RedHat JBoss Enterprise Application Platform JMX Console Authentication Bypass

Added: 06/07/2010 CVE: CVE-2010-0738 BID: 39710 OSVDB: 64171 Background JBoss Application Server AS is a full-featured open source Java application server that includes full support for J2EE-based APIs. JBoss AS runs on numerous operating systems e.g., Linux, FreeBSD, Mac OS X, and Microsoft...

CVE-2009-2732

Summary (CVE-2009-2732): ntop versions up to 3.3.10 are affected. The issue lies in the HTTP Basic Authorization handling in the embedded webserver: the checkHTTPpassword routine decodes the Authorization header, splits on a colon, and if the decoded string lacks a colon, the code may operate wit...

Дырка в PCCS MySQL DB Admin Tool

При установке по-умолчанию пароль администрирования находится в файле открытом для чтения и доступном через HTTP...