3435 matches found
CVE-2014-4202
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect availability via vectors related to WLS - Web Services...
Mambo Component Awesom <= 0.3.2 (listid) SQL Injection Vulnerability
No description provided by source. joomla SQL Injectioncomawesom AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DORKS 1 : allinurl :comawesom ı changed ATATÜRK.com's db. soo dont look ATATÜRK.com db si değiştirilip kullanıcısına bildirilmiştir. EXPLOIT :...
Glassfish Enterprise Server 2.1 Admin Console /webService/webServicesGeneral.jsf URI XSS
No description provided by source. source: http://www.securityfocus.com/bid/34824/info GlassFish Enterprise Server is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Attacker-supplied HTML and script code would run in the conte...
Microsoft Windows NT 4.0/4.0 SP1/4.0 SP2/4.0 SP3 LSA Secrets Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/231/info The HKeyLocalMachine\SECURITY\Policy\Secrets\ key contains obfuscated data for various system services/resources. Clear-text usernames and passwords for services running under the context of a user account,...
Alt-N MDaemon 3.1.1 DoS Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1689/info Alt-N MDaemon 3.1.1 is subject to a denial of service. If a remote user requests a specially crafted URL to the web services within MDaemon the service will crash. A restart of the service is required in order t...
netStartEnterprise 4.0 - SQL Injection Vulnerability
No description provided by source. ======================================= netStartEnterprise v4.0 SQL Injection Vulnerability ======================================= Exploit Title: netStartEnterprise v4.0 SQL Injection Vulnerability Author: L1nK Mail: [email protected] Date: 07/23/2010...
GCP 2.0 datasets provided as BioCASE web services
No description provided by source. ======================================================================== .::GCP 2.0 datasets provided as BioCASE web services::. Local File Inclusion ========================================================================...
HP OpenView Network Node Manager 6.10 SNMP DoS Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1713/info The OverView5 CGI interface by default is shipped with HP Openview Node Manager. HP Openview Node Manager can be compromised due to an unchecked buffer. By sending a specially crafted GET request comprised of 13...
Sports Accelerator Suite 2.0 - (news_id) Remote SQL Injection Vulnerability
No description provided by source. Sports Accelerator Suite v2.0 newsid Remote SQL Injection Vulnerability Vendor: Athlete Web Services, Inc. / AWS Sports Product Web Page: http://www.athletewebservices.com Summary: Content Management System PHP+MySQL. Description: The CMS is vulnerable to an SQL...
Oracle OpenSSO 8.0 - Multiple XSS POST Injection Vulnerabilities
No description provided by source. ?!-- Oracle OpenSSO 8.0 Multiple XSS POST Injection Vulnerabilities Vendor: Oracle Corporation Product web page: http://www.oracle.com Affected version: 8.0 Update 2 Patch3 Build 6.1 2011-June-8 05:24 Summary: Oracle OpenSSO is a complete solution that provides...
RHEL 5 : Red Hat JBoss Enterprise Application Platform 6.2.4 update (Moderate) (RHSA-2014:0798)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:0798 advisory. Red Hat JBoss Enterprise Application Platform 6 is a platform for Java applications based on JBoss Application Server 7. Apache CXF is an op...
Moderate: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.2.4 update
Updated packages that provide Red Hat JBoss Enterprise Application Platform 6.2.4 and fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having Moderate security...
Moderate: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.2.4 update
Updated packages that provide Red Hat JBoss Enterprise Application Platform 6.2.4 and fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Moderate security...
Moderate: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.2.4 update
Updated packages that provide Red Hat JBoss Enterprise Application Platform 6.2.4 and fix multiple security issues, several bugs, and add various enhancements are now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having Moderate security...
Hacker Puts Hosting Service Code Spaces Out of Business
Code Spaces, a code-hosting and software collaboration platform, has been put out of business by an attacker who deleted the company’s data and backups. Officials wrote a lengthy explanation and apology on the company’s website, promising to spend its current resources helping customers recover...
[Onapsis Security Advisories] Multiple Hard-coded Usernames in SAP Components
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Onapsis Security Advisories:Multiple Hard-coded Usernames CWE-798 have been found and patched in a variety of SAP components. Summaries of the advisories with links to full versions follow: 1. ONAPSIS-2014-011-SAP Project System Structures and...
OpenJDK: incorrect caching of data initialized via TCCL (JAXWS, 8026188)
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0452 and CVE-2014-0458...
OpenJDK: Activation framework default command map caching (JAX-WS, 8025152)
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0452 and CVE-2014-2423...
OpenJDK: incorrect caching of data initialized via TCCL (JAXWS, 8026801)
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0458 and CVE-2014-2423...
