Design/Logic Flaw

IBM WebSphere Application Server 7.x before 7.0.0.31, when simpleFileServlet static file caching is enabled, allows remote authenticated users to obtain sensitive information via unspecified vectors...

CVE-2013-6330

IBM WebSphere Application Server 7.x before 7.0.0.31, when simpleFileServlet static file caching is enabled, allows remote authenticated users to obtain sensitive information via unspecified vectors...

CVE-2013-6330

CVE-2013-6330 affects IBM WebSphere Application Server 7.x prior to 7.0.0.31 where simpleFileServlet static file caching is enabled. The vulnerability could let remote authenticated users obtain sensitive information via unspecified vectors. IBM’s accompanying bulletin indicates remediation via a...

CVE-2013-6325

CVE-2013-6325 affects IBM WebSphere Application Server (versions 7.x, 8.0.x, 8.5.x). It allows remote attackers to cause a denial of service by sending a crafted request to a web services endpoint. IBM bulletins describe fixes per product family: for WebSphere Application Server Full/Liberty prof...

CVE-2013-6725: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Administrative Console in IBM WebSphere Application Server 7.x before 7.0.0.31, 8.0.x before 8.0.0.8, and 8.5.x before 8.5.5.2 allows remote authenticated administrators to inject arbitrary web script or HTML via a crafted URL...

CVE-2013-6330: Exposure of Sensitive Information to an Unauthorized Actor

IBM WebSphere Application Server 7.x before 7.0.0.31, when simpleFileServlet static file caching is enabled, allows remote authenticated users to obtain sensitive information via unspecified vectors...

PT-2014-1406

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 7.x through 7.0.0.30 IBM WebSphere Application Server versions 8.0.x through 8.0.0.7 IBM WebSphere Application Server versions 8.5.x through 8.5.5.1 Description The issue allows remote authenticated...

PT-2014-1408

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 7.x through 7.0.0.30 IBM WebSphere Application Server versions 8.0.x through 8.0.0.7 IBM WebSphere Application Server versions 8.5.x through 8.5.5.1 Description The issue allows remote attackers to cau...

PT-2014-3091

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 7.0.0 through 7.0.30 Description The issue allows remote authenticated users to obtain sensitive information via unspecified vectors when simpleFileServlet static file caching is enabled. Recommendatio...

CVE-2013-6325: Improper Input Validation

IBM WebSphere Application Server 7.x before 7.0.0.31, 8.0.x before 8.0.0.8, and 8.5.x before 8.5.5.2 allows remote attackers to cause a denial of service resource consumption via a crafted request to a web services endpoint...

Oracle 9i HTTP Server Web Administration Access Privilege Escalation - Ver2 (CVE-2002-0561)

A privilege escalation vulnerability has been reported in Oracle 9i Application Server. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...

CVE-2013-7105

Buffer overflow in the Interstage HTTP Server log functionality, as used in Fujitsu Interstage Application Server 9.0.0, 9.1.0, 9.2.0, 9.3.1, and 10.0.0; and Interstage Studio 9.0.0, 9.1.0, 9.2.0, and 10.0.0, has unspecified impact and attack vectors related to "ihsrlog/rotatelogs."...

CVE-2013-7105

Buffer overflow in the Interstage HTTP Server log functionality, as used in Fujitsu Interstage Application Server 9.0.0, 9.1.0, 9.2.0, 9.3.1, and 10.0.0; and Interstage Studio 9.0.0, 9.1.0, 9.2.0, and 10.0.0, has unspecified impact and attack vectors related to "ihsrlog/rotatelogs."...

CVE-2013-7105

Buffer overflow in the Interstage HTTP Server log function ihsrlog/rotatelogs affects Fujitsu Interstage Application Server (versions 9.0.0, 9.1.0, 9.2.0, 9.3.1, 10.0.0) and Interstage Studio (9.0.0, 9.1.0, 9.2.0, 10.0.0). The vulnerability in the log component could allow an attacker to execute ...

PT-2013-6277

Name of the Vulnerable Software and Affected Versions Fujitsu Interstage Application Server versions 9.0.0 through 10.0.0 Fujitsu Interstage Studio versions 9.0.0 through 10.0.0 Description A buffer overflow issue exists in the log functionality of the Interstage HTTP Server, which is used in...

CVE-2013-7105: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Interstage HTTP Server log functionality, as used in Fujitsu Interstage Application Server 9.0.0, 9.1.0, 9.2.0, 9.3.1, and 10.0.0; and Interstage Studio 9.0.0, 9.1.0, 9.2.0, and 10.0.0, has unspecified impact and attack vectors related to "ihsrlog/rotatelogs."...

Microsoft Internet Explorer CVE-2013-5051 Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions. Technologies Affected Avaya Aura Conferencing...

Microsoft Internet Explorer CVE-2013-5047 Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions. Technologies Affected Avaya Aura Conferencing...

Microsoft Windows 'Win32k.sys' CVE-2013-3903 Denial Of Serivce Vulnerability

Description Microsoft Windows is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause the system to stop responding, denying service to legitimate users. Technologies Affected Avaya Aura Conferencing 6.0 SP1 Standard Avaya Aura Conferencing 6.0 Standard Avaya Au...

Microsoft Internet Explorer Enhanced Protected Mode CVE-2013-5046 Security Bypass Vulnerability

Description Microsoft Internet Explorer is prone to a security-bypass vulnerability in the Enhanced Protected Mode. An attacker can exploit this issue to bypass Enhanced Protected Mode restrictions and execute arbitrary code with elevated privileges. Technologies Affected Avaya Aura Conferencing...