CVE-2011-5065

CVE-2011-5065 describes a cross-site scripting (XSS) vulnerability in IBM WebSphere Application Server (WAS) 6.1 before Fix Pack 41 (6.1.0.41) that allows remote attackers to inject arbitrary web script or HTML via vectors related to web messaging. The vulnerability is tied to WAS Web Messaging c...

CVE-2011-5066

CVE-2011-5066 affects IBM WebSphere Application Server 6.1 (Default Messaging Component). The SibRaRecoverableSiXaResource class does not properly handle a Service Integration Bus (SIB) dump operation in the FFDC introspection code, allowing local users to read the FFDC log file and obtain sensit...

Plone Zope SAXutils Command Execution

Added: 01/13/2012 CVE: CVE-2011-3587 BID: 49857 OSVDB: 76105 Background Plone is a free and open source content management system built on top of the Zope application server. Plone can be used for any kind of website, including blogs, internet sites, webshops and internal websites. Problem Plone...

Microsoft Windows Kernel CVE-2012-0001 SafeSEH Security Bypass Vulnerability

Description Microsoft Windows is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass the SafeSEH security mechanism. This may allow the attacker to execute arbitrary code by leveraging memory corruption vulnerabilities in Windows applications. Technologies...

Microsoft Windows Object Packager Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code with the privileges of the user running the affected application. Failed exploit attempts will result in a denial-of-service condition. Technologies Affect...

Microsoft Internet Explorer CVE-2011-2019 DLL Loading Arbitrary Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a specially crafted Dynamic...

Microsoft Windows CSRSS CVE-2011-3408 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker may exploit this issue to execute arbitrary code with administrator privileges. Successful exploits will result in the complete compromise of affected computers. Technologies Affected Avaya Aura...

Microsoft Internet Explorer XSS Filter Cross Domain Information Disclosure Vulnerability

Description Microsoft Internet Explorer is prone to a cross-domain information-disclosure vulnerability that affects the XSS Filter. An attacker can exploit this issue by tricking an unsuspecting victim into viewing a page containing malicious content. Successful exploits will allow attackers to...

Microsoft Internet Explorer CVE-2011-3404 Cross Domain Information Disclosure Vulnerability

Description Microsoft Internet Explorer is prone to a cross-domain information-disclosure vulnerability. An attacker can exploit this issue by tricking an unsuspecting victim into viewing a page containing malicious content. Successful exploits will allow attackers to view potentially sensitive...

Microsoft Windows Kernel Invalid Trap-Frame CVE-2011-2018 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. An attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of affected computers...

Oracle Application Server Ultra Search Component Unspecified Vulnerability (cpujan2008)

Oracle Application Server AS is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Oracle Application Server < 1.0.2.2, 9.0.x - 9.0.4.2, 10.1.2.0.x - 10.1.3.0.0 Multiple Unspecified Vulnerabilities (cpujan2006)

Oracle Application Server AS is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Oracle Application Server Unspecified Vulnerability (cpuapr2006)

Oracle Application Server AS is prone to an uspecified vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Oracle Application Server < 1.3.1.27 Unspecified Vulnerability (cpujan2008)

Oracle Application Server AS is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

IBM WebSphere Application Server Detection

IBM WebSphere Application Server, an application server for Java-based web applications, is running on the remote host. C Tenable, Inc. include"compat.inc"; if description scriptid57034; scriptversion"1.20"; scriptsetattributeattribute:"pluginmodificationdate", value:"2025/06/09";...

JBoss Application Server跨站请求伪造漏洞

BUGTRAQ ID: 50888 CVE ID: CVE-2011-3609 Jboss是非常流行的开源J2EE应用服务器。 Jboss实现上存在输入验证漏洞，在返回给用户之前，没有正确过滤通过管理控制台传递到消息中心的某些输入，可被利用在用户浏览器中执行任意HTML和脚本代码 JBoss Application Server 7.x 厂商补丁： JBoss Group ----------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.jboss.org/...

Oracle WebLogic Detection (Combined)

Oracle formerly BEA WebLogic, a Java EE application server, is running on the remote web server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid56979; scriptversion"1.16"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/12"; scriptxrefname:"IAVT"...

Microsoft Active Directory LDAPS Authentication Bypass Vulnerability

Description Microsoft Active Directory is prone to an authentication-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions by using a revoked certificate. Technologies Affected Avaya Aura Conferencing 6.0 Standard Avaya CallPilot 4.0 Avaya CallPilot 5.0...

DDIVRT-2011-33 IBM WebSphere Application Server &#39;help&#39; Servlet Plug-in Bundle Directory Traversal [CVE-2011-1359]

Title ----- DDIVRT-2011-33 IBM WebSphere Application Server 'help' Servlet Plug-in Bundle Directory Traversal CVE-2011-1359 Severity -------- High Date Discovered --------------- July 28, 2011 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: Javier Castro,...

IBM WebSphere Application Server JNDI information disclosure Vulnerability

The host is running IBM WebSphere Application Server and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbibmwasjndiimpinfodisclosurevuln.nasl 7044 2017-09-01 11:50:59Z teissa $ IBM WebSphere Application Server JNDI information disclosure Vulnerability Authors:...