Web Services Management (WS-Man) / Windows Remote Management (WinRM) Detection (HTTP)

HTTP based detection of Web Services Management WS-Man / Windows Remote Management WinRM. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft .NET Framework 远程权利提升漏洞(CVE-2014-0257)(MS14-009)

BUGTRAQ ID: 65417 CVECAN ID: CVE-2014-0257 .NET就是微软的用来实现XML，Web Services，SOA（面向服务的体系结构service-oriented architecture）和敏捷性的技术。.NET Framework是微软开发的软件框架，主要运行在Microsoft Windows上。 Microsoft.NET Framework内存在权限提升漏洞，可使攻击者提升其在受影响系统上的权限。 0 Microsoft .NET Framework 4.x Microsoft .NET Framework 3.x Microsoft...

ESA-2014-005: EMC Documentum Foundation Services (DFS) Content Access Vulnerability

ESA-2014-005.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-005: EMC Documentum Foundation Services DFS Content Access Vulnerability EMC Identifier: ESA-2014-005 CVE Identifier: CVE-2014-0622 Severity Rating: CVSS v2 Base Score: 9 AV:N/AC:L/Au:S/C:C/I:C/A:C Affected products: • EMC DF...

[Netsparker v3.2] Web Application Security Scanner

Netsparker can crawl, attack and identify vulnerabilities in all custom web applications regardless of the platform and the technology they are built on, just like an actual attacker. It can identify web application vulnerabilities like SQL Injection, Cross-site Scripting XSS, Remote Code Executi...

PT-2014-1408

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 7.x through 7.0.0.30 IBM WebSphere Application Server versions 8.0.x through 8.0.0.7 IBM WebSphere Application Server versions 8.5.x through 8.5.5.1 Description The issue allows remote attackers to cau...

CVE-2013-6325: Improper Input Validation

IBM WebSphere Application Server 7.x before 7.0.0.31, 8.0.x before 8.0.0.8, and 8.5.x before 8.5.5.2 allows remote attackers to cause a denial of service resource consumption via a crafted request to a web services endpoint...

CVE-2014-0396

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote attackers to affect confidentiality via unknown vectors related to Portal - Web Services...

Code injection

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote attackers to affect confidentiality via unknown vectors related to Portal - Web Services...

CVE-2014-0396

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote attackers to affect confidentiality via unknown vectors related to Portal - Web Services...

CVE-2014-0396

CVE-2014-0396 affects Oracle PeopleSoft: PeopleSoft Enterprise PeopleTools in Oracle PeopleSoft Products 8.52 and 8.53, with an unspecified vulnerability that could allow remote attackers to compromise confidentiality via unknown vectors related to Portal - Web Services. The root cause and affect...

PT-2014-3613

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products versions 8.52 through 8.53 Description The issue affects confidentiality and can be exploited by remote attackers through unknown vectors related to Portal - Web Services. Recommendations For versions 8.52 and 8.53, ...

CVE-2014-0396: Undefined Security Weakness

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote attackers to affect confidentiality via unknown vectors related to Portal - Web Services...

Updated cxf, wss4j, and jacorb packages fix security vulnerability

Multiple denial of service flaws were found in the way StAX parser implementation of Apache CXF, an open-source web services framework, performed processing of certain XML files. If a web service application utilized the services of the StAX parser, a remote attacker could provide a...

Oracle Fusion Middleware Web Services Component Remote Information Disclosure

The remote host is affected by an information disclosure vulnerability that is related to the 'ScriptServlet' class in the Web Services Test Page. This vulnerability can be triggered via a specially crafted query with a directory traversal string. C Tenable Network Security, Inc...

php: Ability to read arbitrary files due use of external entities while parsing SOAP WSDL files

The SOAP parser in PHP before 5.3.23 and 5.4.x before 5.4.13 allows remote attackers to read arbitrary files via a SOAP WSDL file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue in the soapxmlParseFile and...

WS: EJB3 role restrictions are not applied to jaxws handlers

A flaw was found in the way method-level authorization for JAX-WS Service endpoints was performed by the EJB invocation handler implementation. Any restrictions declared on EJB methods were ignored when executing the JAX-WS handlers, and only class-level restrictions were applied. A remote attack...

Twitter Implements Perfect Forward Secrecy

Twitter took another step toward not only securing the privacy of its users’ communication over the social network, but in warding off the prying eyes of government surveillance with the implementation of Perfect Forward Secrecy. The technology thwarts the efforts of anyone who may be collecting...

RedHat Update for evolution RHSA-2013:1540-02

Check for the Version of evolution OpenVAS Vulnerability Test RedHat Update for evolution RHSA-2013:1540-02 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

RHEL 6 : evolution (RHSA-2013:1540)

Updated evolution packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which...

SKIDATA Freemotion.Gate - Web Services Multiple Command Execution Vulnerabilities

SKIDATA Freemotion.Gate - Web Services Multiple Command Execution Vulnerabilities source: https://www.securityfocus.com/bid/63805/info SKIDATA Freemotion.Gate is prone to multiple remote command-execution vulnerabilities. Attackers can exploit these issues to execute arbitrary commands in the...