CVE-2011-3507

CVE-2011-3507 is an unspecified vulnerability in the Oracle Communications Unified component of Oracle Sun Products Suite 7.0. The connected Nessus entries show Solaris 10 patches (137204-31/33/34/35/36/37/38) for the Messaging Server (64-bit) 7.0.5.x line, indicating the issue was addressed by c...

CVE-2011-2327

CVE-2011-2327 affects the Oracle Communications Unified component in Oracle Sun Products Suite 7.0. The vulnerability could allow local users to affect confidentiality via unknown vectors related to Delegated Administrator. The NVD entry lists a low base CVSS v2 score (2.1, Local access, Partial ...

CVE-2011-3507: Undefined Security Weakness

Unspecified vulnerability in the Oracle Communications Unified component in Oracle Sun Products Suite 7.0 allows remote authenticated users to affect integrity via unknown vectors related to Messaging Server...

Cisco Unified Service Monitor brstart add_dm Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco Unified Service Monitor due to bundled EMC SMARTS application server. Authentication is not required to exploit this vulnerability. The flaw exists within the brstart.exe service which listen...

Cisco Unified Service Monitor brstart sm_read_string_length Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco Unified Service Monitor due to bundled EMC SMARTS application server. Authentication is not required to exploit this vulnerability. The flaw exists within the brstart.exe service which listen...

CVE-2011-2327: Undefined Security Weakness

Unspecified vulnerability in the Oracle Communications Unified component in Oracle Sun Products Suite 7.0 allows local users to affect confidentiality via unknown vectors related to Delegated Administrator...

PT-2011-4487

Name of the Vulnerable Software and Affected Versions Oracle Communications Unified component in Oracle Sun Products Suite version 7.0 Description The issue affects the integrity of the system, allowing remote authenticated users to exploit it via unknown vectors related to Messaging Server...

PT-2011-3775

Name of the Vulnerable Software and Affected Versions Oracle Communications Unified component in Oracle Sun Products Suite version 7.0 Description The issue affects confidentiality and is related to the Delegated Administrator in the Oracle Communications Unified component. It allows local users ...

Microsoft Forefront Unified Access Gateway Java Applet Signed Code Execution

Added: 10/17/2011 CVE: CVE-2011-1969 BID: 49983 OSVDB: 76236 Background Microsoft Forefront Unified Access Gateway UAG is a reverse proxy and VPN solution. Problem End users of UAG must install a signed Java applet via MicrosoftClient.jar. This applet loads unsigned Java classes, which may allow ...

Microsoft Forefront Unified Access Gateway Java Applet Signed Code Execution

Added: 10/17/2011 CVE: CVE-2011-1969 BID: 49983 OSVDB: 76236 Background Microsoft Forefront Unified Access Gateway UAG is a reverse proxy and VPN solution. Problem End users of UAG must install a signed Java applet via MicrosoftClient.jar. This applet loads unsigned Java classes, which may allow ...

Microsoft Forefront Unified Access Gateway Java Applet Signed Code Execution

Added: 10/17/2011 CVE: CVE-2011-1969 BID: 49983 OSVDB: 76236 Background Microsoft Forefront Unified Access Gateway UAG is a reverse proxy and VPN solution. Problem End users of UAG must install a signed Java applet via MicrosoftClient.jar. This applet loads unsigned Java classes, which may allow ...

Microsoft Forefront Unified Access Gateway Java Applet Signed Code Execution

Added: 10/17/2011 CVE: CVE-2011-1969 BID: 49983 OSVDB: 76236 Background Microsoft Forefront Unified Access Gateway UAG is a reverse proxy and VPN solution. Problem End users of UAG must install a signed Java applet via MicrosoftClient.jar. This applet loads unsigned Java classes, which may allow ...

Microsoft Forefront Unified Access Gateway multiple security vulnerabilities

Code execution, crossite scripting, DoS...

Cisco Unified Operations Manager < 8.6 Multiple Vulnerabilities

According to its self-reported version number, the version of Cisco Unified Operations Manager on the remote host has multiple vulnerabilities : - Multiple reflected XSS. CVE-2011-0959, CVE-2011-0961, CVE-2011-0962 - Multiple blind SQL injections. CVE-2011-0960 - A directory traversal in...

Cisco Unified Operations Manager Detection

Cisco Unified Operations Manager, part of the Cisco Unified Communications Management Suite, was detected on the remote web server. Unified Operations Manager is used to perform real-time monitoring. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid56484;...

CVE-2011-2012

Microsoft Forefront Unified Access Gateway UAG 2010 Gold, Update 1, Update 2, and SP1 does not properly validate session cookies, which allows remote attackers to cause a denial of service IIS outage via unspecified network traffic, aka "Null Session Cookie Crash."...

CVE-2011-1895

CRLF injection vulnerability in Microsoft Forefront Unified Access Gateway UAG 2010 Gold, Update 1, Update 2, and SP1 allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP response splitting attacks and cross-site scripting XSS attacks, via unspecified vectors, aka "ExcelTabl...

CVE-2011-1896

Cross-site scripting XSS vulnerability in Microsoft Forefront Unified Access Gateway UAG 2010 Gold, Update 1, Update 2, and SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "ExcelTable Reflected XSS Vulnerability."...

CVE-2011-1969

Microsoft Forefront Unified Access Gateway UAG 2010 Gold, Update 1, Update 2, and SP1 provides the MicrosoftClient.jar file containing a signed Java applet, which allows remote attackers to execute arbitrary code on client machines via unspecified vectors, aka "Poisoned Cup of Code Execution...

CVE-2011-1897

Cross-site scripting XSS vulnerability in Microsoft Forefront Unified Access Gateway UAG 2010 Gold, Update 1, Update 2, and SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Default Reflected XSS Vulnerability."...