9909 matches found
Authorization
Unspecified vulnerability in the Default Messaging Component in IBM WebSphere Application Server WAS 6.1.0.7 and earlier has unknown impact and attack vectors, related to "incorrect authorization on a remote interface to the SDO repository."...
CVE-2007-3262
IBM WebSphere Application Server 6.1 (and earlier) contains a vulnerability in the Default Messaging Component that can allow remote denial of service via a thread hang, potentially tied to a TCP issue, or to MPAlarmThread causing a memory leak. The affected product/version range is WAS 6.1.0.7 a...
CVE-2007-3263
CVE-2007-3263 concerns the Default Messaging Component in IBM WebSphere Application Server (WAS) 6.1.0.7 and earlier. The connected documents reiterate an unspecified vulnerability related to “incorrect authorization on a remote interface to the SDO repository.” There is no explicit description o...
CVE-2007-3262
Unspecified vulnerability in the Default Messaging Component in IBM WebSphere Application Server WAS 6.1.0.7 and earlier allows remote attackers to cause a denial of service related to a thread hang, and possibly related to a "TCP issue," or to MPAlarmThread and a resultant memory leak...
CVE-2007-3263
Unspecified vulnerability in the Default Messaging Component in IBM WebSphere Application Server WAS 6.1.0.7 and earlier has unknown impact and attack vectors, related to "incorrect authorization on a remote interface to the SDO repository."...
CVE-2007-3264
Unspecified vulnerability in the PD tools component in IBM WebSphere Application Server WAS 6.1.0.7 and earlier has unknown impact and attack vectors...
CVE-2007-3265
Cross-site scripting XSS vulnerability in the Samples component in IBM WebSphere Application Server WAS 6.1.0.7 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Microsoft Internet Explorer CSS Tag Memory Corruption Vulnerability
Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability because the application fails to properly handle certain CSS data. A remote attacker can exploit this issue to execute arbitrary code in the context of the user running the vulnerable application. Technologi...
Microsoft Internet Explorer Language Pack Installation Remote Code Execution Vulnerability
Description Microsoft Internet Explorer is prone to remote code-execution vulnerability because of a race-condition in its language-pack installation support. A remote attacker can exploit this issue to execute arbitrary code in the context of the user running the vulnerable application...
Microsoft Internet Explorer URLMON.DLL COM Object Instantiation Remote Code Execution Vulnerability
Description Microsoft Internet Explorer is prone to remote code-execution vulnerability. A remote attacker can exploit this issue to execute arbitrary code in the context of the user running the vulnerable application. Technologies Affected Avaya CIE 1.0 Avaya Messaging Application Server Avaya...
CVE-2007-2629
Bradford CampusManager Network Control Application Server 3.16 allows remote attackers to obtain sensitive information backup, log, and configuration files via direct request for certain files in 1 /runTime/ or 2 /remediationReports/...
CVE-2007-2629
The CVE-2007-2629 entry involves Bradford CampusManager Network Control Application Server 3.1(6), where remote attackers can obtain sensitive information (backup, log, and configuration files) by directly requesting certain files in the /runTime/ or /remediationReports/ directories. The NVD note...
Microsoft Exchange Base64 MIME Message Remote Code Execution Vulnerability
Description Microsoft Exchange is prone to a remote code-execution vulnerability because the application fails to properly decode specially crafted email messages. Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the vulnerable application,...
CVE-2006-7198
Unspecified vulnerability in IBM WebSphere Application Server WAS before 5.1.1.14, and WAS for z/OS 601 before 6.0.2.13, has unknown impact and attack vectors, related to a "Potential security exposure," aka PK26123...
CVE-2006-7198
Unspecified vulnerability in IBM WebSphere Application Server WAS before 5.1.1.14, and WAS for z/OS 601 before 6.0.2.13, has unknown impact and attack vectors, related to a "Potential security exposure," aka PK26123...
Code injection
Unspecified vulnerability in Workflow Cartridge, as used in Oracle Database Server 9.2.0.1, 10.1.0.2, and 10.2.0.1; Application Server 9.0.4.3 and 10.1.2.0.2; Collaboration Suite 10.1.2; and E-Business Suite; has unknown impact and remote authenticated attack vectors, aka OWF01...
Command injection
The Oracle Discoverer servlet in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2.0 allows remote attackers to shut down an Oracle TNS Listener via a TNS STOP command in a request that uses the database/TNS alias, aka AS01...
CVE-2007-2122
Unspecified vulnerability in the Wireless component in Oracle Application Server 9.0.4.3 has unknown impact and attack vectors, aka AS03...