CVE-2012-1291

The CVE-2012-1291 entry concerns SAP NetWeaver 7.0, specifically the com.sap.aii.mdt.amt.web.AMTPageProcessor servlet. A vulnerability allows remote attackers to obtain sensitive information about the Adapter Monitor via unspecified vectors, with a possible relation to the EnableInvokerServletGlo...

PT-2012-3179

Name of the Vulnerable Software and Affected Versions SAP NetWeaver version 7.0 Description The issue allows remote attackers to obtain sensitive information about the Adapter Monitor via unspecified vectors, possibly related to the EnableInvokerServletGlobally property in the servlet jsp service...

PT-2020-6767

Name of the Vulnerable Software and Affected Versions Ruby on Rails versions prior to 5.2.4.2 Ruby on Rails versions prior to 6.0.3.1 Description The issue is related to the implementation of client-side security functions in Ruby on Rails. It allows a remote attacker to execute arbitrary code by...

KVM / QEMU Guest Detection (uncredentialed check)

According to the MAC address of its network adapter, the remote host is a KVM / QEMU virtual machine. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid56877; scriptversion"1.4"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"KVM / QEMU Guest Detection uncredentiale...

WebCookiesSniffer - New cookies sniffer/viewer utility

WebCookiesSniffer - New cookies sniffer/viewer utility WebCookiesSniffer is a new packet sniffer utility that captures all web site cookies sent between the web browser and the web server and displays them in a simple cookies table. The upper pane of WebCookiesSniffer displays the cookie string...

PT-2011-4050

Name of the Vulnerable Software and Affected Versions Cisco Unified Service Monitor versions prior to 8.6 CiscoWorks LAN Management Solution versions 3.x and 4.x prior to 4.1 EMC Ionix Application Connectivity Monitor Ionix ACM version 2.3 and earlier EMC Ionix Adapter for Alcatel-Lucent 5620 SAM...

IBM WebSphere Application Server 7.0 < Fix Pack 17 Multiple Vulnerabilities

IBM WebSphere Application Server 7.0 before Fix Pack 17 appears to be running on the remote host. As such, it is potentially affected by the following vulnerabilities : - Use of an insecure XML encryption algorithm could allow for decryption of JAX-RPC or JAX-WS Web Services requests. PM34841 - A...

DSA-2261-1 redmine - several

Bulletin has no description...

PT-2011-2916 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.38.1 Description: The issue is related to an array index error in the asihpi hpi ioctl function, located in the sound/pci/asihpi/hpioctl.c file of the AudioScience HPI driver. This error might allow local...

Design/Logic Flaw

IBM WebSphere Application Server WAS 6.0.x through 6.0.2.43, 6.1.x before 6.1.0.37, and 7.0.x before 7.0.0.17 on z/OS, when a Local OS user registry or Federated Repository with RACF adapter is used, allows remote attackers to obtain unspecified application access via unknown vectors...

CVE-2011-1683

IBM WebSphere Application Server WAS 6.0.x through 6.0.2.43, 6.1.x before 6.1.0.37, and 7.0.x before 7.0.0.17 on z/OS, when a Local OS user registry or Federated Repository with RACF adapter is used, allows remote attackers to obtain unspecified application access via unknown vectors...

CVE-2011-1683

CVE-2011-1683 concerns IBM WebSphere Application Server on z/OS when using a Local OS user registry or Federated Repository with a RACF adapter. The vulnerability allows remote attackers to obtain unspecified application access via unknown vectors in WAS 6.0.x (up to 6.0.2.43), 6.1.x (before 6.1....

PT-2011-3290

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server WAS versions 6.0.x through 6.0.2.43 IBM WebSphere Application Server WAS versions 6.1.x before 6.1.0.37 IBM WebSphere Application Server WAS versions 7.0.x before 7.0.0.17 Description The issue allows remote...

IBM WebSphere Application Server未验证访问漏洞

CVE ID: CVE-2010-4476 IBM WebSphere Application Server WAS是由IBM遵照开放标准，例如Java EE, XML 还有Web Services，开发并发行的一种应用服务器。与其兼容的Web服务器包括：Apache HTTP Server，Netscape Enterprise Server，Microsoft Internet Information Services IIS以及IBM HTTP Server。 运行z/OS的IBM WAS在实现上存在安全漏洞，未授权用户可利用此漏洞访问WebSphere应用程序。...

USN-1080-2: Linux kernel vulnerabilities

Thomas Pollet discovered that the RDS network protocol did not check certain iovec buffers. A local attacker could exploit this to crash the system or possibly execute arbitrary code as the root user. CVE-2010-3865 Vasiliy Kulikov discovered that the Linux kernel X.25 implementation did not...

USN-1080-1: Linux kernel vulnerabilities

Thomas Pollet discovered that the RDS network protocol did not check certain iovec buffers. A local attacker could exploit this to crash the system or possibly execute arbitrary code as the root user. CVE-2010-3865 Vasiliy Kulikov discovered that the Linux kernel X.25 implementation did not...

Description of the System Center Virtual Machine Manager 2008 R2 hotfix rollup package: February 8, 2011

None None...

redmine -- multiple vulnerabilities

Jean-Philippe Lang reports: This release also fixes 3 security issues reported by joernchen of Phenoelit: logged in users may be able to access private data affected versions: 1.0.x persistent XSS vulnerability in textile formatter affected versions: all previous releases remote command execution...

IBM RSA Default Credentials

The IBM Remote Supervisor Adapter is configured to use the default credentials to control access. Knowing these, an attacker can gain total control of the machine. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid50348; scriptversion"1.12"; scriptcvsdate"Date: 2018/11/...

qpid: crash when redeclaring the exchange with specified alternate_exchange

The SessionAdapter::ExchangeHandlerImpl::checkAlternate function in broker/SessionAdapter.cpp in the C++ Broker component in Apache Qpid before 0.6, as used in Red Hat Enterprise MRG before 1.3 and other products, allows remote authenticated users to cause a denial of service NULL pointer...