CVE-2014-0414

Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality via vectors related to HTTP Request Handling...

CVE-2014-0413

CVE-2014-0413 affects Oracle Fusion Middleware 10.1.3.5’s Oracle Containers for J2EE component. The vulnerability arises in HTTP request handling, enabling remote attackers to impact integrity. This entry is a separate issue from CVE-2014-0426. Connected sources confirm affected product/component...

CVE-2014-0413: Undefined Security Weakness

Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect integrity via vectors related to HTTP Request Handling, a different vulnerability than CVE-2014-0426...

CVE-2014-0414: Undefined Security Weakness

Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality via vectors related to HTTP Request Handling...

PT-2014-1215

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware version 10.1.3.5 Description The issue is related to HTTP Request Handling in the Oracle Containers for J2EE component. It allows remote attackers to affect integrity. The vulnerability is also described as being relat...

PT-2014-1216

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware version 10.1.3.5 Description The issue affects confidentiality and is related to HTTP Request Handling. It involves incorrect handling of a null byte in the path when forwarding a request to another static page or JSP...

CVE-2014-0426: Undefined Security Weakness

Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect integrity via vectors related to HTTP Request Handling, a different vulnerability than CVE-2014-0413...

tomcat: multiple content-length header poisoning flaws

It was found that when Tomcat / JBoss Web processed a series of HTTP requests in which at least one request contained either multiple content-length headers, or one content-length header with a chunked transfer-encoding header, Tomcat / JBoss Web would incorrectly handle the request. A remote...

Microsoft SCCM Reflected Cross-site Scripting (MS12-062) - Ver2 (CVE-2012-2536)

A cross-site scripting vulnerability has been reported in Microsoft System Center Configuration Manager SCCM. The vulnerability is due to an error in the way System Center Configuration Manager handles specially crafted requests. A remote attacker can exploit this issue by enticing a target user ...

CVE-2013-4286

Removed by vendor...

CentOS Update for haproxy CESA-2013:1120 centos6

Check for the Version of haproxy OpenVAS Vulnerability Test CentOS Update for haproxy CESA-2013:1120 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

CentOS 6 : haproxy (CESA-2013:1120)

An updated haproxy package that fixes one security issue is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Squid "idnsALookup()" DNS名称处理缓冲区溢出漏洞

Squid是一个高效的Web缓存及代理程序。 Squid 3.2 - 3.2.11、3.3 - 3.3.6在处理DNS查询生成请求时，"idnsALookup" 函数发生错误，攻击者通过发送特制的HTTP请求利用此漏洞可造成缓冲区溢出。 0 Squid 3.x 厂商补丁： Squid ----- Squid已经为此发布了一个安全公告（SQUID-20132）以及相应补丁: SQUID-20132：Buffer overflow in HTTP request handling 链接：http://www.squid-cache.org/Advisories/SQUID-20132.txt...

PT-2013-1323 · Schneider Electric · Modicon M340 +2

Name of the Vulnerable Software and Affected Versions: Modicon M340 versions affected versions not specified Modicon Quantum versions affected versions not specified Modicon Premium versions affected versions not specified Description: The issue is related to errors in security mechanisms, which...

VMware ESX and ESXi Server SOAP Request Handling Denial Of Service (CVE-2012-5703)

The vulnerability is due to improper handling of certain SOAP requests in the vSphere API...

[SECURITY] Fedora 17 Update: rubygem-actionpack-3.0.11-8.fc17

Eases web-request routing, handling, and response as a half-way front, half-way page controller. Implemented with specific emphasis on enabling ea sy unit/integration testing that doesn't require a browser...

NetIQ Privileged User Manager 2.3.1 ldapagnt_eval() Remote Perl Code Execution

his Metasploit module abuses a lack of authorization in the NetIQ Privileged User Manager service unifid.exe to execute arbitrary perl code. The problem exists in the ldapagnt module. The module has been tested successfully on NetIQ PUM 2.3.1 over Windows 2003 SP2, which allows to execute arbitra...

Fedora Update for rubygem-actionpack FEDORA-2012-11363

Check for the Version of rubygem-actionpack OpenVAS Vulnerability Test Fedora Update for rubygem-actionpack FEDORA-2012-11363 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Fedora Update for rubygem-actionpack FEDORA-2012-11870

Check for the Version of rubygem-actionpack OpenVAS Vulnerability Test Fedora Update for rubygem-actionpack FEDORA-2012-11870 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

[SECURITY] Fedora 16 Update: rubygem-actionpack-3.0.10-9.fc16

Eases web-request routing, handling, and response as a half-way front, half-way page controller. Implemented with specific emphasis on enabling ea sy unit/integration testing that doesn't require a browser...