Lucene search
+L

74 matches found

Prion
Prion
•added 2013/08/16 4:55 p.m.•28 views

Design/Logic Flaw

Red Hat JBoss Enterprise Application Platform EAP 6.1.0 does not properly cache EJB invocations by the EJB client API, which allows remote attackers to hijack sessions by using an EJB client...

6.4CVSS7AI score0.02521EPSS
SaveExploits1References8Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/08/16 12:00 a.m.•4 views

CVE-2013-4213: Improper Access Control

Red Hat JBoss Enterprise Application Platform EAP 6.1.0 does not properly cache EJB invocations by the EJB client API, which allows remote attackers to hijack sessions by using an EJB client...

6.4CVSS5.9AI score0.02521EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2013/08/13 12:00 a.m.•39 views

RHEL 5 / 6 : JBoss EAP (RHSA-2013:1151)

Updated Red Hat JBoss Enterprise Application Platform 6.1.0 packages that fix two security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base...

6.4CVSS5.6AI score0.02521EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
•added 2013/08/12 6:27 p.m.•36 views

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.1.0 security update

An update for Red Hat JBoss Enterprise Application Platform 6.1.0 that fixes two security issues is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores,...

6.4CVSS5.8AI score0.02521EPSS
SaveExploits1References4
Prion
Prion
•added 2008/03/18 5:44 p.m.•27 views

Design/Logic Flaw

Unspecified vulnerability in the Windows client API in Novell GroupWise 7 before SP3 and 6.5 before SP6 Update 3 allows remote authenticated users to access the non-shared stored e-mail messages of another user who has shared at least one folder with the attacker...

3.5CVSS6.5AI score0.01131EPSS
SaveExploits1References6Affected Software1
NVD
NVD
•added 2008/03/18 5:44 p.m.•26 views

CVE-2008-1330

Unspecified vulnerability in the Windows client API in Novell GroupWise 7 before SP3 and 6.5 before SP6 Update 3 allows remote authenticated users to access the non-shared stored e-mail messages of another user who has shared at least one folder with the attacker...

3.5CVSS6.1AI score0.01131EPSS
SaveExploits1References6
CVE
CVE
•added 2008/03/18 5:00 p.m.•71 views

CVE-2008-1330

The CVE-2008-1330 issue affects Novell GroupWise for Windows (Windows client API) on GroupWise 7 (before SP3) and GroupWise 6.5 (before SP6 Update 3). The described fault occurs when handling shared folders, allowing remote authenticated users to access non-shared e-mail messages in a mailbox of ...

3.5CVSS6.1AI score0.01131EPSS
SaveExploits1References6Affected Software1
Cvelist
Cvelist
•added 2008/03/18 5:00 p.m.•37 views

CVE-2008-1330

Unspecified vulnerability in the Windows client API in Novell GroupWise 7 before SP3 and 6.5 before SP6 Update 3 allows remote authenticated users to access the non-shared stored e-mail messages of another user who has shared at least one folder with the attacker...

6.1AI score0.01131EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/03/18 12:00 a.m.•4 views

CVE-2008-1330: Exposure of Sensitive Information to an Unauthorized Actor

Unspecified vulnerability in the Windows client API in Novell GroupWise 7 before SP3 and 6.5 before SP6 Update 3 allows remote authenticated users to access the non-shared stored e-mail messages of another user who has shared at least one folder with the attacker...

3.5CVSS5.9AI score0.01131EPSS
SaveExploits1References3
securityvulns
securityvulns
•added 2006/06/30 12:00 a.m.•48 views

Novell GroupWise unauthorized access

Windows Client API allows non-authorized email access within the same authenticated post office...

3.9AI score
SaveExploits0References1Affected Software1
NVD
NVD
•added 2006/06/29 5:05 p.m.•24 views

CVE-2006-3268

Unspecified vulnerability in the Windows Client API in Novell GroupWise 5.x through 7 might allow users to obtain "random programmatic access" to other email within the same post office...

5CVSS6.3AI score0.01928EPSS
SaveExploits1References9
Cvelist
Cvelist
•added 2006/06/29 5:00 p.m.•31 views

CVE-2006-3268

Unspecified vulnerability in the Windows Client API in Novell GroupWise 5.x through 7 might allow users to obtain "random programmatic access" to other email within the same post office...

6.3AI score0.01928EPSS
SaveExploits1References9
CVE
CVE
•added 2006/06/29 5:00 p.m.•73 views

CVE-2006-3268

CVE-2006-3268 describes a vulnerability in the Windows client API of Novell GroupWise (5.x–7) that may allow an attacker to bypass security controls and access non-authorized email within the same authenticated post office. According to Novell’s advisory, GroupWise 7 must be upgraded to SP1 and G...

5CVSS6.3AI score0.01928EPSS
SaveExploits1References9Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/06/29 12:00 a.m.•3 views

CVE-2006-3268: Undefined Security Weakness

Unspecified vulnerability in the Windows Client API in Novell GroupWise 5.x through 7 might allow users to obtain "random programmatic access" to other email within the same post office...

5CVSS5.9AI score0.01928EPSS
SaveExploits1References1
Rows per page
Query Builder