Design/Logic Flaw

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 allows remote attackers to affect confidentiality, related to JMS...

CVE-2011-2319

CVE-2011-2319 affects Oracle WebLogic Server within Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0. The vulnerability (described as unspecified) relates to JMS and can allow remote attackers to affect confidentiality. The linked sources do not provide a concrete root...

CVE-2011-2319

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 allows remote attackers to affect confidentiality, related to JMS...

PT-2011-3771

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 Description The issue affects confidentiality and is related to JMS. Recommendations For versions 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0, at the...

CVE-2011-2319: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 allows remote attackers to affect confidentiality, related to JMS...

Joomla! Component com_jmsfileseller - Local File Inclusion

Exploit Title: Joomla Component comjmsfileseller Local File Inclusion Vulnerability Date: 28.05.2011 Author: Valentin Category: webapps/0day Version: 1.0 Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit...

Joomla Component com_jmsfileseller Local File Inclusion Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla Component comjmsfileseller Local File Inclusion Vulnerability Date: 28.05.2011 Author: Valentin Category: webapps/0day Version: 1.0 Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1...

PT-2011-3046

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions prior to 7.0.0.15 Description A memory leak in the messaging engine allows remote attackers to cause a denial of service via network connections associated with a NULL return value from a synchronous J...

CVE-2011-1315: Undefined Security Weakness

Memory leak in the messaging engine in IBM WebSphere Application Server WAS before 7.0.0.15 allows remote attackers to cause a denial of service memory consumption via network connections associated with a NULL return value from a synchronous JMS receive call...

CVE-2010-4438

Unspecified vulnerability in Oracle GlassFish 2.1, 2.1.1, and 3.0.1, and Java System Message Queue 4.1 allows local users to affect confidentiality, integrity, and availability, related to Java Message Service JMS...

CVE-2010-4438

CVE-2010-4438 relates to a local privilege escalation in Oracle GlassFish Server (notably GlassFish 2.x/3.0.1 and JMS components). The OpenVAS entries confirm a GlassFish privilege-escalation vulnerability with CVSS base 5.7 (local access, partial confidentiality/integrity impact, complete availa...

PT-2011-1542

Name of the Vulnerable Software and Affected Versions Oracle GlassFish versions 2.1 through 3.0.1 Java System Message Queue version 4.1 Description The issue affects confidentiality, integrity, and availability, and is related to Java Message Service JMS, allowing local users to exploit it...

IBM WebSphere Application Server 6.1 < 6.1.0.7 Multiple Vulnerabilities

IBM WebSphere Application Server 6.1 before Fix Pack 7 appears to be running on the remote host. As such, it is reportedly affected by the following vulnerabilities : - An unspecified denial of service vulnerability in the Java Message Service JMS. - An unspecified vulnerability in the Servlet...

Code injection

Unspecified vulnerability in TIBRepoServer5.jar in TIBCO Administrator 5.4.0 through 5.6.0, when JMS transport is used, allows remote authenticated users to execute arbitrary code on all domain nodes via vectors related to leveraging administrative credentials...

CVE-2010-0683

Unspecified vulnerability in TIBRepoServer5.jar in TIBCO Administrator 5.4.0 through 5.6.0, when JMS transport is used, allows remote authenticated users to execute arbitrary code on all domain nodes via vectors related to leveraging administrative credentials...

CVE-2010-0683

The CVE-2010-0683 issue affects TIBCO Administrator versions 5.4.0–5.6.0, specifically the TIBRepoServer5.jar (tibreposerver5.jar) used with the JMS transport. The root cause is improper enforcement of administrator privileges, allowing remote authenticated users to execute arbitrary code on all ...

CVE-2010-0683

Unspecified vulnerability in TIBRepoServer5.jar in TIBCO Administrator 5.4.0 through 5.6.0, when JMS transport is used, allows remote authenticated users to execute arbitrary code on all domain nodes via vectors related to leveraging administrative credentials...

CVE-2010-0683: Undefined Security Weakness

Unspecified vulnerability in TIBRepoServer5.jar in TIBCO Administrator 5.4.0 through 5.6.0, when JMS transport is used, allows remote authenticated users to execute arbitrary code on all domain nodes via vectors related to leveraging administrative credentials...

TIBCO Security Advisory: February 23, 2010 - TIBCOAdministrator™

TIBCO Administrator™ vulnerability Original release date: Feb 23, 2010 Last revised: -- CVE-2010-0683 Source: TIBCO SoftwareInc. TIBCO Administrator vulnerability Original release date: Feb 23, 2010 Last revised: -- Source: TIBCO Software Inc. Systems Affected TIBCO Administrator versions 5.4.0...

PeopleSoft PeopleTools JMS Listening Connector Activity Parameter XSS

The remote web server is running an instance of PeopleSoft PeopleTools that fails to sanitize user-supplied input to the 'Activity' parameter on submission to the JMS Listening Connector Administrator interface before using it to generate dynamic HTML output. An attacker may be able to leverage...