CVE-2005-1889

Technical details about CVE-2005-1889 are not provided in the supplied documents; no concrete information on affected versions, root cause, or remediation is available here.

IBM WebSphere Application Server administrative console buffer overflow

Buffer overflow during authentication process...

CVE-2005-1872

The CVE-2005-1872 entry covers a buffer overflow in the administrative console of IBM WebSphere Application Server 5.x when global security is enabled. The related advisory materials describe improper validation of user-supplied input in the authentication process, which can allow remote attacker...

CVE-2005-1889

Unknown vulnerability in Sun ONE Application Server 6.5 SP1 Maintenance Update 6 and earlier allows attackers to read files...

[SA15609] Sun ONE Application Server Unspecified File Disclosure

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

Sun One application server directory traversal

No description provided...

[SA15598] WebSphere Application Server Administrative Console Buffer Overflow

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

Bea Weblogic application server Server Console crossite scripting

Crossite scripting; no session cookie timeout is implemented...

CVE-2003-1193

CVE-2003-1193 corresponds to SQL injection vulnerabilities in Oracle9i Application Server Portal DB components (LOVs, Forms, Hierarchy, XML) across versions 9.0.2.00–3.0.9.8.5. The OpenVAS/Nessus evidence references show a related Portal_DEMO.ORG_CHART exposure accessible through mod_plsql, which...

CVE-2003-1193

Multiple SQL injection vulnerabilities in the Portal DB 1 List of Values LOVs, 2 Forms, 3 Hierarchy, and 4 XML components packages in Oracle Oracle9i Application Server 9.0.2.00 through 3.0.9.8.5 allow remote attackers to execute arbitrary SQL commands via the URL...

CVE-2004-1816

Sun Java System Application Server 7.0 Update 2 and earlier is affected when a SOAP web service expects an array of objects as an argument, leading to denial of service through memory consumption. The provided sources confirm the vulnerability description but do not supply concrete exploit detail...

Oracle Application Server < 10.1.0.0.4 Logging Service Interruption

Binary data 2882.prm...

Oracle Application Server < 10.1.0.0.3 Privilege Escalation

Binary data 2881.prm...

CVE-2005-1383

The OHS component 1.0.2 through 10.x, when UseWebcacheIP is disabled, in Oracle Application Server allows remote attackers to bypass HTTP Server modaccess restrictions via a request to the webcache TCP port 7778...

CVE-2005-1112

IBM WebSphere Application Server 6.0 and earlier, when sharing the document root of the web server, allows remote attackers to obtain the source code for Java Server Pages .jsp via an HTTP request with an invalid Host header, which causes the page to be processed by the web server instead of the...

CVE-2005-1383

The CVE-2005-1383 issue affects Oracle Application Server’s Oracle HTTP Server (OHS) when UseWebCacheIP is disabled. An attacker can bypass mod_access restrictions by sending a request to the webcache TCP port 7778, leading to unauthorized access to protected resources. Connected advisories confi...

CVE-2005-1383

The OHS component 1.0.2 through 10.x, when UseWebcacheIP is disabled, in Oracle Application Server allows remote attackers to bypass HTTP Server modaccess restrictions via a request to the webcache TCP port 7778...

CVE-2005-0742

Cross-site scripting XSS vulnerability in Sun Java System Application Server 7 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

Oracle Application Server Webcache Requests OHS mod_access Restriction Bypass

The version of Oracle HTTP Server OHS installed on the remote host fails to prevent users from accessing protected URLs by using the Web Cache rather than OHS directly. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18181; scriptversion"1.17";...

Append file in Oracle Webcache 9i

Name Append file vulnerability in Oracle Webcache 9i Systems Affected Oracle Application Server with Webcache 9i Severity Medium Risk Category Corruption of files Vendor URL http://www.oracle.com Author Alexander Kornbrust ak at red-database-security.com Date 26 Apr 2005 V 1.00 Advisory...