Vulnerabilities (CVE)

Filtered by CWE-749
Total 144 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2014-0758 1 Iconics 1 Genesis32 2026-06-17 9.3 HIGH N/A
An ActiveX control in GenLaunch.htm in ICONICS GENESIS32 8.0, 8.02, 8.04, and 8.05 allows remote attackers to execute arbitrary programs via a crafted HTML document.
CVE-2010-1428 1 Redhat 1 Jboss Enterprise Application Platform 2026-06-16 5.0 MEDIUM 7.5 HIGH
The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allows remote attackers to obtain sensitive information via an unspecified request that uses a different method.
CVE-2010-0738 1 Redhat 1 Jboss Enterprise Application Platform 2026-06-16 5.0 MEDIUM 5.3 MEDIUM
The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application's GET handler by using a different method.
CVE-2006-1547 1 Apache 2 Commons Beanutils, Struts 2026-06-16 7.8 HIGH 7.5 HIGH
ActionForm in Apache Software Foundation (ASF) Struts before 1.2.9 with BeanUtils 1.7 allows remote attackers to cause a denial of service via a multipart/form-data encoded form with a parameter name that references the public getMultipartRequestHandler method, which provides further access to elements in the CommonsMultipartRequestHandler implementation and BeanUtils.