CVE-2012-0081

Unspecified vulnerability in Oracle GlassFish Enterprise Server 3.1.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Administration...

CVE-2012-0081

Removed by vendor...

CVE-2011-3564

Removed by vendor...

CVE-2012-0104

Unspecified vulnerability in Oracle GlassFish Enterprise Server 3.0.1 and 3.1.1 allows remote attackers to affect availability via unknown vectors related to Web Container...

CVE-2011-3564

Unspecified vulnerability in Oracle GlassFish Enterprise Server 2.1.1 allows local users to affect confidentiality via unknown vectors related to Administration...

NGS00106 Technical Advisory: Increased exploitation of Oracle GlassFish Server Administration Console Remote Authentication Bypass Vulnerability

======= Summary ======= Name: Increased exploitation of Oracle GlassFish Server Administration Console Remote Authentication Bypass Vulnerability Release Date: 5 January 2012 Reference: NGS00106 Discoverer: David Spencer [email protected] Vendor: Oracle Vendor Reference: Systems Affecte...

Oracle GlassFish Server Administration Console < 3.1 Authentication Bypass Vulnerability - Active Check

Oracle GlassFish Server is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Oracle GlassFish Server Administration Bypass

======= Summary ======= Name: Increased exploitation of Oracle GlassFish Server Administration Console Remote Authentication Bypass Vulnerability Release Date: 5 January 2012 Reference: NGS00106 Discoverer: David Spencer Vendor: Oracle Vendor Reference: Systems Affected: Oracle GlassFish Server 2...

Oracle GlassFish Server Hash Collision Denial of Service Vulnerability

The host is running GlassFish Server and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbglassfishhashcollisiondosvuln.nasl 6018 2017-04-24 09:02:24Z teissa $ Oracle GlassFish Server Hash Collision Denial of Service Vulnerability Authors: Antu Sanadi Copyright:...

PHP Hash Table Collision - Denial of Service (PoC)

!/usr/bin/env python """ This script was written by Christian Mehlmauer https://twitter.com/!/FireFart Sourcecode online at: https://github.com/FireFart/HashCollision-DOS-POC Original PHP Payloadgenerator taken from https://github.com/koto/blog-kotowicz-net-examples/tree/master/hashcollision...

CVE-2011-5035

Oracle Glassfish 2.1.1, 3.0.1, and 3.1.1, as used in Communications Server 2.0, Sun Java System Application Server 8.1 and 8.2, and possibly other products, computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attacke...

Buffer overflow

Oracle Glassfish 2.1.1, 3.0.1, and 3.1.1, as used in Communications Server 2.0, Sun Java System Application Server 8.1 and 8.2, and possibly other products, computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attacke...

CVE-2011-5035

Removed by vendor...

Oracle GlassFish Server 3.x Web表单哈希冲突拒绝服务漏洞

Oracle GlassFish Server是一款构建和部署下一代应用程序和服务的开源和开放社区平台。 Oracle GlassFish Server在处理哈希表单张贴和更新哈希表单时，哈希生成函数中存在错误，通过在HTTP POST请求中发送特制的表单，攻击者可利用此漏洞造成哈希冲突，导致较高的CPU消耗 0 Oracle GlassFish Server 3.x 厂商补丁： Oracle ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Multiple Programming Language Implementations Vulnerable to Hash Table Collision Attacks

No description provided by source. US-CERT is aware of reports stating that multiple programming language implementations, including web platforms, are vulnerable to hash table collision attacks. This vulnerability could be used by an attacker to launch a denial-of-service attack against websites...

Oracle GlassFish / System Application Server Web Container DoS Vulnerability (Nov 2011)

GlassFish / System Application Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Oracle GlassFish/System Application Server Web Container DOS Vulnerability

The host is running GlassFish/System Application Server and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gboracleglassfishnsjaswebcontainerdosvuln.nasl 7029 2017-08-31 11:51:40Z teissa $ Oracle GlassFish/System Application Server Web Container DOS Vulnerability...

Oracle GlassFish Server Invalid Username Cross Site Scripting (CVE-2011-2260)

A persistent cross-site scripting vulnerability has been reported in Oracle GlassFish Server. The vulnerability is due to insufficient input validation of username values. A remote attacker may exploit this vulnerability by sending a specially crafted POST request to an affected server. Successfu...

Oracle GlassFish HTTP Server Version

The remote host is running an Oracle GlassFish HTTP Server, a Java EE application server. It was possible to read the version number from the HTTP response headers. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid55930; scriptversion"1.13";...

Oracle GlassFish Server Administration Console

The remote host is running the Oracle GlassFish application server, and has the administration console listening on an external IP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid55929; scriptversion"1.6"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"Oracle...