CVE-2013-3060

The web console in Apache ActiveMQ before 5.8.0 does not require authentication, which allows remote attackers to obtain sensitive information or cause a denial of service via HTTP requests...

Authentication flaw

The web console in Apache ActiveMQ before 5.8.0 does not require authentication, which allows remote attackers to obtain sensitive information or cause a denial of service via HTTP requests...

CVE-2013-3060

CVE-2013-3060 affects Apache ActiveMQ pre-5.8.0, where the web console did not require authentication. This allows remote attackers to obtain sensitive information or cause a denial of service via HTTP requests. Public sources in the provided documents (e.g., ActiveMQ advisories and related Red H...

CVE-2013-3060

The web console in Apache ActiveMQ before 5.8.0 does not require authentication, which allows remote attackers to obtain sensitive information or cause a denial of service via HTTP requests...

CVE-2013-3060

The web console in Apache ActiveMQ before 5.8.0 does not require authentication, which allows remote attackers to obtain sensitive information or cause a denial of service via HTTP requests...

Fedora Update for cumin FEDORA-2012-17834

Check for the Version of cumin OpenVAS Vulnerability Test Fedora Update for cumin FEDORA-2012-17834 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

[SECURITY] Fedora 18 Update: cumin-0.1.5522-4.fc18

Cumin is the MRG management web console. It provides a unified management interface for the Messaging, Realtime and Grid components of MRG...

Fedora 18 : firefox-19.0-1.fc18 / thunderbird-17.0.3-1.fc18 / xulrunner-19.0-1.fc18 (2013-2794)

Built-in PDF viewer - Canvas elements can export their content as an image blob using canvas.toBlob - Startup performance improvements bugs 715402 and 756313 - Debugger now supports pausing on exceptions and hiding non-enumerable properties - Remote Web Console is available for connecting to...

Multiple vulnerabilities in Hitachi Tuning Manager and JP1/Performance Management

Overview Hitachi Tuning Manager, JP1/Performance Management - Web Console, and JP1/Performance Management - Manager Web Option contain Cross-site scripting and cross-site request forgery CSRF vulnerabilities. These vulnerabilities can not be exploited, unless logging in these products. Impact A...

Moxa NPort Unprotected Console (HTTP)

The remote Moxa NPort Web Console is not protected by a password. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFIX =...

Cross site scripting

Cross-site scripting XSS vulnerability in InfoSphere Business Glossary 8.1.1 and 8.1.2, InfoSphere DataStage Operation Console, InfoSphere Administration, and Reporting and Repository Management Web Console in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 allows remote attackers ...

RHEL 5 : JBoss EAP (RHSA-2010:0378)

Updated JBoss Enterprise Application Platform JBEAP 4.2 packages that fix three security issues and multiple bugs are now available for Red Hat Enterprise Linux 5 as JBEAP 4.2.0.CP09. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability...

Microsoft System Center Operations Manager crossite scripting

Crossite scripting in Web console...

CVE-2013-0009

Microsoft System Center Operations Manager 2007 SP1 and R2 are affected by a vulnerability described as cross-site scripting in the CVE-2013-0009 entry, with Microsoft’s MS13-003 bulletin (KB2748552) explicitly noting vulnerabilities that could allow elevation of privilege when a user visits an a...

Jboss Application Server Remote Code Execution 0day

This exploit owns almost any jboss server . This works through a unnamed INVOKER , there are million of jboss servers vuln. Note : this exploit 100% functional. THIS EXPLOIT USES A HIDDEN INVOKER IN WEB-CONSOLE, NO PERMISSION NEEDED TO EXPLOIT. THE INVOKER IS LOCATED ON :...

Fedora Update for cumin FEDORA-2012-17863

Check for the Version of cumin OpenVAS Vulnerability Test Fedora Update for cumin FEDORA-2012-17863 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

Fedora Update for cumin FEDORA-2012-17854

Check for the Version of cumin OpenVAS Vulnerability Test Fedora Update for cumin FEDORA-2012-17854 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

Fedora 17 : firefox-17.0-1.fc17 / thunderbird-17.0-1.fc17 / thunderbird-enigmail-1.4.6-2.fc17 / etc (2012-18683)

First revision of the Social API and support for Facebook Messenger - Click-to-play blocklisting implemented to prevent vulnerable plugin versions from running without the user's permission see blog post - Updated Awesome Bar experience with larger icons - JavaScript Maps and Sets are now...

[SECURITY] Fedora 16 Update: cumin-0.1.5522-4.fc16

Cumin is the MRG management web console. It provides a unified management interface for the Messaging, Realtime and Grid components of MRG...

Sql injection

Multiple SQL injection vulnerabilities in terminal/paramedit.aspx in VeriFone VeriCentre Web Console before 2.2 build 36 allow remote attackers to execute arbitrary SQL commands via the 1 TerminalId, 2 ModelName, or 3 ApplicationName parameter...