PT-2012-5043

Name of the Vulnerable Software and Affected Versions Invensys InTouch 2012 Wonderware Application Server 2012 Description The issue allows remote attackers to cause a denial of service due to resource consumption via a long Unicode string. Recommendations For Invensys InTouch 2012, restrict acce...

CVE-2011-5096

Stack-based buffer overflow in cstore.exe in the Media Application Server MAS in Avaya Aura Application Server 5300 formerly Nortel Media Application Server 1.x before 1.0.2 and 2.0 before Patch Bundle 10 allows remote attackers to execute arbitrary code via a crafted csanams parameter in a...

Moderate: Red Hat Security Advisory: mod_cluster security update

Updated modcluster packages that fix one security issue are now available for JBoss Enterprise Application Platform 5.1.2 for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CV...

PT-2012-2074

Name of the Vulnerable Software and Affected Versions Avaya Aura Application Server 5300 versions 1.x before 1.0.2 Avaya Aura Application Server 5300 version 2.0 before Patch Bundle 10 Description The issue is related to a stack-based buffer overflow in the cstore.exe component of the Media...

CVE-2011-5096: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in cstore.exe in the Media Application Server MAS in Avaya Aura Application Server 5300 formerly Nortel Media Application Server 1.x before 1.0.2 and 2.0 before Patch Bundle 10 allows remote attackers to execute arbitrary code via a crafted csanams parameter in a...

IBM WebSphere Application Server安全绕过漏洞

CVE ID: CVE-2012-0717 IBM WebSphere Application Server WAS是由IBM遵照开放标准，例如Java EE, XML 还有Web Services，开发并发行的一种应用服务器。 在启用特定SSL的虚拟主机配置中满足如下条件时，WebSphere Application Server允许远程攻击者绕过IBM HTTP Server上SSL客户端证书的验证： -使用“SSLEnable”启用SSL默认不启用。 -使用“SSLClientAuth requiredreset”启用SSL客户端验证默认不启用，“SSLClientAuth...

Important: Red Hat Security Advisory: jbossas-web and jboss-naming security update

Updated jbossas-web and jboss-naming packages that fix two security issues are now available for JBoss Enterprise Web Platform 5.1.2 for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring...

Important: Red Hat Security Advisory: jbossas security update

Updated jbossas packages that fix one security issue are now available for JBoss Enterprise Application Platform 4.3.0 CP10 for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVS...

Important: Red Hat Security Advisory: jbossas and jboss-naming security update

Updated jbossas and jboss-naming packages that fix two security issues are now available for JBoss Enterprise Application Platform 5.1.2 for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability...

Important: Red Hat Security Advisory: jbossas security update

An update for JBoss Enterprise Application Platform 4.3.0 CP10 that fixes one security issue is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, whic...

Important: Red Hat Security Advisory: jbossas security update

An update for JBoss Enterprise Application Platform 5.1.2 that fixes one security issue is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which giv...

CVE-2012-2170

The Application Snoop Servlet in IBM WebSphere Application Server 7.0 before 7.0.0.23 does not properly restrict access, which allows remote attackers to obtain sensitive client and request information via a direct request...

Authentication flaw

IBM WebSphere Application Server 7.0 before 7.0.0.23, when a certain SSLv2 configuration with client authentication is used, allows remote attackers to bypass X.509 client-certificate authentication via unspecified vectors...

CVE-2012-0716

Cross-site scripting XSS vulnerability in the Administration Console in IBM WebSphere Application Server 7.0 before 7.0.0.23 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-0720

Cross-site scripting XSS vulnerability in the Integration Solution Console in the Administration Console in IBM WebSphere Application Server 7.0 before 7.0.0.23 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2012-0717

CVE-2012-0717 affects IBM WebSphere Application Server 7.0 (prior to 7.0.0.23) where a specific SSLv2 configuration with client authentication can allow a remote attacker to bypass X.509 client-certificate authentication via unspecified vectors. The condition requires: SSL enabled (SSLEnable), SS...

CVE-2012-2170

The Application Snoop Servlet in IBM WebSphere Application Server 7.0 before 7.0.0.23 does not properly restrict access, which allows remote attackers to obtain sensitive client and request information via a direct request...

CVE-2012-0716

CVE-2012-0716 : IBM WebSphere Application Server 7.0 Administration Console has a cross-site scripting (XSS) vulnerability that can let an attacker inject script/HTML via the Administrative Console. Affected: WAS 7.0 prior to 7.0.0.23. Remediation: apply IBM Fix Pack 7.0.0.23 (or later) for WAS, ...

CVE-2012-0720

CVE-2012-0720 : In IBM WebSphere Application Server, the Administration Console of the Integration Solution Console is vulnerable to cross-site scripting due to improper validation of user-supplied input. A remote attacker can inject arbitrary script via a crafted URL, affecting WAS 7.0 installat...

PT-2012-3853

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server version 7.0 through 7.0.0.22 Description The issue is related to the Application Snoop Servlet, which does not properly restrict access. This allows remote attackers to obtain sensitive client and request...