Top Web Vulnerabilities -

The Top Five is moving...

The Top Web Vulnerabilities Team Blog will no longer be an active HP Application Security Center blog. Instead, future Top Five Web Application Vulnerabilities postings will be made in the HP Security Laboratory Team Blog . Expect a new list of the most...

Published 04-22-2009 7:43 PM by mark.painter

Top Five Web Application Vulnerabilities 3/22/09 - 4/12/09

1) IBM BladeCenter Advanced Management Module Multiple Remote Vulnerabilities The IBM BladeCenter Advanced Management Module is susceptible to several vulnerabilities including Cross-Site Scripting, HTML Injection, information disclosure, and Cross-Site...

Published 04-13-2009 8:17 PM by mark.painter

Top Five Web Application Vulnerabilities 3/2/2009 - 3/21/2009

1) Sun Java System Identity Manager Multiple Vulnerabilities Sun Java System Identify Manager is susceptible to multiple vulnerabilities including Cross-Site Scripting, information disclosure, and privilege escalation. Successful exploitation could give...

Published 03-23-2009 8:27 PM by mark.painter

Top Five Web Application Vulnerabilities 2/17/09 - 3/1/09

1) Cisco Unified MeetingPlace Web Conferencing Authentication Bypass Vulnerability Cisco Unified MeetingPlace Web Conferencing is susceptible to an authentication bypass vulnerability which can be exploited to gain administrative access to the affected...

Published 03-02-2009 10:19 PM by mark.painter

Top Five Web Application Vulnerabilities 2/2/09 - 2/16/09

1) Cisco IOS HTTP Server Multiple Cross-Site Scripting Vulnerabilities Cisco IOS HTTP Server is susceptible to multiple instances of Cross-Site Scripting. Cross-Site Scripting occurs when dynamically generated web pages display user input, such as login...

Published 02-17-2009 9:30 PM by mark.painter

Top Five Web Application Vulnerabilities 1/20/09 - 2/1/09

1) Oracle Application Server Cross-Site Scripting Vulnerabilities Oracle Application Server is susceptible to multiple instances of Cross-Site Scripting. These vulnerabilities can be exploited to execute code in the browser of an unsuspecting user and...

Published 02-02-2009 10:09 PM by mark.painter

Top Five Web Application Vulnerabilities 1/05/09 -1/19/09

1) Cisco IOS HTTP Server Multiple Cross-Site Scripting Vulnerabilities Cisco IOS HTTP server is susceptible to multiple instances of Cross-Site Scripting. These vulnerabilities can be exploited to execute code in the browser of an unsuspecting user and...

Published 01-20-2009 8:57 PM by mark.painter

Top Five Web Application Vulnerabilities 12/15/08 - 1/04/09

1) Fujitsu-Siemens WebTransactions Command Injection Vulnerability Fujitsu-Siemens WebTransactions is susceptible to a command injection vulnerability because the application fails to properly validate user supplied input. Exploitation can lead to a complete...

Published 01-05-2009 10:13 PM by mark.painter

Top Five Web Application Vulnerabilities 12/1/08 - 12/14/08

1) Sun Java Web Start and Java Plug-in Multiple Privilege Escalation Vulnerabilities Sun Java Web Start and Java Plug-in are susceptible to multiple privilege escalation vulnerabilities. An attacker can leverage these vulnerabilities to obtain sensitive...

Published 12-16-2008 9:35 PM by mark.painter

Top Five Web Application Vulnerabilities 11/10/08 - 11/30/08

1) IBM Lotus Web Content Management Unspecified Cross-Site Scripting Vulnerabilities IBM Lotus Web Content Management is susceptible to multiple Cross-Site Scripting vulnerabilities. If exploited, these vulnerabilities could give an attacker the means...

Published 12-01-2008 8:20 PM by mark.painter

Top Five Web Application Vulnerabilities 10/27/08 - 11/09/08

1) SonicWALL Content Filtering Blocked Site Error Page Cross-Site Scripting Vulnerability SonicWALL Content Filtering is susceptible to a Cross-Site Scripting vulnerability. If exploited, this vulnerability could give an attacker the means to perform...

Published 11-10-2008 9:35 PM by mark.painter

Top Five Web Application Vulnerabilities 10/13/08 - 10/26/08

1) Oracle WebLogic Server Apache Connector Stack Based Buffer Overflow Vulnerability Oracle WebLogic Server Apache Connector is susceptible to a stack based buffer overflow because user-supplied input is not properly validated. This issue can be exploited...

Published 10-28-2008 8:39 PM by mark.painter

Top Five Web Application Vulnerabilities 9/29/08 - 10/12/08

1) HP System Management Homepage (SMH) for Linux and Windows Cross Site Scripting Vulnerability HP System Management Homepage (SMH) is susceptible to a Cross-Site Scripting vulnerability. An attacker can leverage this issue to execute script code in the...

Published 10-14-2008 7:07 PM by mark.painter

Top Five Web Application Vulnerabilities 9/15/08 - 9/28/08

1) Xerox WorkCentre/WorkCentre Pro Network Controller Remote Code Execution Vulnerability Xerox WorkCentre/WorkCentre Pro Network Controller are susceptible to a remote code execution vulnerability. An attacker could leverage this vulnerability to execute...

Published 09-29-2008 8:33 PM by mark.painter

Top Five Web Application Vulnerabilities 9/2/08 - 9/14/08

1) Joomla! Multiple Remote Vulnerabilities and Weaknesses Joomla! is susceptible to multiple remote vulnerabilities which are exploitable via a browser. Remote attackers can leverage these issues to conduct phishing attacks, redirect victims to attacker...

Published 09-15-2008 8:10 PM by mark.painter

Top Web Vulnerabilities

Syndication

Recent Posts

Archives