Sun Java System Messenger Express 6.1-13-15 - sid Cross-Site Scripting

Sun Java System Messenger Express 6.1-13-15 - sid Cross-Site Scripting source: https://www.securityfocus.com/bid/28649/info Sun Java System Messenger Express is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may...

Code injection

Unspecified vulnerability in the BEA WebLogic Server and Express proxy plugin, as distributed before November 2007 and before 9.2 MP3 and 10.0 MP2, allows remote attackers to cause a denial of service web server crash via a crafted URL...

Cross site scripting

Cross-site scripting XSS vulnerability in the Administration Console in BEA WebLogic Server and Express 9.0 through 10.0 allows remote attackers to inject arbitrary web script or HTML via URLs that are not properly handled by the Unexpected Exception Page...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in BEA WebLogic Server and Express 6.1 through 10.0 MP1 allow remote attackers to inject arbitrary web script or HTML via unspecified samples. NOTE: this might be the same issue as CVE-2007-2694...

CVE-2008-0903

Unspecified vulnerability in the BEA WebLogic Server and Express proxy plugin, as distributed before November 2007 and before 9.2 MP3 and 10.0 MP2, allows remote attackers to cause a denial of service web server crash via a crafted URL...

CVE-2008-0903

CVE-2008-0903 affects BEA WebLogic Server and Express proxy plugin. A visible, unspecified vulnerability in these components (pre-November 2007, and pre-9.2 MP3/10.0 MP2) could be exploited remotely to cause a denial of service (web server crash) via a crafted URL. The connected records confirm t...

CVE-2008-0902

Multiple cross-site scripting XSS vulnerabilities in BEA WebLogic Server and Express 6.1 through 10.0 MP1 allow remote attackers to inject arbitrary web script or HTML via unspecified samples. NOTE: this might be the same issue as CVE-2007-2694...

CVE-2008-0902: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in BEA WebLogic Server and Express 6.1 through 10.0 MP1 allow remote attackers to inject arbitrary web script or HTML via unspecified samples. NOTE: this might be the same issue as CVE-2007-2694...

CVE-2008-0901: Exposure of Sensitive Information to an Unauthorized Actor

BEA WebLogic Server and Express 7.0 through 10.0 allows remote attackers to conduct brute force password guessing attacks, even when account lockout has been activated, via crafted URLs that indicate whether a guessed password is successful or not...

CVE-2008-0900: Undefined Security Weakness

Session fixation vulnerability in BEA WebLogic Server and Express 8.1 SP4 through SP6, 9.2 through MP1, and 10.0 allows remote authenticated users to hijack web sessions via unknown vectors...

CVE-2008-0903: Undefined Security Weakness

Unspecified vulnerability in the BEA WebLogic Server and Express proxy plugin, as distributed before November 2007 and before 9.2 MP3 and 10.0 MP2, allows remote attackers to cause a denial of service web server crash via a crafted URL...

CVE-2008-0899: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Administration Console in BEA WebLogic Server and Express 9.0 through 10.0 allows remote attackers to inject arbitrary web script or HTML via URLs that are not properly handled by the Unexpected Exception Page...

CVE-2008-0895: Improper Authentication

BEA WebLogic Server and WebLogic Express 6.1 through 10.0 allows remote attackers to bypass authentication for application servlets via crafted request headers...

Code injection

BEA WebLogic Server and WebLogic Express 9.0 and 9.1 exposes the web service's WSDL and security policies, which allows remote attackers to obtain sensitive information and potentially launch further attacks...

CVE-2008-0863

BEA WebLogic Server and WebLogic Express 9.0 and 9.1 exposes the web service's WSDL and security policies, which allows remote attackers to obtain sensitive information and potentially launch further attacks...

CVE-2008-0863

BEA WebLogic Server and WebLogic Express 9.0/9.1 expose the web service WSDL and security policies, allowing remote retrieval of sensitive information and the potential to launch further attacks. Affected component: WebLogic web services configuration; root cause: exposed WSDL/security policy end...

CVE-2008-0863: Exposure of Sensitive Information to an Unauthorized Actor

BEA WebLogic Server and WebLogic Express 9.0 and 9.1 exposes the web service's WSDL and security policies, which allows remote attackers to obtain sensitive information and potentially launch further attacks...

AIX 520009 : U811313

The remote host is missing AIX PTF U811313 which is related to the security of the package devices.pciex.14104003.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

IBM Tivoli Storage Manager Express Backup Server buffer overflow

TSM Express Backup Server TCP/1500 buffer overflow...

IBM Tivoli Storage Manager Express Backup Server Heap Overflow Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of IBM Tivoli Storage Manager Express. Authentication is not required to exploit this vulnerability. The specific flaw resides in the TSM Express Backup Server service, dsmsvc.exe, which listens by default o...