IBM WebSphere Application Server跨站脚本执行和安全限制绕过漏洞

BUGTRAQ ID: 51559 CVE ID: CVE-2011-5065 IBM WebSphere Application Server WAS是由IBM遵照开放标准开发并发行的一种应用服务器。 IBM WebSphere Application Server WAS Web Services Feature Pack 6.1.0.41之前版本中存在XSS漏洞，可允许远程攻击者注入任意Web脚本或HTML脚本。 0 IBM Websphere Application Server 6.1.x 厂商补丁： IBM --- IBM已经为此发布了一个安全公告（72336）以及相应补丁:...

IBM WebSphere Application Server管理员权限访问安全绕过漏洞

BUGTRAQ ID: 55309 CVE ID: CVE-2012-3325 IBM WebSphere Application Server WAS是由IBM遵照开放标准开发并发行的一种应用服务器。 IBM WebSphere Application Server 6.1.0.43、7.0.0.21-7.0.0.23、8.0.0.2-8.0.0.4、8.5.0.0在验证用户凭证时存在错误，可被利用以管理员身份访问应用。成功利用此漏洞需要应用PM44303的临时修复或包含PM44303的修复包。 0 IBM Websphere Application Server 8.0.0.4 IB...

CVE-2012-3325

IBM WebSphere Application Server WAS 6.1.x before 6.1.0.45, 7.0.x before 7.0.0.25, 8.0.x before 8.0.0.5, and 8.5.x Full Profile before 8.5.0.1, when the PM44303 fix is installed, does not properly validate credentials, which allows remote authenticated users to obtain administrative access via...

CVE-2012-3325

CVE-2012-3325 affects IBM WebSphere Application Server (WAS): vulnerable versions include WAS 6.1.x (<6.1.0.45), 7.0.x (<7.0.0.25), 8.0.x (<8.0.0.5), and 8.5.x Full Profile (

CVE-2012-3325

IBM WebSphere Application Server WAS 6.1.x before 6.1.0.45, 7.0.x before 7.0.0.25, 8.0.x before 8.0.0.5, and 8.5.x Full Profile before 8.5.0.1, when the PM44303 fix is installed, does not properly validate credentials, which allows remote authenticated users to obtain administrative access via...

IBM WebSphere Application Server远程拒绝服务漏洞

BUGTRAQ ID: 55185 CVE ID: CVE-2012-2190 IBM WebSphere Application Server WAS是由IBM遵照开放标准开发并发行的一种应用服务器。 IBM WebSphere Application Server WAS 6.1.0.45之前的6.1.x、7.0.0.25之前的7.0.x、8.0.0.4之前的8.0.x、8.5.0.1之前的8.5.x中，IBM HTTP Server内使用的IBM Global Security Kit...

CVE-2012-2190

IBM Global Security Kit aka GSKit, as used in IBM HTTP Server in IBM WebSphere Application Server WAS 6.1.x before 6.1.0.45, 7.0.x before 7.0.0.25, 8.0.x before 8.0.0.4, and 8.5.x before 8.5.0.1, allows remote attackers to cause a denial of service daemon crash via a crafted ClientHello message i...

Design/Logic Flaw

IBM Global Security Kit aka GSKit, as used in IBM HTTP Server in IBM WebSphere Application Server WAS 6.1.x before 6.1.0.45, 7.0.x before 7.0.0.25, 8.0.x before 8.0.0.4, and 8.5.x before 8.5.0.1, allows remote attackers to cause a denial of service daemon crash via a crafted ClientHello message i...

CVE-2012-3293

CVE-2012-3293 is an XSS flaw in IBM WebSphere Application Server’s Administrative Console. It affects WAS versions 6.1.x before 6.1.0.45, 7.0.x before 7.0.0.25, 8.0.x before 8.0.0.4, and 8.5.x before 8.5.0.1, allowing remote attackers to inject arbitrary script via FRAME/cross-frame contexts. IBM...

CVE-2012-2190

IBM Global Security Kit aka GSKit, as used in IBM HTTP Server in IBM WebSphere Application Server WAS 6.1.x before 6.1.0.45, 7.0.x before 7.0.0.25, 8.0.x before 8.0.0.4, and 8.5.x before 8.5.0.1, allows remote attackers to cause a denial of service daemon crash via a crafted ClientHello message i...

CVE-2009-5066

twiddle.sh in JBoss AS 5.0 and EAP 5.0 and earlier accepts credentials as command-line arguments, which allows local users to read the credentials by listing the process and its arguments...

CVE-2009-5066

twiddle.sh in JBoss AS 5.0 and EAP 5.0 and earlier accepts credentials as command-line arguments, which allows local users to read the credentials by listing the process and its arguments...

IBM WebSphere Application Server不明细节跨站脚本执行漏洞

BUGTRAQ ID: 54819 IBM WebSphere Application Server WAS是由IBM遵照开放标准开发并发行的一种应用服务器。 IBM WebSphere Application Server 8.0.0.4之前版本管理控制台中的某些输入没有正确过滤即返回给用户，可被利用在受影响站点的用户浏览器中执行任意HTML和脚本代码。 0 IBM Websphere Application Server 8.0.0.4 厂商补丁： IBM --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.ers.ibm.com/...

ME Application Manager 10 Cross Site Scripting / SQL Injection

Exploit for php platform in category web applications ME Application Manager 10 - Multiple Web Vulnerabilities Introduction: ============= ManageEngine Applications Manager is a server and application performance monitoring software that helps businesses ensure high availability and performance f...

Microsoft Data Access Components CVE-2012-1891 Buffer Overflow Vulnerability

Description Microsoft Data Access Components MDAC are prone to a heap-based buffer-overflow vulnerability because they fail to properly bounds-check user-supplied data. Successful exploits will allow an attacker to run arbitrary code in the context of the user running the application. Failed...

Microsoft Windows CVE-2012-1890 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successfully exploiting this issue will result in the complete compromise of affected computers. Technologies Affected...

CVE-2012-3847

slssvc.exe in Invensys Wonderware SuiteLink in Invensys InTouch 2012 and Wonderware Application Server 2012 allows remote attackers to cause a denial of service resource consumption via a long Unicode string, a different vulnerability than CVE-2012-3007...

Stack overflow

Stack-based buffer overflow in slssvc.exe before 58.x in Invensys Wonderware SuiteLink in the Invensys System Platform software suite, as used in InTouch/Wonderware Application Server IT before 10.5 and WAS before 3.5, DASABCIP before 4.1 SP2, DASSiDirect before 3.0, DAServer Runtime Components...

CVE-2012-3847

CVE-2012-3847 affects Invensys Wonderware SuiteLink (slssvc.exe) in InTouch 2012 and Wonderware Application Server 2012. An unauthenticated remote attacker can cause a DoS by sending a long Unicode string, consuming resources. Affected SuiteLink components and versions align with the NVD entry fo...

CVE-2011-5096

Stack-based buffer overflow in cstore.exe in the Media Application Server MAS in Avaya Aura Application Server 5300 formerly Nortel Media Application Server 1.x before 1.0.2 and 2.0 before Patch Bundle 10 allows remote attackers to execute arbitrary code via a crafted csanams parameter in a...