Unspecified Vulnerability in Oracle WebLogic Server (CNVD-2018-24320)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collection, etc. WebLogic Server is one of the application server components for cloud and traditional...

Optional VPP Apps show "Mismatch between user and device iTunes store account hashes"

The following error is seen when inspecting the Delivery Group details of an Apple device on the MDM server console: "Mismatch between user and device iTunes store account hashes". Attempts to send installation commands for VPP apps from the MDM server to the Apple device can fail. Optional VPP a...

Unspecified Vulnerability in Oracle Fusion Middleware WebLogic Server Component (CNVD-2016-02579)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's business innovation platform for enterprise and cloud environments, of which Oracle WebLogic Server is an application server component for both cloud and traditional environments. An unspecified vulnerability in the Console...

Unspecified Vulnerability in Oracle Fusion Middleware WebLogic Server Component

Oracle WebLogic Server is an Oracle Oracle application server for cloud and traditional environments, which provides a modern lightweight development platform that supports the entire lifecycle management of applications from development to production and simplifies application deployment and...

CVE-2013-7259

Multiple cross-site request forgery CSRF vulnerabilities in Neo4J 1.9.2 allow remote attackers to hijack the authentication of administrators for requests that execute arbitrary code, as demonstrated by a request to 1 db/data/ext/GremlinPlugin/graphdb/executescript or 2 db/manage/server/console/...

PT-2014-3312

Name of the Vulnerable Software and Affected Versions Neo4J version 1.9.2 Description The issue allows remote attackers to hijack the authentication of administrators for requests that execute arbitrary code. This can be achieved through requests to API endpoints such as...

CVE-2011-1520

The default configuration of the server console in IBM Lotus Domino does not require a password aka ServerConsolePassword, which allows physically proximate attackers to perform administrative changes or obtain sensitive information via a 1 Load, 2 Tell, or 3 Set Configuration command...

Design/Logic Flaw

The default configuration of the server console in IBM Lotus Domino does not require a password aka ServerConsolePassword, which allows physically proximate attackers to perform administrative changes or obtain sensitive information via a 1 Load, 2 Tell, or 3 Set Configuration command...

CVE-2011-1520

CVE-2011-1520 affects IBM Lotus Domino where the server console default configuration does not require a password, enabling physically proximate attackers to perform administrative actions or exfiltrate sensitive information via Load, Tell, or Set Configuration commands. The issue is a local acce...

CVE-2011-1520

The default configuration of the server console in IBM Lotus Domino does not require a password aka ServerConsolePassword, which allows physically proximate attackers to perform administrative changes or obtain sensitive information via a 1 Load, 2 Tell, or 3 Set Configuration command...

CVE-2011-1520: Improper Authentication

The default configuration of the server console in IBM Lotus Domino does not require a password aka ServerConsolePassword, which allows physically proximate attackers to perform administrative changes or obtain sensitive information via a 1 Load, 2 Tell, or 3 Set Configuration command...

PT-2011-3186

Name of the Vulnerable Software and Affected Versions IBM Lotus Domino affected versions not specified Description The default configuration of the server console in IBM Lotus Domino does not require a password, allowing physically proximate attackers to perform administrative changes or obtain...

VMware WebAccess Cross Site Scripting vulnerability (Windows)

This host is installed with VMWare Server and is prone to Cross site scripting Vulnerability. OpenVAS Vulnerability Test $Id: gbvmwareserverwebaccessxssvulnwin.nasl 6518 2017-07-04 13:49:06Z cfischer $ VMware WebAccess Cross Site Scripting Vulnerability Windows Authors: Antu Sanadi Copyright:...

Cross site scripting

Cross-site scripting XSS vulnerability in WebAccess in VMware VirtualCenter 2.0.2 and 2.5 and VMware ESX 3.0.3 and 3.5, and the Server Console in VMware Server 1.0, allows remote attackers to inject arbitrary web script or HTML via the name of a virtual machine...

CVE-2010-1137

Cross-site scripting XSS vulnerability in WebAccess in VMware VirtualCenter 2.0.2 and 2.5 and VMware ESX 3.0.3 and 3.5, and the Server Console in VMware Server 1.0, allows remote attackers to inject arbitrary web script or HTML via the name of a virtual machine...

CVE-2010-1137: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in WebAccess in VMware VirtualCenter 2.0.2 and 2.5 and VMware ESX 3.0.3 and 3.5, and the Server Console in VMware Server 1.0, allows remote attackers to inject arbitrary web script or HTML via the name of a virtual machine...

CVE-2003-1570

The server in IBM Tivoli Storage Manager TSM 5.1.x, 5.2.x before 5.2.1.2, and 6.x before 6.1 does not require credentials to observe the server console in some circumstances, which allows remote authenticated administrators to monitor server operations by establishing a console mode session,...

CVE-2003-1570

The CVE-2003-1570 issue affects IBM Tivoli Storage Manager (TSM) server versions 5.1.x, 5.2.x prior to 5.2.1.2, and 6.x prior to 6.1. The vulnerability allows remote authenticated administrators to observe the server console without requiring credentials in certain circumstances, effectively expo...

Sun Server Console Authentication Bypass

The remote host is running the Sun ONE Server Console, which provides an administrative interface to the Sun Java System Directory Server installed there. The Server Console instance on the remote host allows authentication using a default set of credentials - 'admin' / 'admin'. This is likely th...

DEBIAN-CVE-2006-2441

Pioneers meta-server before 0.9.55, when the server-console is not installed, allows remote attackers to cause a denial of service crash via certain requests from an older gnocatan client to create a new game...