EUVD-2006-0435

Malware in sbrugna...

EUVD-2005-1747

Malware in sbrugna...

EUVD-2005-2681

Malware in sbrugna...

EUVD-2006-0430

Malware in sbrugna...

EUVD-2006-1362

Malware in sbrugna...

EUVD-2008-0875

Malware in sbrugna...

EUVD-2008-0871

Malware in sbrugna...

EUVD-2008-0903

Malware in sbrugna...

EUVD-2008-0877

Malware in sbrugna...

EUVD-2006-0432

Malware in sbrugna...

EUVD-2007-2694

Malware in sbrugna...

CVE-2009-1001

Unspecified vulnerability in Oracle BEA WebLogic Portal 8.1 Gold through SP6 allows remote authenticated users to gain privileges via unknown vectors...

CVE-2009-1001

CVE-2009-1001 affects Oracle BEA WebLogic Portal 8.1 Gold through SP6. The description indicates an unspecified vulnerability that allows remote authenticated users to gain privileges via unknown vectors, with a CVSS v2 base score of 5.5 (MEDIUM). No concrete exploit vectors or impacted subcompon...

CVE-2009-1001

Unspecified vulnerability in Oracle BEA WebLogic Portal 8.1 Gold through SP6 allows remote authenticated users to gain privileges via unknown vectors...

CVE-2008-5462

Unspecified vulnerability in the WebLogic Portal component in BEA Product Suite 10.3, 10.2, 10.0 MP1, 9.2 MP3, and 8.1 SP6 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

bea-xss.txt

+============================================================================================+ + Oracle Corporation BEA WebLogic Portal & high XSS Vulnerabilities + +============================================================================================+ Authors: Ivan Sanchez Producto:...

CVE-2008-0896

BEA WebLogic Portal 10.0 and 9.2 through MP1, when an administrator deletes a single instance of a content portlet, removes entitlement policies for other content portlets, which allows attackers to bypass intended access restrictions...

CVE-2008-0896

BEA WebLogic Portal 10.0 and 9.2 through MP1, when an administrator deletes a single instance of a content portlet, removes entitlement policies for other content portlets, which allows attackers to bypass intended access restrictions...

CVE-2008-0896

BEA WebLogic Portal 10.0 and 9.2 through MP1 are affected. When an administrator deletes a single content portlet instance, entitlement policies for other content portlets are removed, allowing an attacker to bypass intended access restrictions. The available documents do not specify a patch or w...

Cross site scripting

Cross-site scripting XSS vulnerability in Groupspace in BEA WebLogic Portal 10.0 and 9.2 through Maintenance Pack 1 allows remote authenticated users to inject arbitrary web script or HTML via unknown vectors...