EUVD-2007-3537

Cross-site scripting XSS vulnerability in Rapid Install Web Server in Oracle Application Server 11i allows remote attackers to inject arbitrary web script or HTML via a URL to the "Secondary Login Page", as demonstrated using 1 pls/ and 2 pls/MSBEP004/. NOTE: the provenance of this information is...

CVE-2007-3397

The web container in IBM WebSphere Application Server WAS before 6.0.2.21, and 6.1.x before 6.1.0.9, sends response data intended for a different request in certain circumstances after a closed connection error, which might allow remote attackers to obtain sensitive information...

Information disclosure

The web container in IBM WebSphere Application Server WAS before 6.0.2.21, and 6.1.x before 6.1.0.9, sends response data intended for a different request in certain circumstances after a closed connection error, which might allow remote attackers to obtain sensitive information...

CVE-2007-3397

The CVE affects IBM WebSphere Application Server (WAS) web container: versions < 6.0.2.21 (6.0 line) and

Authorization

Unspecified vulnerability in the Default Messaging Component in IBM WebSphere Application Server WAS 6.1.0.7 and earlier has unknown impact and attack vectors, related to "incorrect authorization on a remote interface to the SDO repository."...

CVE-2007-3262

Unspecified vulnerability in the Default Messaging Component in IBM WebSphere Application Server WAS 6.1.0.7 and earlier allows remote attackers to cause a denial of service related to a thread hang, and possibly related to a "TCP issue," or to MPAlarmThread and a resultant memory leak...

Memory corruption

Unspecified vulnerability in the Default Messaging Component in IBM WebSphere Application Server WAS 6.1.0.7 and earlier allows remote attackers to cause a denial of service related to a thread hang, and possibly related to a "TCP issue," or to MPAlarmThread and a resultant memory leak...

CVE-2007-3263

CVE-2007-3263 concerns the Default Messaging Component in IBM WebSphere Application Server (WAS) 6.1.0.7 and earlier. The connected documents reiterate an unspecified vulnerability related to “incorrect authorization on a remote interface to the SDO repository.” There is no explicit description o...

CVE-2007-3264

Unspecified vulnerability in the PD tools component in IBM WebSphere Application Server WAS 6.1.0.7 and earlier has unknown impact and attack vectors...

CVE-2007-3263

Unspecified vulnerability in the Default Messaging Component in IBM WebSphere Application Server WAS 6.1.0.7 and earlier has unknown impact and attack vectors, related to "incorrect authorization on a remote interface to the SDO repository."...

CVE-2007-3265

Cross-site scripting XSS vulnerability in the Samples component in IBM WebSphere Application Server WAS 6.1.0.7 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-3262

IBM WebSphere Application Server 6.1 (and earlier) contains a vulnerability in the Default Messaging Component that can allow remote denial of service via a thread hang, potentially tied to a TCP issue, or to MPAlarmThread causing a memory leak. The affected product/version range is WAS 6.1.0.7 a...

CVE-2007-3262

Unspecified vulnerability in the Default Messaging Component in IBM WebSphere Application Server WAS 6.1.0.7 and earlier allows remote attackers to cause a denial of service related to a thread hang, and possibly related to a "TCP issue," or to MPAlarmThread and a resultant memory leak...

Microsoft Internet Explorer URLMON.DLL COM Object Instantiation Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to remote code-execution vulnerability. A remote attacker can exploit this issue to execute arbitrary code in the context of the user running the vulnerable application. Technologies Affected Avaya CIE 1.0 Avaya Messaging Application Server Avaya...

Microsoft Internet Explorer Language Pack Installation Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to remote code-execution vulnerability because of a race-condition in its language-pack installation support. A remote attacker can exploit this issue to execute arbitrary code in the context of the user running the vulnerable application...

Microsoft Internet Explorer CSS Tag Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability because the application fails to properly handle certain CSS data. A remote attacker can exploit this issue to execute arbitrary code in the context of the user running the vulnerable application. Technologi...

CVE-2007-2629

Bradford CampusManager Network Control Application Server 3.16 allows remote attackers to obtain sensitive information backup, log, and configuration files via direct request for certain files in 1 /runTime/ or 2 /remediationReports/...

CVE-2007-2629

The CVE-2007-2629 entry involves Bradford CampusManager Network Control Application Server 3.1(6), where remote attackers can obtain sensitive information (backup, log, and configuration files) by directly requesting certain files in the /runTime/ or /remediationReports/ directories. The NVD note...

Microsoft Exchange Base64 MIME Message Remote Code Execution Vulnerability

Description Microsoft Exchange is prone to a remote code-execution vulnerability because the application fails to properly decode specially crafted email messages. Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the vulnerable application,...

CVE-2006-7198

Unspecified vulnerability in IBM WebSphere Application Server WAS before 5.1.1.14, and WAS for z/OS 601 before 6.0.2.13, has unknown impact and attack vectors, related to a "Potential security exposure," aka PK26123...