Microsoft Exchange / FAST Search Server code execution

Code execution on Outlook Web Access document viewing / Advanced Filter Pack because of Oracle Outside In technology vulnerability...

PT-2013-2291

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 8.3.7 through 8.4 Microsoft Exchange Server affected versions not specified Description The issue allows attackers to affect availability. In the case of Microsoft Exchange Server, this can happen when a user...

Default application configuration files are available for download

panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Server. Using Confluence Cloud? See the corresponding bug report|http://jira.atlassian.com/browse/CONFCLOUD-27693. panel h3. Summary of The Bug By browsing to the following URL path user would be able to download any files under...

CVE-2012-5176

Cross-site scripting XSS vulnerability in KENT-WEB ACCESS REPORT 5.02 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to tag embedding...

CVE-2012-5175

Cross-site scripting XSS vulnerability in KENT-WEB ACCESS REPORT 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to access-log data...

CVE-2012-5176

Cross-site scripting XSS vulnerability in KENT-WEB ACCESS REPORT 5.02 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to tag embedding...

CVE-2012-5175

CVE-2012-5175 concerns an XSS vulnerability in KENT-WEB ACCESS REPORT (v4.2 and earlier). The issue arises in processing of access-log data, enabling remote attackers to inject arbitrary web script or HTML that may execute in a user’s browser. Affected product: ACCESS REPORT by KENT-WEB; versions...

CVE-2012-5176

The CVE-2012-5176 entry corresponds to a cross-site scripting (XSS) vulnerability in KENT-WEB ACCESS REPORT versions 5.02 and earlier. The root cause is a flaw in how tags are embedded into the web page, which permits remote attackers to inject arbitrary script or HTML via those embedding vectors...

KENT-WEB ACCESS REPORT vulnerable to cross-site scripting

Overview ACCESS REPORT provided by KENT-WEB contains a cross-site scripting vulnerability. ACCESS REPORT provided by KENT-WEB is a software to analyze web access logs. ACCESS REPORT contains a cross-site scripting vulnerability. This is caused by a particular method in which tags are embedded int...

PT-2012-5823

Name of the Vulnerable Software and Affected Versions KENT-WEB ACCESS REPORT versions 4.2 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via vectors related to access-log data. This could potentially lead to unauthorized...

PT-2012-5824

Name of the Vulnerable Software and Affected Versions KENT-WEB ACCESS REPORT versions 5.02 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via vectors related to tag embedding. Recommendations For versions 5.02 and earlier,...

JVN#23563149: KENT-WEB ACCESS REPORT vulnerable to cross-site scripting

ACCESS REPORT provided by KENT-WEB is a software to analyze web access logs. ACCESS REPORT contains a cross-site scripting vulnerability. This is caused by a particular method in which tags are embedded into the web page. Note that this vulnerability is different from JVN68830017. Impact An...

CVE-2012-5176: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in KENT-WEB ACCESS REPORT 5.02 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to tag embedding...

CVE-2012-5175: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in KENT-WEB ACCESS REPORT 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to access-log data...

Oracle OpenSSO 8.0 Multiple XSS POST Injection Vulnerabilities

Exploit for multiple platform in category web applications Oracle OpenSSO 8.0 Multiple XSS POST Injection Vulnerabilities alert1;' / alert2;' / input type="hidden" n...

Oracle OpenSSO 8.0 - Multiple Cross-Site Scripting POST Injection Vulnerabilities

Oracle OpenSSO 8.0 - Multiple Cross-Site Scripting POST Injection Vulnerabilities Oracle OpenSSO 8.0 Multiple XSS POST Injection Vulnerabilities alert1;' / alert2;' / alert3;' /...

Oracle OpenSSO 8.0 Multiple XSS POST Injection Vulnerabilities

Summary Oracle OpenSSO is a complete solution that provides Web access management, federated single sign-on and Web services security in a single, self-contained application. Description Oracle OpenSSO suffers from multiple cross-site scripting vulnerabilities when input passed via several...

PT-2012-4575

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware version 8.3.7.0 Microsoft Exchange Server affected versions not specified Description The issue affects the availability of the system, allowing context-dependent attackers to exploit it. Remote code execution is...

BigPond 3G21WB - Multiple Vulnerabilities

BigPond 3G21WB - Multiple Vulnerabilities Hard-coded credentials and command-injection vulnerabilities on BigPond 3G21WB ============================================================================== ADVISORY INFORMATION Title: Hard-coded credentials and command-injection vulnerabilities on BigPo...

CVE-2012-2289

EMC ApplicationXtender products are affected by CVE-2012-2289. The vulnerability exists in EMC ApplicationXtender Desktop before 6.5 SP2 and ApplicationXtender Web Access .NET before 6.5 SP2, enabling remote file uploads to arbitrary locations and potentially arbitrary code execution via unspecif...