1027 matches found
RHSA-2008:0100 Red Hat Security Advisory: java-1.4.2-bea security update
Bulletin has no description...
pki-core:10.6 and pki-deps:10.6 security update
apache-commons-collections apache-commons-lang apache-commons-net bea-stax fasterxml-oss-parent 49-1 - Rebase to upstream version 49 26-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora28MassRebuild 26-5 - Fix license tag 26-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora27MassRebuild...
K15904: Multiple third-party application-server vulnerabilities
Security Advisory Description CVE-2003-1418 Apache HTTP Server 1.3.22 through 1.3.27 on OpenBSD allows remote attackers to obtain sensitive information via 1 the ETag header, which reveals the inode number, or 2 multipart MIME boundary, which reveals child proccess IDs PID. CVE-2004-2320 The...
SUSE CVE-2004-2320
The default configuration of BEA WebLogic Server and Express 8.1 SP2 and earlier, 7.0 SP4 and earlier, 6.1 through SP6, and 5.1 through SP13 responds to the HTTP TRACE request, which can allow remote attackers to steal information using cross-site tracing XST attacks in applications that are...
MAL-2022-1489 Malicious code in bea-adapter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12e26d629eddda0237f04bb05d4768fe994fba8cf2d58c93b58b047a7d69175c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in bea-adapter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12e26d629eddda0237f04bb05d4768fe994fba8cf2d58c93b58b047a7d69175c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
bea-services.de XSS vulnerability
Vulnerable URL: https://www.bea-services.de/newsletter-registration Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4536139 VIP website status:| No Check bea-services.de SSL...
CVE-2004-2320
The default configuration of BEA WebLogic Server and Express 8.1 SP2 and earlier, 7.0 SP4 and earlier, 6.1 through SP6, and 5.1 through SP13 responds to the HTTP TRACE request, which can allow remote attackers to steal information using cross-site tracing XST attacks in applications that are...
BEA WebLogic SSL Handling Denial of Service weblogic attack - Ver2 (CVE-2004-2424)
A denial-of-service vulnerability has been reported in BEA Systems WebLogic Server. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
BEA AquaLogic Interaction 6.0/6.1 Plumtree Portal Multiple Information Disclosure Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/26620/info BEA AquaLogic Interaction is prone to multiple information-disclosure vulnerabilities. Attackers can exploit these issues to access valid usernames in the Plumtree portal as well as the server hostname, build...
BEA WebLogic 7.0/8.1 Administration Console Error Page Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13794/info BEA WebLogic Server And WebLogic Express are affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the error page. A...
BEA WebLogic 7.0/8.1 Administration Console Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14657/info BEA WebLogic administration console is prone to cross-site scripting attacks. An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of...
BEA Systems Weblogic Server 4.0 x/4.5 x/5.1 x Double Dot Buffer Overflow
No description provided by source. source: http://www.securityfocus.com/bid/2138/info BEA Systems WebLogic Server is an enterprise level web and wireless application server. Unchecked buffers exist in a particular handler for URL requests that begin with two dots ... Depending on the data entered...
BEA Systems WebLogic Server and Express 7.0 Null Character DoS
No description provided by source. source: http://www.securityfocus.com/bid/4646/info BEA Systems WebLogic Server is an enterprise level web and wireless application server for Microsoft Windows and most Unix and Linux distributions. BEA WebLogic Express provides a platform for serving dynamic da...
BEA WebLogic JSESSIONID Cookie Value Overflow
No description provided by source. $Id: beaweblogicjsessionid.rb 9670 2010-07-03 03:19:07Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and ter...
BEA WebLogic 6/7/8 InteractiveQuery.jsp Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8938/info It has been reported that BEA WebLogic InteractiveQuery.jsp example application is prone to a cross-site scripting vulnerability. The issue is reported to exist due insufficient sanitization of user-supplied dat...
BEA Weblogic Transfer-Encoding Buffer Overflow
No description provided by source. $Id: beaweblogictransferencoding.rb 9744 2010-07-08 23:34:50Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing a...
BEA WebLogic Server 8.1 And WebLogic Express Administration Console Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13400/info A remote cross-site scripting vulnerability affects BEA WebLogic Server and WebLogic Express administration console. This issue is due to a failure of the application to properly sanitize user-supplied input...
BEA WebLogic 7.0 Hostname/NetBIOS Name Remote Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7257/info It has been reported that some types of requests may result in sensitive information disclosure. From this, an attacker may be able to launch a more organized attack against vulnerable hosts. GET...
BEA WebLogic 7.0/8.1 Administration Console LoginForm.jsp Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13793/info BEA WebLogic Server And WebLogic Express are affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'LoginForm.jsp'...