CVE-2006-2470: Undefined Security Weakness

Unspecified vulnerability in the WebLogic Server Administration Console for BEA WebLogic Server 9.0 prevents the console from setting custom JDBC security policies correctly, which could allow attackers to bypass intended policies...

Adobe Document Server Default Credentials

The remote host is running Adobe Document Server, a server that dynamically creates and manipulates PDF documents as well as graphic images. The installation of Adobe Document Server on the remote host uses the default username and password to control access to its administrative console. Knowing...

Symantec Sygate Secure SQL injection

SQL injection in administration console...

CVE-2006-0432

Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 9.0, when an Administrator uses the WebLogic Administration Console to add custom security policies, causes incorrect policies to be created, which prevents the server from properly protecting JNDI resources...

CVE-2006-0432: Undefined Security Weakness

Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 9.0, when an Administrator uses the WebLogic Administration Console to add custom security policies, causes incorrect policies to be created, which prevents the server from properly protecting JNDI resources...

VERITAS NetBackup Java Administration Console format string vulnerability

Added: 11/30/2005 CVE: CVE-2005-2715 BID: 15079 OSVDB: 19949 Background VERITAS NetBackup is a backup and recovery solution for multiple platforms. Problem The bpjava-msvc component of the Java Administration Console in Veritas NetBackup 4.5 through 6.0 is affected by a format string vulnerabilit...

VERITAS NetBackup Java Administration Console format string vulnerability

Added: 11/30/2005 CVE: CVE-2005-2715 BID: 15079 OSVDB: 19949 Background VERITAS NetBackup is a backup and recovery solution for multiple platforms. Problem The bpjava-msvc component of the Java Administration Console in Veritas NetBackup 4.5 through 6.0 is affected by a format string vulnerabilit...

VERITAS NetBackup Java Administration Console format string vulnerability

Added: 11/30/2005 CVE: CVE-2005-2715 BID: 15079 OSVDB: 19949 Background VERITAS NetBackup is a backup and recovery solution for multiple platforms. Problem The bpjava-msvc component of the Java Administration Console in Veritas NetBackup 4.5 through 6.0 is affected by a format string vulnerabilit...

Linksys Router Default Password (HTTP)

This Linksys Router has the default password set for the web administration console. SPDX-FileCopyrightText: 2002 Digital Defense Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

VERITAS NetBackup Java Administration Console contains a format string vulnerability in "bpjava-msvc"

Overview The VERITAS NetBackup Java Administration Console contains a format string vulnerability, which may allow an unauthenticated, remote attacker to execute arbitrary code with root or SYSTEM privileges. Description The Java Administration Console is an alternative administrative interface f...

BEA WebLogic crossite scripting

Crossite scripting in administration console...

Cross-site scripting vulnerability in BEA WebLogic administration console

I. DESCRIPTION A cross-site scripting issue affects the display of error events in the 'View Error Log' feature of BEA WebLogic Administration console. II. AFFECTED PRODUCTS BEA WebLogic 8.1 SP4 and previous. III. HOW TO VERIFY 1. Make a HTTP request containing XSS code to a target Web server $...

beaXSS.txt

I. DESCRIPTION A cross-site scripting issue affects the display of error events in the 'View Error Log' feature of BEA WebLogic Administration console. II. AFFECTED PRODUCTS BEA WebLogic 8.1 SP4 and previous. III. HOW TO VERIFY 1. Make a HTTP request containing XSS code to a target Web server $...

BEA WebLogic 7.08.1 - Administration Console Cross-Site Scripting

BEA WebLogic 7.08.1 - Administration Console Cross-Site Scripting source: https://www.securityfocus.com/bid/14657/info BEA WebLogic administration console is prone to cross-site scripting attacks. An attacker may leverage this issue to have arbitrary script code executed in the browser of an...

BEA WebLogic 7.0/8.1 - Administration Console Cross-Site Scripting

source: https://www.securityfocus.com/bid/14657/info BEA WebLogic administration console is prone to cross-site scripting attacks. An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may...

CVE-2005-2051

CVE-2005-2051 describes a buffer overflow in the VERITAS Backup Exec Web Administration Console (BEWAC) affecting versions 9.0 build 4367 up to 10.0 revision 5484, enabling remote attackers to execute arbitrary code. The root cause is a buffer overflow in BEWAC’s web interface. Impact per the pro...

CVE-2005-2051

Buffer overflow in the VERITAS Backup Exec Web Administration Console BEWAC 9.0 4367 through 10.0 rev. 5484 allows remote attackers to execute arbitrary code...

CVE-2005-2051: Undefined Security Weakness

Buffer overflow in the VERITAS Backup Exec Web Administration Console BEWAC 9.0 4367 through 10.0 rev. 5484 allows remote attackers to execute arbitrary code...

[AppSecInc Advisory BEA05-V0100] BEA WebLogic Administration Console error page cross-site scripting vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 BEA WebLogic Administration Console error page cross-site scripting vulnerability AppSecInc Team SHATTER Security Advisory BEA05-V0100 http://www.appsecinc.com/resources/alerts/general/BEA-001.html May 27, 2005 Affected versions: BEA WebLogic Server 7...

CVE-2005-1747

Multiple cross-site scripting XSS vulnerabilities in BEA WebLogic Server and Express 8.1 through Service Pack 4, and 7.0 through Service Pack 6, allow remote attackers to inject arbitrary web script or HTML, and possibly gain administrative privileges, via the 1 jusername or 2 jpassword parameter...