69 matches found
CVE-2016-3974
XML external entity XXE vulnerability in the Configuration Wizard in SAP NetWeaver Java AS 7.1 through 7.5 allows remote attackers to cause a denial of service, conduct SMB Relay attacks, or access arbitrary files via a crafted XML request to tcmonitoringwebserviceweb/ServerNodesWSService, aka SA...
Configuration Wizard Crashes after PVS Upgrade from Version 6.1 to 7.6
Configuration Wizard crashes after PVS upgrade from version 6.1 to 7.6...
Buffer overflow
Buffer overflow in the Java GUI Configuration Wizard and Preferences Editor in the backup-archive client in IBM Tivoli Storage Manager TSM 5.x and 6.x before 6.2.5.2, 6.3.x before 6.3.2, and 6.4.x before 6.4.2 on Windows and OS X allows local users to cause a denial of service application crash o...
CVE-2014-0876
CVE-2014-0876 affects IBM Tivoli Storage Manager (TSM) Backup-Archive client on Windows and macOS. The issue is a local buffer overrun in the Java GUI Configuration Wizard and Preferences Editor, leading to denial of service (crash or hang). Affected releases include TSM client 5.x and 6.x, with ...
[EMET v4.0] Enhanced Mitigation Experience Toolkit
The Enhanced Mitigation Experience Toolkit EMET is designed to help prevent hackers from gaining access to your system. Software vulnerabilities and exploits have become an everyday part of life. Virtually every product has to deal with them and consequently, users are faced with a stream of...
ManageEngine ServiceDesk Plus Multiple XSS Vulnerabilities
This host is running ManageEngine ServiceDesk Plus and is prone to multiple cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbmanageengineservicedeskplusmultxssvuln.nasl 7024 2017-08-30 11:51:43Z teissa $ ManageEngine ServiceDesk Plus Multiple XSS Vulnerabilities Authors: An...
CVE-2005-4755
The CVE-2005-4755 issue affects BEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier, where the SSL private key passphrase (CustomTrustKeyStorePassPhrase) is stored in cleartext in nodemanager.config, or rendered in cleartext during domain creation via the Configuration Wizard, visible on...
BEA WebLogic Server configuration wizard stores administrative credentials in clear text log files
Overview There is a vulnerability in BEA WebLogic Server in which a user with access to log files generated by the configuration wizard could obtain the administrative username and password. Description BEA Systems describes WebLogic Server as "an industrial-strength application infrastructure fo...
