Important: Red Hat Security Advisory: commons-fileupload security update

An update for the commons-fileupload component that fixes one security issue is now available from the Red Hat Customer Portal for Red Hat JBoss SOA Platform 4.3.0.GACP05 and 5.3.1 GA. The Red Hat Security Response Team has rated this update as having important security impact. A Common...

Microsoft .NET Framework CVE-2013-3860 Remote Denial of Service Vulnerability

Description Microsoft .NET Framework is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause an application to crash or become unresponsive, denying service to legitimate users. Technologies Affected Avaya Aura Conferencing Standard Avaya CallPilot Avaya...

Microsoft Windows Kernel 'dxgkrnl.sys' CVE-2013-3888 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that is related to DirectX Graphics Kernel Subsystem. A local attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of...

Microsoft Windows Kernel 'Win32k.sys' CVE-2013-3881 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of the affected...

Microsoft Windows App Container CVE-2013-3880 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. Local attackers can exploit these issues to disclose sensitive information on the affected system. This information may be used in further attacks. Technologies Affected Avaya Aura Conferencing Standard Avaya...

Adobe JRun Detection

The remote host has Adobe JRun installed. JRun is an application server for Java applications. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70175; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06"; scriptnameenglish:"Adobe...

CVE-2013-4052

Cross-site scripting XSS vulnerability in the UDDI Administrative console in IBM WebSphere Application Server WAS 6.1 before 6.1.0.47, 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Administrative console in IBM WebSphere Application Server WAS 6.1 before 6.1.0.47 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the UDDI Administrative console in IBM WebSphere Application Server WAS 6.1 before 6.1.0.47, 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-0596

CVE-2013-0596 is an XSS vulnerability in the IBM WebSphere Application Server 6.1 Administrative Console (pre-6.1.0.47). A remote attacker could inject script/HTML via unspecified vectors. IBM’s security bulletin PM73445 lists affected versions and states the remediation is to apply Fix Pack 47 (...

CVE-2013-4053

CVE-2013-4053 refers to IBM WebSphere Application Server WS-Security with XML Digital Signature using a trust store, where improper certificate verification could let a remote attacker gain privileged access. Affected products/versions include WebSphere Application Server 8.5, 8.0, 7.0, and 6.1 (...

CVE-2013-4052

CVE-2013-4052 is an XSS vulnerability in the UDDI Administrative console of IBM WebSphere Application Server. The issue affects WAS versions 6.1 (before 6.1.0.47), 7.0 (before 7.0.0.31), 8.0 (before 8.0.0.8), and 8.5 (before 8.5.5.1). IBM Security Bulletins document multiple APARs under the same ...

CVE-2013-5495

Cisco Unified MeetingPlace Application Server Web Framework contains a cross-site scripting (XSS) vulnerability (CVE-2013-5495) that lets remote attackers inject arbitrary script/HTML via an unspecified parameter. Affects the web framework component of the Application Server; root cause is insuff...

CVE-2013-5495

Cross-site scripting XSS vulnerability in the web framework in the Application Server in Cisco Unified MeetingPlace allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCui44681...

Cisco Unified MeetingPlace Application Server Cross-Site Scripting Vulnerability

A vulnerability in the web framework of Cisco Unified MeetingPlace Application Server could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface on the affected system. The vulnerability is due to insufficient input validation ...

Moderate: Red Hat Security Advisory: rhevm security and bug fix update

Updated rhevm packages that fix one security issue and various bugs are now available. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available from the...

Microsoft Internet Explorer CVE-2013-3201 Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions. Microsoft Internet Explorer 9 and 10 are...

Microsoft Windows Kernel 'Win32k.sys' CVE-2013-3865 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of the affected...

Microsoft Internet Explorer CVE-2013-3202 Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions. Microsoft Internet Explorer 10 is affected...

Microsoft Internet Explorer CVE-2013-3207 Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a memory-corruption vulnerability due to a use-after-free error. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions. Microsoft Interne...