EUVD-2006-5637

Malware in sbrugna...

EUVD-2000-0181

Malware in sbrugna...

EUVD-2001-1349

Malware in sbrugna...

EUVD-2002-0680

Malware in sbrugna...

EUVD-2017-1702

Malware in sbrugna...

EUVD-2000-1061

Malware in sbrugna...

EUVD-2001-1288

Malware in sbrugna...

EUVD-2001-0252

Malware in sbrugna...

EUVD-2001-0732

Malware in sbrugna...

EUVD-2007-0187

Malware in sbrugna...

EUVD-2001-0597

Malware in sbrugna...

CVE-2020-9315

PRODUCT NOT SUPPORTED WHEN ASSIGNED Oracle iPlanet Web Server 7.0.x has Incorrect Access Control for admingui/version URIs in the Administration console, as demonstrated by unauthenticated read access to encryption keys. NOTE: a related support policy can be found in the www.oracle.com references...

CVE-2004-2765

Cross-site scripting XSS vulnerability in Webmail in Sun ONE Messaging Server 6.1 and iPlanet Messaging Server 5.2 before 5.2hf2.02, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via a crafted e-mail message, a different vulnerability than...

VulnCheck KEV: CVE-2009-2445

Oracle iPlanet Web Server formerly Sun Java System Web Server or Sun ONE Web Server 6.1 before SP12, and 7.0 through Update 6, when running on Windows, allows remote attackers to read arbitrary JSP files via an alternate data stream syntax, as demonstrated by a .jsp::$DATA URI...

Oracle iPlanet Web Server Authentication Bypass (CVE-2020-9315)

An authentication bypass vulnerability exists in Oracle iPlanet Web Server. Successful exploitation of this vulnerability could allow a remote attacker to gain unauthorized access to the affected system...

The vulnerability in Oracle iPlanet’s web server, related to the read-only access to encryption keys without authentication, allows attackers to disclose protected information.

The vulnerability of Oracle iPlanet web server relates to the read-only access to encryption keys without authentication. Exploiting this vulnerability could allow a malicious actor to disclose the protected information remotely...

The vulnerability of Oracle iPlanet web server, which exists due to the failure to take measures to eliminate special elements, allows attackers to inject images into the administration console.

The vulnerability of Oracle iPlanet web servers exists due to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a malicious actor to inject images into the administration console through the productNameSrc parameter in the URI admingui...

Oracle iPlanet External Image Injection (CVE-2020-9314)

An External Image Injection vulnerability exists in Oracle iPlanet Web Server. Successful exploitation of this vulnerability can be used to inject an external image into a site to facilitate phishing...

Unpatched Bugs in Oracle iPlanet Open Door to Info-Disclosure, Injection

A pair of vulnerabilities in Oracle’s iPlanet Web Server have been disclosed that can lead to sensitive data exposure and image injections onto web pages if exploited. However, no patch is forthcoming for either flaw. The bugs CVE-2020-9315 and CVE-2020-9314 are specifically found in the web...

Oracle iPlanet Web Server Injection Vulnerability (CNVD-2020-52059 )

Oracle iPlanet Web Server OiWS is an American Oracle Oracle company's Web server mainly for medium-sized and large business applications. Oracle iPlanet Web Server injection vulnerability. An attacker can exploit this vulnerability with the help of the 'productNameSrc' parameter to perform a...