Microsoft Windows Kernel 'Win32k.sys' CVE-2013-5058 Local Denial of Service Vulnerability

Description Microsoft Windows is prone to a local denial-of-service vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to cause the system to stop responding, denying service to legitimate users. Technologies Affected Avaya Aura Conferencing 6.0 SP1 Standard...

Microsoft Windows 'Win32k.sys' CVE-2013-3903 Denial Of Serivce Vulnerability

Description Microsoft Windows is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause the system to stop responding, denying service to legitimate users. Technologies Affected Avaya Aura Conferencing 6.0 SP1 Standard Avaya Aura Conferencing 6.0 Standard Avaya Au...

Microsoft Internet Explorer Enhanced Protected Mode CVE-2013-5046 Security Bypass Vulnerability

Description Microsoft Internet Explorer is prone to a security-bypass vulnerability in the Enhanced Protected Mode. An attacker can exploit this issue to bypass Enhanced Protected Mode restrictions and execute arbitrary code with elevated privileges. Technologies Affected Avaya Aura Conferencing...

Microsoft Windows Local Procedure Call CVE-2013-3878 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that affects the Local Procedure Call LPC component. A local attacker can exploit this issue to execute arbitrary code with elevated privileges. Successful exploits will result in the complete compromise of...

Microsoft Internet Explorer CVE-2013-5047 Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions. Technologies Affected Avaya Aura Conferencing...

Microsoft Internet Explorer CVE-2013-5049 Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions. Technologies Affected Avaya Aura Conferencing...

IBM WebSphere Application Server 8.5 < Fix Pack 8.5.5.1 Multiple Vulnerabilities

IBM WebSphere Application Server 8.5 before Fix Pack 8.5.5.1 appears to be running on the remote host and is, therefore, potentially affected by the following vulnerabilities : - A flaw exists related to Apache Ant and file compression that could lead to denial of service conditions. CVE-2012-209...

Microsoft Windows Kernel 'NDProxy.sys' Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of the affected...

Two-year-old vulnerability in JBoss Application Servers enables Remote Shell for Hackers

Cyber security of many organizations being attacked at an extremely high rate this month, well another alarming cyber crime report become public today. A widely unpatched and two years old critical vulnerability in JBoss Application Server AS that enable an attacker to remotely get a shell on a...

Two-year-old vulnerability in JBoss Application Servers enables Remote Shell for Hackers

Cyber security of many organizations being attacked at an extremely high rate this month, well another alarming cyber crime report become public today. A widely unpatched and two years old critical vulnerability in JBoss Application Server AS that enable an attacker to remotely get a shell on a...

CVE-2013-6815

The SHSTIUPLOADXML function in the Application Server for ABAP AS ABAP in SAP NetWeaver 7.31 and earlier allows remote attackers to cause a denial of service via unspecified vectors, related to an XML External Entity XXE issue...

CVE-2013-5414

The migration functionality in IBM WebSphere Application Server WAS 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1 does not properly support the distinction between the admin role and the adminsecmanager role, which allows remote authenticated users to gain privileges in...

CVE-2013-5418

Cross-site scripting XSS vulnerability in the Administrative console in IBM WebSphere Application Server WAS 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

Design/Logic Flaw

IBM WebSphere Application Server WAS Liberty Profile 8.5 before 8.5.5.1 uses weak permissions for unspecified files, which allows local users to obtain sensitive information via standard filesystem operations...

CVE-2013-5417

CVE-2013-5417 is an XSS in IBM WebSphere Application Server: remote injection via HTTP response data. Affected: WAS 7.0 up to 7.0.0.31, WAS 8.0 up to 8.0.0.8, WAS 8.5 up to 8.5.5.1. Remediation per IBM advisories: apply corresponding Fix Pack/PTF amounts (7.0.0.31 for WAS 7; 8.0.0.8 for WAS 8.0; ...

CVE-2013-4006

CVE-2013-4006 affects IBM WebSphere Application Server Liberty Profile 8.5 (before 8.5.5.1). The vulnerability is due to insecure permissions on files created by the Liberty server, enabling a local attacker to obtain sensitive information via normal filesystem operations. A fix is to apply IBM F...

CVE-2013-5414

CVE-2013-5414 affects IBM WebSphere Application Server (versions 8.5, 8.0, 7) where the migration from 6.1+ can leave adminsecmanager users with elevated privileges due to incorrect assignment of admin/adminsecmanager roles. Consequence: existing users could gain privileges post-migration. remedi...

CVE-2013-5418

CVE-2013-5418 is an IBM WebSphere Application Server administrative console cross-site scripting (XSS) vulnerability that could allow a remote attacker, via a crafted URL, to inject script in the victim’s browser. The initial description states affected versions as: WebSphere Application Server 7...

CVE-2013-5414

The migration functionality in IBM WebSphere Application Server WAS 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1 does not properly support the distinction between the admin role and the adminsecmanager role, which allows remote authenticated users to gain privileges in...

Sun/Oracle GlassFish Server Authenticated Code Execution

This module logs in to a GlassFish Server Open Source or Commercial using various methods such as authentication bypass, default credentials, or user-supplied login, and deploys a malicious war file in order to get remote code execution. It has been tested on Glassfish 2.x, 3.0, 4.0 and Sun Java...