6769 matches found
IBM WebSphere 'ResetPassword' Information Disclosure
Binary data 2712.prm...
CVE-2005-0425
Unknown vulnerability in IBM Websphere Application Server 5.0, 5.1, and 6.0 when running on Windows, allows remote attackers to obtain the source code for Java Server Pages .jsp via a crafted URL that causes the page to be processed by the file serving servlet instead of the JSP engine...
CVE-2005-0425: Undefined Security Weakness
Unknown vulnerability in IBM Websphere Application Server 5.0, 5.1, and 6.0 when running on Windows, allows remote attackers to obtain the source code for Java Server Pages .jsp via a crafted URL that causes the page to be processed by the file serving servlet instead of the JSP engine...
IBM WebSphere JSP Engine Source Disclosure
Binary data 2612.prm...
IBM WebSphere Java Server Pages (JSP) source code leak
No description provided...
[SA14274] IBM WebSphere Application Server JSP Source Code Disclosure
TITLE: IBM WebSphere Application Server JSP Source Code Disclosure SECUNIA ADVISORY ID: SA14274 VERIFY ADVISORY: http://secunia.com/advisories/14274/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: IBM WebSphere Application Server 6.x...
IBM Websphere Commerce Database Update Information Disclosure
The remote host is running a version of IBM Websphere Commerce that may allow potentially confidential information to be accessed through the default user account. An attacker, exploiting this flaw, would only need to be able to make standard queries to the application server. %NASLMINLEVEL 70300...
IBM WebSphere Commerce Database Update Default User Information Disclosure
Binary data 2461.prm...
IBM WebSphere information leak
It's possible to retrieve customers information...
[SA13234] IBM WebSphere Commerce Customer Information Disclosure
TITLE: IBM WebSphere Commerce Customer Information Disclosure SECUNIA ADVISORY ID: SA13234 VERIFY ADVISORY: http://secunia.com/advisories/13234/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: Local system SOFTWARE: IBM WebSphere Commerce 5.x...
CVE-2002-1153
IBM Websphere 4.0.3 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an HTTP request with long HTTP headers, such as "Host"...
CVE-2002-1153: Undefined Security Weakness
IBM Websphere 4.0.3 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an HTTP request with long HTTP headers, such as "Host"...
IBM WebSphere Application Server < 6.0.2.35 Multiple Vulnerabilities
Binary data 5076.prm...
IBM WebSphere Application Server < 6.1.0.25 Multiple Vulnerabilities
Binary data 5077.prm...
IBM WebSphere Application Server < 6.1.0.17 Unspecified Vulnerability
Binary data 4530.prm...
IBM WebSphere Edge DoS
Server crashes on incomlete HTTP request...
IBM Websphere Caching Proxy Server 5.0 2 - Denial of Service
source: https://www.securityfocus.com/bid/10651/info A denial of service vulnerability is reported in the Caching Proxy component bundled with the IBM Websphere Edge Server. It is reported that if the proxy is configured with the JunctionRewrite directive in conjunction with the UseCookie option,...
IBM Websphere Caching Proxy Server 5.0 2 - Denial of Service
IBM Websphere Caching Proxy Server 5.0 2 - Denial of Service source: https://www.securityfocus.com/bid/10651/info A denial of service vulnerability is reported in the Caching Proxy component bundled with the IBM Websphere Edge Server. It is reported that if the proxy is configured with the...
CVE-2003-1447
IBM WebSphere Advanced Server Edition 4.0.4 uses a weak encryption algorithm XOR and base64 encoding, which allows local users to decrypt passwords when the configuration file is exported to XML...
Multiple vendor SOAP server (XML parser) denial of service (DTD parameter entities)
/////////////////////////////////////////////////////////////////////////////// //========================== Security Advisory ==========================// ///////////////////////////////////////////////////////////////////////////////...