10126 matches found
Spinworks Application Server 3.0 - Remote Denial of Service
source: https://www.securityfocus.com/bid/12794/info A remote denial of service vulnerability affects Spinworks Application Server. This issue is due to a failure of the application to properly handle malformed requests. An attacker may leverage this issue to trigger a denial of service condition...
[SA14579] Spinworks Application Server Web Server Denial of Service
---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...
CVE-2005-0742
CVE-2005-0742 describes a cross-site scripting (XSS) vulnerability in Sun Java System Application Server 7. The issue allows remote attackers to inject arbitrary web script or HTML via unknown vectors, potentially affecting the integrity of user data. The cited NVD metrics indicate a low to mediu...
[SA14274] IBM WebSphere Application Server JSP Source Code Disclosure
TITLE: IBM WebSphere Application Server JSP Source Code Disclosure SECUNIA ADVISORY ID: SA14274 VERIFY ADVISORY: http://secunia.com/advisories/14274/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: IBM WebSphere Application Server 6.x...
[SIG^2 G-TEC] DeskNow Mail and Collaboration Server Directory Traversal Vulnerabilities
SIG^2 Vulnerability Research Advisory DeskNow Mail and Collaboration Server Directory Traversal Vulnerabilities by Tan Chew Keong Release Date: 02 Feb 2005 ADVISORY URL http://www.security.org.sg/vuln/desknow2512.html SUMMARY DeskNow Mail and Collaboration Server...
CVE-2004-1362
The PL/SQL module for the Oracle HTTP Server in Oracle Application Server 10g, when using the WE8ISO8859P1 character set, does not perform character conversions properly, which allows remote attackers to bypass access restrictions for certain procedures via an encoded URL with "%FF" encoded...
CVE-2004-1362
CVE-2004-1362 affects the PL/SQL module of the Oracle HTTP Server in Oracle Application Server 10g when using the WE8ISO8859P1 character set. The issue is a character conversion flaw that allows remote attackers to bypass access restrictions for certain procedures via an encoded URL containing “%...
CVE-2004-2216
Unknown vulnerability in Sun Java System Web Server 6.0 SP7 and earlier and 6.1 SP1 and earlier, and Application Server 7 Update 4 and earlier, allows remote attackers to cause a denial of service crash via a malformed client certificate...
[SA13437] Sun Java System Web Server / Application Server Session ID Disclosure
TITLE: Sun Java System Web Server / Application Server Session ID Disclosure SECUNIA ADVISORY ID: SA13437 VERIFY ADVISORY: http://secunia.com/advisories/13437/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: Sun Java System Web Server Sun ONE/iPlanet...
Macromedia JRun Multiple Vulnerabilities
Binary data 2316.prm...
US-CERT Technical Cyber Security Alert TA04-245A -- Multiple Vulnerabilities in Oracle Products
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Technical Cyber Security Alert TA04-245A Multiple Vulnerabilities in Oracle Products Original release date: September 1, 2004 Last revised: -- Source: US-CERT Systems Affected The following Oracle applications are affected: Oracle Database 10g Release...
CVE-2002-0842
Format string vulnerability in certain third party modifications to moddav for logging bad gateway messages e.g. Oracle9i Application Server 9.0.2 allows remote attackers to execute arbitrary code via a destination URI that forces a "502 Bad Gateway" response, which causes the format string...
CVE-2002-0842
CVE-2002-0842 is a format-string vulnerability in Oracle’s mod_dav extension (used for logging gateway errors) that could enable remote code execution via a crafted destination URI triggering a 502 Bad Gateway. The vulnerability affects Oracle9i Application Server 9.0.2 (and related mod_dav code ...
CVE-2002-0387
CVE-2002-0387 refers to a buffer overflow in the gxnsapi6.dll NSAPI plugin of the Sun ONE Application Server’s Connector Module. The overflow occurs when handling a long HTTP request URL, enabling a remote attacker to potentially execute arbitrary code on affected hosts. The issue affects Sun ONE...
Oracle Application Server contains several vulnerabilities
Overview Several vulnerabilities exist in the Portal and iSQLPlus components of the Oracle Application Server. According the the Oracle Security Alert, exploitation of these vulnerabilities would require the attacker to have network access, but not a valid user account on the vulnerable system...
krb5 -- ASN.1 decoder denial-of-service vulnerability
An advisory published by the MIT Kerberos team says: The ASN.1 decoder library in the MIT Kerberos 5 distribution is vulnerable to a denial-of-service attack causing an infinite loop in the decoder. The KDC is vulnerable to this attack. An unauthenticated remote attacker can cause a KDC or...
Sun ONE (iPlanet) Application Server < 6.5 SP1 NSAPI Plugin Overflow
Binary data 1586.prm...
Oracle Application Server Web Cache Multiple Vulnerabilities
Binary data 1213.prm...