7311 matches found
IBM Websphere Commerce Database Update Information Disclosure
The remote host is running a version of IBM Websphere Commerce that may allow potentially confidential information to be accessed through the default user account. An attacker, exploiting this flaw, would only need to be able to make standard queries to the application server. %NASLMINLEVEL 70300...
IBM WebSphere Commerce Database Update Default User Information Disclosure
Binary data 2461.prm...
IBM WebSphere information leak
It's possible to retrieve customers information...
[SA13234] IBM WebSphere Commerce Customer Information Disclosure
TITLE: IBM WebSphere Commerce Customer Information Disclosure SECUNIA ADVISORY ID: SA13234 VERIFY ADVISORY: http://secunia.com/advisories/13234/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: Local system SOFTWARE: IBM WebSphere Commerce 5.x...
CVE-2002-1153
IBM Websphere 4.0.3 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an HTTP request with long HTTP headers, such as "Host"...
CVE-2002-1153: Undefined Security Weakness
IBM Websphere 4.0.3 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an HTTP request with long HTTP headers, such as "Host"...
IBM WebSphere Application Server < 6.1.0.17 Unspecified Vulnerability
Binary data 4530.prm...
IBM WebSphere Application Server < 6.0.2.35 Multiple Vulnerabilities
Binary data 5076.prm...
IBM WebSphere Application Server < 6.1.0.25 Multiple Vulnerabilities
Binary data 5077.prm...
IBM WebSphere Edge DoS
Server crashes on incomlete HTTP request...
IBM Websphere Caching Proxy Server 5.0 2 - Denial of Service
IBM Websphere Caching Proxy Server 5.0 2 - Denial of Service source: https://www.securityfocus.com/bid/10651/info A denial of service vulnerability is reported in the Caching Proxy component bundled with the IBM Websphere Edge Server. It is reported that if the proxy is configured with the...
IBM Websphere Caching Proxy Server 5.0 2 - Denial of Service
source: https://www.securityfocus.com/bid/10651/info A denial of service vulnerability is reported in the Caching Proxy component bundled with the IBM Websphere Edge Server. It is reported that if the proxy is configured with the JunctionRewrite directive in conjunction with the UseCookie option,...
CVE-2003-1447
IBM WebSphere Advanced Server Edition 4.0.4 uses a weak encryption algorithm XOR and base64 encoding, which allows local users to decrypt passwords when the configuration file is exported to XML...
Multiple vendor SOAP server (XML parser) denial of service (DTD parameter entities)
/////////////////////////////////////////////////////////////////////////////// //========================== Security Advisory ==========================// ///////////////////////////////////////////////////////////////////////////////...
Multiple Vendor SOAP server (XML parser) attribute blowup DoS
/////////////////////////////////////////////////////////////////////////////// //========================== Security Advisory ==========================// ///////////////////////////////////////////////////////////////////////////////...
IBM WebSphere HTTP Request Header Remote Overflow
It was possible to kill the WebSphere server by sending an invalid request for a .jsp with a too long Host: header. An attacker may exploit this vulnerability to make your web server crash continually. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. References... From:"PeterGrundl"...
IBM WebSphere Edge Caching Proxy DoS
We could crash the WebSphere Edge caching proxy by sending a bad request to the helpout.exe CGI. C Tenable Network Security, Inc. References: From:"Rapid 7 Security Advisories" Message-ID: Date: Wed, 23 Oct 2002 12:08:39 -0700 Subject: R7-0007: IBM WebSphere Edge Server Caching Proxy Denial of...
IBM Websphere Edge Server 3.694.0 - HTTP Header Injection
IBM Websphere Edge Server 3.694.0 - HTTP Header Injection source: https://www.securityfocus.com/bid/6001/info A vulnerability has been discovered in the Caching Proxy component bundled with the IBM Websphere Edge Server. Due to insufficient sanitization of user-supplied input it is possible for a...
IBM Websphere Edge Server 3.64.0 - Cross-Site Scripting
IBM Websphere Edge Server 3.64.0 - Cross-Site Scripting source: https://www.securityfocus.com/bid/6000/info A vulnerability has been discoverered in the Caching Proxy component bundled with the IBM Websphere Edge Server. It has been reported that the Caching Proxy is vulnerable to cross site...
IBM Websphere Edge Server 3.6/4.0 - Cross-Site Scripting
source: https://www.securityfocus.com/bid/6000/info A vulnerability has been discoverered in the Caching Proxy component bundled with the IBM Websphere Edge Server. It has been reported that the Caching Proxy is vulnerable to cross site scripting attacks. Due to insufficient sanitization of...