CVE-2014-2479: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS - Web Services...

CVE-2014-4202: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect availability via vectors related to WLS - Web Services...

CVE-2014-4217: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, and 12.1.1.0 allows remote attackers to affect integrity via vectors related to WLS - Web Services...

CVE-2014-4254: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS - Web Services...

CVE-2014-4241: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0 and 10.3.6.0 allows remote attackers to affect integrity via vectors related to WLS - Web Services...

CVE-2014-4210: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0 and 10.3.6.0 allows remote attackers to affect confidentiality via vectors related to WLS - Web Services...

PT-2014-1723

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.0.2.0 through 10.3.6.0 Oracle WebLogic Server versions 12.1.1.0 through 12.1.2.0 Description The issue affects confidentiality, integrity, and availability. It is related to vectors concerning WLS - Web...

PT-2014-1719

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.0.2.0, 10.3.6.0, 12.1.1.0 Description The issue allows remote attackers to compromise data integrity using WLS - Web Services in Oracle WebLogic Server. This is related to an unspecified vulnerability in the...

PT-2014-1712

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 Description The issue allows remote attackers to affect availability via vectors related to WLS - Web Services. This can lead to a disruption in data access...

PT-2014-1718

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.0.2.0 through 10.3.6.0 Description The issue allows remote attackers to compromise data integrity using WLS - Web Services. It affects the Oracle WebLogic Server component in Oracle Fusion Middleware,...

PT-2014-1729

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0 through 12.1.2.0 Description The issue allows remote attackers to compromise the confidentiality, integrity, and availability of data using WLS - Web Services. This affects the Oracle WebLogic Server...

PT-2014-1713

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0, 12.1.1.0, and 12.1.2.0 Description The issue allows remote attackers to disrupt data availability using WLS - Web Services. It affects the availability of data. Recommendations For versions 10.3.6.0,...

netStartEnterprise 4.0 - SQL Injection Vulnerability

No description provided by source. ======================================= netStartEnterprise v4.0 SQL Injection Vulnerability ======================================= Exploit Title: netStartEnterprise v4.0 SQL Injection Vulnerability Author: L1nK Mail: [email protected] Date: 07/23/2010...

GCP 2.0 datasets provided as BioCASE web services

No description provided by source. ======================================================================== .::GCP 2.0 datasets provided as BioCASE web services::. Local File Inclusion ========================================================================...

HP OpenView Network Node Manager 6.10 SNMP DoS Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1713/info The OverView5 CGI interface by default is shipped with HP Openview Node Manager. HP Openview Node Manager can be compromised due to an unchecked buffer. By sending a specially crafted GET request comprised of 13...

Mambo Component Awesom <= 0.3.2 (listid) SQL Injection Vulnerability

No description provided by source. joomla SQL Injectioncomawesom AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DORKS 1 : allinurl :comawesom ı changed ATATÜRK.com's db. soo dont look ATATÜRK.com db si değiştirilip kullanıcısına bildirilmiştir. EXPLOIT :...

Oracle OpenSSO 8.0 - Multiple XSS POST Injection Vulnerabilities

No description provided by source. ?!-- Oracle OpenSSO 8.0 Multiple XSS POST Injection Vulnerabilities Vendor: Oracle Corporation Product web page: http://www.oracle.com Affected version: 8.0 Update 2 Patch3 Build 6.1 2011-June-8 05:24 Summary: Oracle OpenSSO is a complete solution that provides...

Sports Accelerator Suite 2.0 - (news_id) Remote SQL Injection Vulnerability

No description provided by source. Sports Accelerator Suite v2.0 newsid Remote SQL Injection Vulnerability Vendor: Athlete Web Services, Inc. / AWS Sports Product Web Page: http://www.athletewebservices.com Summary: Content Management System PHP+MySQL. Description: The CMS is vulnerable to an SQL...

Alt-N MDaemon 3.1.1 DoS Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1689/info Alt-N MDaemon 3.1.1 is subject to a denial of service. If a remote user requests a specially crafted URL to the web services within MDaemon the service will crash. A restart of the service is required in order t...

Glassfish Enterprise Server 2.1 Admin Console /webService/webServicesGeneral.jsf URI XSS

No description provided by source. source: http://www.securityfocus.com/bid/34824/info GlassFish Enterprise Server is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Attacker-supplied HTML and script code would run in the conte...