| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2005-4766 | 5.4 | BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, and 7.0 SP5 and earlier, do not encrypt multicast traffic, which might allow remote attackers to read sensitive cluster synchronization messages by sniffing the multicast traffic. | 2008-09-05 20:57:00 | 2005-12-31 05:00:00 |
| CVE-2005-4765 | 7.6 | BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier and 7.0 SP6 and earlier, when using the weblogic.Deployer command with the t3 protocol, does not use the secure t3s protocol even when an Administration port is enabled on the Administratio | 2008-09-05 20:57:00 | 2005-12-31 05:00:00 |
| CVE-2005-4764 | 7.8 | BEA WebLogic Server and WebLogic Express 9.0, 8.1, and 7.0 lock out the admin user account after multiple incorrect password guesses, which allows remote attackers who know or guess the admin account name to cause a denial of service (blocked admin l | 2008-09-05 20:57:00 | 2005-12-31 05:00:00 |
| CVE-2005-4763 | 7.5 | BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and earlier, when Internet Inter-ORB Protocol (IIOP) is used, sometimes include a password in an exception message that is sent to a client or stored in a | 2008-09-05 20:57:00 | 2005-12-31 05:00:00 |
| CVE-2005-4762 | 7.2 | BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and earlier sometimes stores the boot password in the registry in cleartext, which might allow local users to gain administrative privileges. | 2008-09-05 20:57:00 | 2005-12-31 05:00:00 |
| CVE-2005-4761 | 1.2 | BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP5 and earlier, and 6.1 SP7 and earlier log the Java command line at server startup, which might include sensitive information (passwords or keyphrases) in the server log file when th | 2008-09-05 20:57:00 | 2005-12-31 05:00:00 |
| CVE-2005-4759 | 5.0 | BEA WebLogic Server and WebLogic Express 8.1 and 7.0, during a migration across operating system platforms, do not warn the administrative user about platform differences in URLResource case sensitivity, which might cause local users to inadvertently | 2008-09-05 20:57:00 | 2005-12-31 05:00:00 |
| CVE-2005-4750 | 7.5 | BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP5 and earlier, and 6.1 SP7 and earlier allow remote attackers to cause a denial of service (server thread hang) via unknown attack vectors. | 2008-09-05 20:57:00 | 2005-12-31 05:00:00 |
| CVE-2005-4748 | 6.8 | PHP remote file include vulnerability in functions_admin.php in Virtual War (VWar) 1.5.0 R10 allows remote attackers to include and execute arbitrary PHP code via unspecified attack vectors. NOTE: this issue has been referred to as XSS, but it is cl | 2008-09-05 20:57:00 | 2005-12-31 05:00:00 |
| CVE-2005-4747 | 4.3 | Cross-site scripting (XSS) vulnerability in WebHost Automation Ltd Helm before 3.2.6 allows remote attackers to inject arbitrary web script or HTML via unknown vectors involving the default page. | 2008-09-05 20:57:00 | 2005-12-31 05:00:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: