CVE-2007-2696

The JMS Server in BEA WebLogic Server 6.1 through SP7, 7.0 through SP6, and 8.1 through SP5 enforces security access policies on the front end, which allows remote attackers to access protected queues via direct requests to the JMS back-end server...

CVE-2007-2696

The vulnerability CVE-2007-2696 affects BEA WebLogic Server JMS Server (versions 6.1 SP7 and earlier, 7.0 SP6 and earlier, 8.1 SP5 and earlier). The JMS Server’s front-end access policy enforcement can be bypassed, allowing remote attackers to access protected JMS queues by sending direct request...

X-Kryptor Secure Client特权提升漏洞

X-Kryptor是一款多功能动态VPN产品，允许安全访问。 X-Kryptor Secure Client存在设计错误，本地攻击者可以利用漏洞提升特权，获得SYSTEM权限。 X-Kryptor Xgntr BMS1351 X-Kryptor X-Kryptor Driver BMS1446HRR X-Kryptor Install BMS1472 升级程序： X-Kryptor X-Kryptor Driver BMS1446HRR X-Kryptor xkpatch462660.zip...

MyStats <=1.0.8 [injection sql, multiples xss, array & full path disclosure]

MyStats =1.0.8 injection sql, multiples xss, array & full path disclosure vendor site: http://emcity.nexenservices.com/mystats/index.php product :MyStats 1.0.8 bug: injection sql, multiples xss, array & full path disclosure risk : medium 1/3 Connexion Variable XSS Exploits:...

OpenEMR 2.8.1 - srcdir Multiple Remote File Inclusions

OpenEMR 2.8.1 - srcdir Multiple Remote File Inclusions \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV60$2006 ----------------------------------------------------------------------------------------------- ECHOADV60$2006 OpenEMR =2.8.1 Multiple Remote File...

Outlook Web anonymous access

It is possible to browse the information of the OWA server by accessing as an anonymous user. SPDX-FileCopyrightText: 2001 Javier Fernandez-Sanguino Pena Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2002-2059

BIOS D845BG, D845HV, D845PT and D845WN on Intel motherboards does not properly restrict access to configuration information when BIOS passwords are enabled, which could allow local users to change the default boot device via the F8 key...

MDKSA-2001:080 - Zope update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrake Linux Security Update Advisory Package name: Zope Date: October 15th, 2001 Advisory ID: MDKSA-2001:080 Affected versions: 7.1, 7.2, Corporate Server 1.0.1 Problem Description: A new Zope hotfix is available that fixes a problem with DTML...

HM Software S to Infinity 3.0 - Multiple Vulnerabilities

HM Software S to Infinity 3.0 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/1368/info A number of vulnerabilities exist in HM Software S to Infinity, a security access control, desktop lockdown and transparent encryption application. Intended features include restriction of...

cisco.help

Hello! We came across a curious behavior on a number of Cisco routers, tied to the way the on-line help system presents options. It seems that, even though a regular non-"enabled" user should not be able to see the access- lists or other security-related information in the router, one can do just...