JBoss Seam 2 File Upload and Execute

Versions of the JBoss Seam 2 framework 'JBoss Seam 2 File Upload and Execute', 'Description' = %q Versions of the JBoss Seam 2 framework 2.2.1CR2 fails to properly sanitize inputs to some JBoss Expression Language expressions. As a result, attackers can gain remote code execution through the...

CVE-2014-8110

Multiple cross-site scripting XSS vulnerabilities in the web based administration console in Apache ActiveMQ 5.x before 5.10.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2015-4003 · Apache · Apache Activemq

Name of the Vulnerable Software and Affected Versions: Apache ActiveMQ versions prior to 5.10.1 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities in the web-based administration console. These vulnerabilities allow remote attackers to inject arbitrary web script or...

Oracle GlassFish Server Unspecified Vulnerability (January 2015 CPU)

The version of GlassFish Server running on the remote host is affected by an unspecified vulnerability in the Admin Console. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid80949; scriptversion"1.10"; scriptcvsdate"Date: 2018/11/15 20:50:25"; scriptcveid"CVE-2015-0396...

Unspecified Vulnerability in Oracle Directory Server Enterprise Edition

Oracle Directory Server Enterprise Edition is a directory services solution developed by Oracle. A security vulnerability in the Oracle Directory Server Enterprise Edition Admin Console child allows remote attackers to exploit the vulnerability to compromise system integrity...

Oracle GlassFish Server Admin Console Subware Arbitrary Code Execution Vulnerability

Oracle GlassFish Enterprise Server is an open source and open community platform for building and deploying next-generation applications and services. A security vulnerability in the Oracle GlassFish Enterprise Server management console widget allows remote attackers to exploit the vulnerability ...

Unspecified Vulnerability in Oracle Directory Server Enterprise Edition Admin Console Subware

Oracle Directory Server Enterprise Edition is a directory services solution developed by Oracle. A security vulnerability in the Oracle Directory Server Enterprise Edition Admin Console child allows remote attackers to exploit the vulnerability to compromise system integrity...

CVE-2015-0401

Unspecified vulnerability in the Oracle Directory Server Enterprise Edition component in Oracle Fusion Middleware 7.0 and 11.1.1.7 allows remote authenticated users to affect integrity via unknown vectors related to Admin Console...

CVE-2015-0396

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 and 3.1.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Admin Console...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Directory Server Enterprise Edition component in Oracle Fusion Middleware 7.0 and 11.1.1.7 allows remote authenticated users to affect integrity via unknown vectors related to Admin Console...

Buffer overflow

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 and 3.1.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Admin Console...

CVE-2015-0396

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 and 3.1.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Admin Console...

CVE-2015-0401

Unspecified vulnerability in the Oracle Directory Server Enterprise Edition component in Oracle Fusion Middleware 7.0 and 11.1.1.7 allows remote authenticated users to affect integrity via unknown vectors related to Admin Console...

CVE-2015-0396

Removed by vendor...

CVE-2015-0401

Unspecified vulnerability in the Oracle Directory Server Enterprise Edition component in Oracle Fusion Middleware 7.0 and 11.1.1.7 allows remote authenticated users to affect integrity via unknown vectors related to Admin Console...

CVE-2015-0396

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 and 3.1.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Admin Console...

CVE-2015-0401

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2014-6526

Unspecified vulnerability in the Oracle Directory Server Enterprise Edition component in Oracle Fusion Middleware 7.0 allows remote attackers to affect integrity via unknown vectors related to Admin Console...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Directory Server Enterprise Edition component in Oracle Fusion Middleware 7.0 allows remote attackers to affect integrity via unknown vectors related to Admin Console...

CVE-2014-6526

Unspecified vulnerability in the Oracle Directory Server Enterprise Edition component in Oracle Fusion Middleware 7.0 allows remote attackers to affect integrity via unknown vectors related to Admin Console...