Searching ultra software vulnerabilities

Cross-site scripting (XSS) vulnerability in bou

Cross-site | scripting |

Cross-site scripting (XSS) vulnerability in boundary_rules.jsp in the Administration Front End for Oracle Enterprise (Ultra) Search, as used in Database Server 9.2.0.8, 10.1.0.5, and 10.2.0.2, and in Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2.0 allows remote attackers to inject arbitrary HTML or web script via the EXPTYPE parameter, aka SES01.


Absolute path traversal vulnerability in a cert

vulnerability | CryptoXdll | SaveToFile | Component | arbitrary | attackers | traversal | argument | Absolute | pathname | ActiveX | control | earlier | certain | Crypto | method | remote | allows | write | Ultra | files | full | path | via |

Absolute path traversal vulnerability in a certain ActiveX control in CryptoX.dll 2.0 and earlier in the Ultra Crypto Component allows remote attackers to write to arbitrary files via a full pathname in the argument to the SaveToFile method.


Multiple buffer overflows in a certain ActiveX

CryptoXdll | arbitrary | Component | attackers | overflows | Multiple | execute | earlier | ActiveX | certain | control | buffer | remote | Crypto | Ultra | allow | code | via |

Multiple buffer overflows in a certain ActiveX control in CryptoX.dll 2.0 and earlier in the Ultra Crypto Component allow remote attackers to execute arbitrary code via (1) a long string in the first argument to the AcquireContext method or (2) an unspecified vector to the DeleteContext method.


Software vulnerabilities results 1 to 4 of 4     
Page: 1