Information Disclosure

openjdk is vulnerable to information disclosure. An unspecified vulnerability allows remote attackers to affect confidentiality via vectors related to JAX-WS...

Spoofable Tokens

Apache CXF 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1, when a Supporting Token specifies a child WS-SecurityPolicy 1.1 or 1.2 policy, does not properly ensure that an XML element is signed or encrypted, which has unspecified impact and attack vectors...

Authentication Bypass

JBoss Enterprise Application Platform 6 is a platform for Java applications based on JBoss Application Server 7. This release serves as a replacement for JBoss Enterprise Application Platform 6.0.1, and includes bug fixes and enhancements. Refer to the 6.1.0 Release Notes for information on the...

Improper Access Control

OpenJDK is vulnerable to improper access control vulnerability. The vulnerability exists in the Java Runtime Environment JRE component in Oracle Java SE. A local user could affect the confidentiality via vector related JAX-WS...

Access Restriction Bypass

JBoss Enterprise Application Platform 6 is a platform for Java applications based on JBoss Application Server 7. This release serves as a replacement for JBoss Enterprise Application Platform 6.0.0, and includes bug fixes and enhancements. Refer to the 6.0.1 Release Notes for information on the...

CentOS 7 : openwsman (CESA-2019:0638)

An update for openwsman is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Command Execution Vulnerability in M8600E-WS-ED of Riptide Networks Inc.

M8600E-WS-ED is a wireless control service card designed for cloud architecture network by Ruijie Networks, which is suitable for RG-S8600E series new-generation cloud architecture network core switches. A command execution vulnerability exists in Ruijie Networks M8600E-WS-ED. An attacker can...

Authentication flaw

Dell EMC iDRAC9 versions prior to 3.30.30.30 contain an authentication bypass vulnerability. A remote attacker may potentially exploit this vulnerability to bypass authentication and gain access to the system by sending specially crafted input data to the WS-MAN interface...

CVE-2019-3707 WS-MAN Authentication Bypass Vulnerability

Dell EMC iDRAC9 versions prior to 3.30.30.30 contain an authentication bypass vulnerability. A remote attacker may potentially exploit this vulnerability to bypass authentication and gain access to the system by sending specially crafted input data to the WS-MAN interface...

CVE-2019-3707

CVE-2019-3707 affects Dell EMC iDRAC9 before version 3.30.30.30. An authentication bypass vulnerability exists where a remote attacker can bypass authentication by sending specially crafted input data to the WS-MAN interface. Exploitation details in the connected documents are identical across so...

Fedora Update for openwsman FEDORA-2019-348166f7fd

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 30 Update: openwsman-2.6.8-5.fc30

Openwsman is a project intended to provide an open-source implementation of the Web Services Management specification WS-Management and to expose system management information on the Linux operating system using the WS-Management protocol. WS-Management is based on a suite of web services...

[SECURITY] Fedora 29 Update: openwsman-2.6.5-9.fc29

Openwsman is a project intended to provide an open-source implementation of the Web Services Management specification WS-Management and to expose system management information on the Linux operating system using the WS-Management protocol. WS-Management is based on a suite of web services...

[SECURITY] Fedora 28 Update: openwsman-2.6.5-4.fc28

Openwsman is a project intended to provide an open-source implementation of the Web Services Management specification WS-Management and to expose system management information on the Linux operating system using the WS-Management protocol. WS-Management is based on a suite of web services...

Oracle Linux 7 : openwsman (ELSA-2019-0638)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-0638 advisory. - Update the fix for CVE-2019-3816 Resolves: 1668657 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Not...

DoS due to excessively large websocket message in ws

Affected versions of ws do not appropriately limit the size of incoming websocket payloads, which may result in a denial of service condition when the node process crashes after receiving a large payload. Recommendation Update to version 1.1.1 or later. Alternatively, set the maxpayload option fo...

02moduletest (=1.0.0), 10er10 (=0.23.0) +3954 more potentially affected by CVE-2016-10518 via ws (>=0.3.1 <=1.0.0)

ws NPM version =0.3.1, =0.0.1, =0.1.0, =0.0.1, =0.9.0, =0.0.1, =0.0.1, =0.1.2, =1.0.1, =0.1.16, =0.1.59-master.20200611224542 - @baiducloud/sdk =1.0.1-beta.7 - @bananaroxana/appsexpress =1.0.0 - @bananaroxana/myfirstapp =1.0.0 and more Source cves: CVE-2016-10518 Source advisory:...

GHSA-2MHH-W6Q8-5HXW Remote Memory Disclosure in ws

Versions of ws prior to 1.0.1 are affected by a remote memory disclosure vulnerability. In certain rare circumstances, applications which allow users to control the arguments of a client.ping call will cause ws to send the contents of an allocated but non-zero-filled buffer to the server. This ma...

Remote Memory Disclosure in ws

Versions of ws prior to 1.0.1 are affected by a remote memory disclosure vulnerability. In certain rare circumstances, applications which allow users to control the arguments of a client.ping call will cause ws to send the contents of an allocated but non-zero-filled buffer to the server. This ma...

com.makeandbuild:persistence (=1.0.47), com.makeandbuild:propconfig (=1.0.5) +5 more potentially affected by CVE-2019-3773 via org.springframework.ws:spring-ws (=2.1.0.RELEASE)

org.springframework.ws:spring-ws MAVEN version =2.1.0.RELEASE is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.ws:spring-ws and may be impacted: - com.makeandbuild:persistence =1.0.47 - com.makeandbuild:propconfig =1.0.5 -...