182 matches found
CVE-2017-10262: Exposure of Sensitive Information to an Unauthorized Actor
Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware subcomponent: Web Server Plugin. The supported version that is affected is 11.1.2.3.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Access...
CVE-2017-10259
Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware subcomponent: Web Server Plugin. The supported version that is affected is 11.1.2.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager...
CVE-2017-10154
Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware subcomponent: Web Server Plugin. The supported version that is affected is 11.1.2.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager...
CVE-2017-10154
Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware subcomponent: Web Server Plugin. The supported version that is affected is 11.1.2.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager...
Design/Logic Flaw
Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware subcomponent: Web Server Plugin. The supported version that is affected is 11.1.2.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager...
CVE-2017-10259
The CVE-2017-10259 issue affects Oracle Fusion Middleware's Oracle Access Manager, specifically the Web Server Plugin in version 11.1.2.3.0. The vulnerability allows unauthenticated, network-based access via HTTP to compromise Oracle Access Manager, potentially yielding unauthorized access to sen...
CVE-2017-10154: Exposure of Sensitive Information to an Unauthorized Actor
Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware subcomponent: Web Server Plugin. The supported version that is affected is 11.1.2.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager...
CVE-2017-10259: Exposure of Sensitive Information to an Unauthorized Actor
Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware subcomponent: Web Server Plugin. The supported version that is affected is 11.1.2.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager...
Oracle Fusion Middleware Oracle Access Manager Component Information Disclosure Vulnerability
Oracle Fusion Middleware Oracle Fusion Middleware is a suite of business innovation platforms for enterprise and cloud environments from Oracle Corporation that provides middleware, software collections, and other capabilities.Oracle Access Manager is one of the components that provides identity...
Unspecified Vulnerability in Oracle Access Manager
Oracle Fusion Middleware Oracle Fusion Middleware is a suite of business innovation platforms for enterprise and cloud environments from Oracle Corporation that provides middleware, software collections, and other capabilities.Oracle Access Manager is one of the components that provides identity...
[SECURITY] Fedora 24 Update: pulp-docker-2.0.2-1.fc24
Provides a collection of Pulp server plugins and admin client extensions to support Docker content...
IBM WebSphere Application Server 8.0 < Fix Pack 9 Multiple Vulnerabilities
IBM WebSphere Application Server 8.0 prior to Fix Pack 9 is running on the remote host. It is, therefore, affected by the following vulnerabilities : - A cross-site scripting flaw exists within the Administration Console, where user input is improperly validated. This could allow a remote attacke...
CVE-2014-0859: Undefined Security Weakness
The web-server plugin in IBM WebSphere Application Server WAS 7.x before 7.0.0.33, 8.x before 8.0.0.9, and 8.5.x before 8.5.5.2, when POST retries are enabled, allows remote attackers to cause a denial of service daemon crash via unspecified vectors...
Oracle Access Manager Unspecified WebGate Webserver Plugin Vulnerability
Binary data oracleaccessmanagerwebgatecve20142452.nbin...
CVE-2010-2914
Cross-site scripting XSS vulnerability in nessusdwwwserver.nbin in the Nessus Web Server plugin 1.2.4 for Nessus allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2010-2914
The provided connected records confirm a concrete XSS flaw in the Nessus Web Server component. Affected: Nessus Web Server plugin/nessusd_www_server.nbin in Nessus Web Server
WordPress WP Forum Server Plugin <= 2.3 - Multiple SQL Injection
Because of these vulnerabilities, the attackers can execute arbitrary SQL commands. Solution Update the plugin...
Openfire < 3.6.3 Multiple Vulnerabilities
Binary data 4925.prm...
CVE-2008-2523: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Autopatcher server plugin in RakNet before 3.23 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
J. River Media Center 11.0.309 Remote Denial of Service PoC
Exploit for unknown platform in category dos / poc =========================================================== J. River Media Center 11.0.309 Remote Denial of Service PoC =========================================================== !/usr/bin/perl Credit to n00b for finding this bug..^ ^ Media Cent...