Lucene search
+L

306 matches found

NVD
NVD
•added 2007/11/20 8:46 p.m.•28 views

CVE-2007-6059

Javamail does not properly handle a series of invalid login attempts in which the same e-mail address is entered as username and password, and the domain portion of this address yields a Java UnknownHostException error, which allows remote attackers to cause a denial of service connection pool...

5CVSS6.8AI score0.0176EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/11/20 12:00 a.m.•3 views

CVE-2007-6059: Undefined Security Weakness

Javamail does not properly handle a series of invalid login attempts in which the same e-mail address is entered as username and password, and the domain portion of this address yields a Java UnknownHostException error, which allows remote attackers to cause a denial of service connection pool...

5CVSS5.8AI score0.0176EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2007/11/20 12:00 a.m.•14 views

PT-2007-6975 · Oracle · Javamail

Name of the Vulnerable Software and Affected Versions: Javamail affected versions not specified Description: The issue arises when Javamail fails to properly handle a series of invalid login attempts where the same e-mail address is used as both the username and password. Specifically, if the...

5CVSS7.3AI score0.0176EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/05/24 12:00 a.m.•5 views

CVE-2005-1742: Undefined Security Weakness

BEA WebLogic Server and WebLogic Express 8.1 SP2 and SP3 allows users with the Monitor security role to "shrink or reset JDBC connection pools."...

5CVSS5.8AI score0.03032EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/03/10 12:00 a.m.•6 views

CVE-2004-1758: Undefined Security Weakness

BEA WebLogic Server and WebLogic Express version 8.1 up to SP2, 7.0 up to SP4, and 6.1 up to SP6 may store the database username and password for an untargeted JDBC connection pool in plaintext in config.xml, which allows local users to gain privileges...

4.6CVSS5.7AI score0.00362EPSS
SaveExploits0References1
NVD
NVD
•added 2004/04/13 4:00 a.m.•23 views

CVE-2004-1758

BEA WebLogic Server and WebLogic Express version 8.1 up to SP2, 7.0 up to SP4, and 6.1 up to SP6 may store the database username and password for an untargeted JDBC connection pool in plaintext in config.xml, which allows local users to gain privileges...

4.6CVSS6.7AI score0.00362EPSS
SaveExploits0References7
Rows per page
Query Builder