persistently, which causes the 1 SSL and 2 SSLMutualAuth ORB listener services to enable all protocols and ciphers after the services are restarted, possibly allowing remote attackers to bypass...

Microsoft Excel Worksheet Index Value Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers may exploit this issue by enticing victims into opening a maliciously crafted Excel file .xls. Successful exploits may allow attackers to execute arbitrary code with the privileges of the user running the...