10126 matches found
Microsoft Windows Kernel Invalid Trap-Frame CVE-2011-2018 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. An attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of affected computers...
Microsoft Internet Explorer XSS Filter Cross Domain Information Disclosure Vulnerability
Description Microsoft Internet Explorer is prone to a cross-domain information-disclosure vulnerability that affects the XSS Filter. An attacker can exploit this issue by tricking an unsuspecting victim into viewing a page containing malicious content. Successful exploits will allow attackers to...
Oracle Application Server < 1.3.1.27 Unspecified Vulnerability (cpujan2008)
Oracle Application Server AS is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Oracle Application Server < 1.0.2.2, 9.0.x - 9.0.4.2, 10.1.2.0.x - 10.1.3.0.0 Multiple Unspecified Vulnerabilities (cpujan2006)
Oracle Application Server AS is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Oracle Application Server Unspecified Vulnerability (cpuapr2006)
Oracle Application Server AS is prone to an uspecified vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Oracle Application Server Ultra Search Component Unspecified Vulnerability (cpujan2008)
Oracle Application Server AS is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
IBM WebSphere Application Server Detection
IBM WebSphere Application Server, an application server for Java-based web applications, is running on the remote host. C Tenable, Inc. include"compat.inc"; if description scriptid57034; scriptversion"1.20"; scriptsetattributeattribute:"pluginmodificationdate", value:"2025/06/09";...
JBoss Application Server跨站请求伪造漏洞
BUGTRAQ ID: 50888 CVE ID: CVE-2011-3609 Jboss是非常流行的开源J2EE应用服务器。 Jboss实现上存在输入验证漏洞，在返回给用户之前，没有正确过滤通过管理控制台传递到消息中心的某些输入，可被利用在用户浏览器中执行任意HTML和脚本代码 JBoss Application Server 7.x 厂商补丁： JBoss Group ----------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.jboss.org/...
Oracle WebLogic Detection (Combined)
Oracle formerly BEA WebLogic, a Java EE application server, is running on the remote web server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid56979; scriptversion"1.16"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/12"; scriptxrefname:"IAVT"...
Microsoft Active Directory LDAPS Authentication Bypass Vulnerability
Description Microsoft Active Directory is prone to an authentication-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions by using a revoked certificate. Technologies Affected Avaya Aura Conferencing 6.0 Standard Avaya CallPilot 4.0 Avaya CallPilot 5.0...
DDIVRT-2011-33 IBM WebSphere Application Server 'help' Servlet Plug-in Bundle Directory Traversal [CVE-2011-1359]
Title ----- DDIVRT-2011-33 IBM WebSphere Application Server 'help' Servlet Plug-in Bundle Directory Traversal CVE-2011-1359 Severity -------- High Date Discovered --------------- July 28, 2011 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: Javier Castro,...
IBM WebSphere Application Server JNDI information disclosure Vulnerability
The host is running IBM WebSphere Application Server and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbibmwasjndiimpinfodisclosurevuln.nasl 7044 2017-09-01 11:50:59Z teissa $ IBM WebSphere Application Server JNDI information disclosure Vulnerability Authors:...
IBM WebSphere Application Server Admin Console Cross-site Scripting Vulnerability
The host is running IBM WebSphere Application Server and is prone to cross-site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbibmwasadminconsolexssvuln.nasl 7044 2017-09-01 11:50:59Z teissa $ IBM WebSphere Application Server Admin Console Cross-site Scripting Vulnerability Authors:...
IBM WebSphere Application Server XSS Vulnerability (Nov 2011)
IBM WebSphere Application Server is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
IBM WebSphere Application Server 6.0.x < 6.0.2.39, 6.1.x < 6.1.0.29, 7.0.x < 7.0.0.7 Information Disclosure Vulnerability
IBM WebSphere Application Server is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Oracle GlassFish / System Application Server Web Container DoS Vulnerability (Nov 2011)
GlassFish / System Application Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Oracle GlassFish/System Application Server Web Container DOS Vulnerability
The host is running GlassFish/System Application Server and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gboracleglassfishnsjaswebcontainerdosvuln.nasl 7029 2017-08-31 11:51:40Z teissa $ Oracle GlassFish/System Application Server Web Container DOS Vulnerability...
IBM WebSphere Application Server 8.x < 8.0.0.1 Information Disclosure Vulnerability
IBM WebSphere Application Server is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Security feature bypass
The Java Naming and Directory Interface JNDI implementation in IBM WebSphere Application Server WAS 6.0 before 6.0.2.39, 6.1 before 6.1.0.29, and 7.0 before 7.0.0.7 does not properly restrict access to UserRegistry object methods, which allows remote attackers to obtain sensitive information via ...
CVE-2009-2747
CVE-2009-2747 affects IBM WebSphere Application Server’s JNDI implementation. The root cause is improper access control on UserRegistry object methods, allowing remote attackers to disclose sensitive information via a crafted method call. Affected versions are WAS 6.0 prior to 6.0.2.39, 6.1 prior...