CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

919 matches found

Exploit DB•added 2009/05/05 12:00 a.m.•24 views

GlassFish Enterprise Server 2.1 - Admin Console /applications/applications.jsf URI Cross-Site Scripting

source: https://www.securityfocus.com/bid/34824/info GlassFish Enterprise Server is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Attacker-supplied HTML and script code would run in the context of the affected site, potential...

4.3CVSS5.8AI score0.08199EPSS

SaveExploits9

Exploit DB•added 2009/05/05 12:00 a.m.•27 views

GlassFish Enterprise Server 2.1 - Admin Console '/resourceNode/jdbcResourceEdit.jsf?name' Cross-Site Scripting

4.3CVSS5.8AI score0.08199EPSS

SaveExploits9

Exploit DB•added 2009/05/05 12:00 a.m.•21 views

GlassFish Enterprise Server 2.1 - Admin Console /sysnet/registration.jsf URI Cross-Site Scripting

4.3CVSS5.8AI score0.08199EPSS

SaveExploits9

OpenVAS•added 2009/02/06 12:00 a.m.•13 views

Sun Java System/ONE Application Server Detection (HTTP)

HTTP based detection of the Sun Java System/ONE Application Server. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1AI score

SaveExploits0

securityvulns•added 2009/01/11 12:00 a.m.•148 views

Java Runtime UTF-8 Decoder Smuggling Vector

Due to misconfiguration of mailing lists, it was just pointed out this is already public. Apologies to those vendors who have not reacted to Sun's announcements of December 2nd in a timely manner; Mitre ID: CVE-2008-2938 Initial title: Java Runtime UTF-8 Decoding Flaw Actual title: Java Runtime...

4.3CVSS7.4AI score0.99708EPSS

SaveExploits23

NVD•added 2008/11/28 7:00 p.m.•38 views

CVE-2008-5266

Cross-site scripting XSS vulnerability in configuration/httpListenerEdit.jsf in the GlassFish 2 UR2 b04 webadmin interface in Sun Java System Application Server 9.101 build b09d-fcs and 9.102 build b04-fcs allows remote attackers to inject arbitrary web script or HTML via the name parameter, a...

4.3CVSS5.6AI score0.05374EPSS

SaveExploits1References6

Prion•added 2008/11/28 7:00 p.m.•29 views

Cross site scripting

4.3CVSS6AI score0.05374EPSS

SaveExploits8References6Affected Software2

UbuntuCve•added 2008/11/28 7:00 p.m.•27 views

CVE-2008-5266

4.3CVSS6AI score0.05374EPSS

SaveExploits1References1

OSV•added 2008/11/28 7:00 p.m.•15 views

UBUNTU-CVE-2008-5266

4.3CVSS5.9AI score0.05374EPSS

SaveExploits1References2

Cvelist•added 2008/11/28 6:26 p.m.•52 views

CVE-2008-5266

5.6AI score0.05374EPSS

SaveExploits1References6

CVE•added 2008/11/28 6:26 p.m.•84 views

CVE-2008-5266

CVE-2008-5266 is an XSS in GlassFish 2 UR2 webadmin (configuration/httpListenerEdit.jsf) of Sun Java System Application Server 9.1_01 (build b09d-fcs) and 9.1_02 (build b04-fcs). Remote attackers can inject arbitrary script via the name parameter. CVSS v2 base score 4.3 (AV:N/AC:M/Au:N/I:P/C:N/A:...

4.3CVSS5.6AI score0.05374EPSS

SaveExploits1References6Affected Software2

Prion•added 2008/06/18 7:41 p.m.•27 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Glassfish webadmin interface in Sun Java System Application Server 9.101 allow remote attackers to inject arbitrary web script or HTML via the 1 propertyForm:propertyContentPage:propertySheet:propertSectionTextField:jndiProp:JndiNew, 2...

4.3CVSS5.8AI score0.04812EPSS

SaveExploits7References4Affected Software2

NVD•added 2008/06/18 7:41 p.m.•32 views

CVE-2008-2751

4.3CVSS5.7AI score0.04812EPSS

SaveExploits7References4

OSV•added 2008/06/18 7:41 p.m.•13 views

UBUNTU-CVE-2008-2751

4.3CVSS5.8AI score0.04812EPSS

SaveExploits7References2

UbuntuCve•added 2008/06/18 7:41 p.m.•52 views

CVE-2008-2751

4.3CVSS5.9AI score0.04812EPSS

SaveExploits7References1

CVE•added 2008/06/18 7:29 p.m.•82 views

CVE-2008-2751

CVE-2008-2751 concerns multiple XSS vulnerabilities in the GlassFish 2 Sun Java System Application Server 9.1_01 webadmin interface. The disclosed vectors affect the JSF pages (resourceNode, applications, etc.) via numerous form fields (e.g., jndiProp, resTypeProp, factoryClassProp, descProp, nam...

4.3CVSS5.7AI score0.04812EPSS

SaveExploits7References4Affected Software2

Cvelist•added 2008/06/18 7:29 p.m.•57 views

CVE-2008-2751

5.7AI score0.04812EPSS

SaveExploits7References4

Rapid7 Vulnerability Database (full)•added 2008/06/18 12:00 a.m.•3 views

CVE-2008-2751: Improper Neutralization of Input During Web Page Generation

4.3CVSS5.9AI score0.04812EPSS

SaveExploits7References2

exploitpack•added 2008/06/16 12:00 a.m.•9 views

GlassFish Application Server - ApplicationslifecycleModulesNew.jsf Multiple Cross-Site Scripting Vulnerabilities

GlassFish Application Server - ApplicationslifecycleModulesNew.jsf Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/29751/info Sun Glassfish is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied dat...

0.2AI score

SaveExploits0

securityvulns•added 2008/06/16 12:00 a.m.•182 views

Muitiple XSS - Glassfish Web Interface (Sun Java System Application Server 9.1_01 (build b09d-fcs) )

============================== Muitiple XSS - Glassfish Web Interface Sun Java System Application Server 9.101 build b09d-fcs ============================== Author: Eduardo Neves a.k.a eth0 Date: 14 june 2008 Site: http://webappsecurity.wordpress.com ============================== APPLICATION :...

0.3AI score

SaveExploits0

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by