5195 matches found
Design/Logic Flaw
Unspecified vulnerability in Oracle Application Server 9.0.4.3 and 10.1.2.0.2 allows remote attackers to have an unknown impact via Oracle Single Sign On, aka AS01...
CVE-2007-3864
Multiple unspecified vulnerabilities in Oracle Collaboration Suite 10.1.2 have unknown impact and remote attack vectors via 1 Instant Messaging/Presence OCS01 and 2 Oracle Single Sign On AS02...
CVE-2007-3862
Unspecified vulnerability in Oracle Application Server 9.0.4.3 and 10.1.2.0.2 allows remote attackers to have an unknown impact via Oracle Single Sign On, aka AS01...
CVE-2007-3862
Unspecified vulnerability in Oracle Application Server 9.0.4.3 and 10.1.2.0.2 allows remote attackers to have an unknown impact via Oracle Single Sign On, aka AS01...
CVE-2007-3864
Multiple unspecified vulnerabilities in Oracle Collaboration Suite 10.1.2 have unknown impact and remote attack vectors via 1 Instant Messaging/Presence OCS01 and 2 Oracle Single Sign On AS02...
CVE-2007-3864
CVE-2007-3864 relates to multiple unspecified vulnerabilities in Oracle Collaboration Suite 10.1.2 with remote attack vectors via Instant Messaging/Presence (OCS01) and Oracle Single Sign On (AS02). The connected sources consistently identify the affected product as Oracle Collaboration Suite 10....
CVE-2007-3862: Undefined Security Weakness
Unspecified vulnerability in Oracle Application Server 9.0.4.3 and 10.1.2.0.2 allows remote attackers to have an unknown impact via Oracle Single Sign On, aka AS01...
CVE-2007-3864: Undefined Security Weakness
Multiple unspecified vulnerabilities in Oracle Collaboration Suite 10.1.2 have unknown impact and remote attack vectors via 1 Instant Messaging/Presence OCS01 and 2 Oracle Single Sign On AS02...
Information disclosure
Unspecified vulnerability in the G/PGP GPG Plugin 2.0 for Squirrelmail 1.4.10a allows remote authenticated users to execute arbitrary commands via unspecified vectors, possibly related to the passphrase variable in the gpgsignattachment function, aka ZD-00000004. this information is based upon a...
CVE-2007-2265
Cross-site scripting XSS vulnerability in YA Book 0.98-alpha allows remote attackers to inject arbitrary web script or HTML via the City field in a sign action in index.php...
[Full-disclosure] Cosign SSO Authentication Bypass
Author: Jon Oberheide [email protected] Date: Wed, April 11th, 2007 Summary ======= Application: Cosign Single Sign-On Affected Versions: 2.0.1 and previous Vendor Website: http://weblogin.org Type of Vulnerability: Authentication Bypass - Remote Background ========== cosign is a web single-sign-...
3APA3A : NTLM in corporate networks
November 18, 2004| 3APA3A NTLM in corporate networks Introduction When, a decade and a half ago, Microsoft began serious work on creating enterprise-wide centralized networks while working on the Windows NT operating system, the developers were given a very difficult and new task for those times ...
IBM Tivoli Storage Manager多个缓冲区溢出漏洞
IBM Tivoli Storage Manager是一款用于系统备份和恢复的解决方案。 IBM Tivoli Storage Manager存在多个安全问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务或缓冲区溢出攻击。 问题一： 初始化sign-on请求包含指定语言的字段，在一般情况下字符串是dscenu.txt，通常情况下服务器验证的语言字符串不超过0x100字节，但是，如果语言字符串第一个字节为0x18，那么这个检查将不发生，而造成固定的缓冲区被溢出。 问题二和三：...
CVE-2006-5355
Unspecified vulnerability in Oracle Single Sign-On component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.1.0, Collaboration Suite 9.0.4.2 and 10.1.2, and Oracle E-Business Suite and Applications 11.5.10CU2 has unknown impact and remote attack vectors, aka Vuln SSO01...
CVE-2006-5355
Unspecified vulnerability in Oracle Single Sign-On component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.1.0, Collaboration Suite 9.0.4.2 and 10.1.2, and Oracle E-Business Suite and Applications 11.5.10CU2 has unknown impact and remote attack vectors, aka Vuln SSO01...
CVE-2006-5363
Unspecified vulnerability in Oracle Single Sign-On component in Oracle Application Server 10.1.2.0.1 and Collaboration Suite 10.1.2 has unknown impact and remote attack vectors, aka Vuln SSO02...
CVE-2006-5355
Technical details for CVE-2006-5355 are not publicly available in the provided documents; monitor for updates.
CVE-2006-5363
Technical details for CVE-2006-5363 are not publicly available in the provided documents. Monitor for updates from vendor advisories or security feeds before drawing conclusions about impact, affected components, or fixes.
CVE-2006-5355: Undefined Security Weakness
Unspecified vulnerability in Oracle Single Sign-On component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.1.0, Collaboration Suite 9.0.4.2 and 10.1.2, and Oracle E-Business Suite and Applications 11.5.10CU2 has unknown impact and remote attack vectors, aka Vuln SSO01...
CVE-2006-5363: Undefined Security Weakness
Unspecified vulnerability in Oracle Single Sign-On component in Oracle Application Server 10.1.2.0.1 and Collaboration Suite 10.1.2 has unknown impact and remote attack vectors, aka Vuln SSO02...