97 matches found
CVE-2007-0589
CVE-2007-0589 affects Forum Livre 1.0 and is a SQL injection vulnerability in the info_user.asp user parameter that could allow remote arbitrary SQL execution. Root cause: unsanitized user input enabling database command execution. Impact: attacker can read/modify data and potentially compromise ...
CVE-2006-0589
CVE-2006-0589 affects MyTopix 1.2.3. The vulnerability allows remote attackers to obtain the installation path by making a direct request to logon.mod.php, which leaks the path in an error message. No explicit exploit code or in-the-wild details are provided in the documents beyond this. The conn...
CVE-2005-0589
CVE-2005-0589 affects Firefox before 1.0.1. The Form Fill feature can allow remote attackers to steal potentially sensitive information by monitoring values generated by the autocomplete capability. This is described in the NVD entry and echoed by multiple advisories (e.g., RHSA-2005:176, GLSA-20...
CVE-2004-0589
Cisco IOS 11.1x through 11.3x and 12.0x through 12.2x, when configured for BGP routing, allows remote attackers to cause a denial of service device reload via malformed BGP 1 OPEN or 2 UPDATE messages...
CVE-2004-0585
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2004-0589. Reason: This candidate is a duplicate of CVE-2004-0589. Notes: All CVE users should reference CVE-2004-0589 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2004-0585
CVE-2004-0585 is rejected/not used; refer to CVE-2004-0589 instead.
CVE-2004-0589
Cisco IOS versions 11.1(x)–11.3(x) and 12.0(x)–12.2(x), when BGP is configured, are susceptible to denial of service via malformed BGP OPEN or UPDATE messages, potentially triggering a device reload. The CVE entry CVE-2004-0589 is supported by vendor advisories and vulnerability notes describing ...
CVE-2004-0589
Cisco IOS 11.1x through 11.3x and 12.0x through 12.2x, when configured for BGP routing, allows remote attackers to cause a denial of service device reload via malformed BGP 1 OPEN or 2 UPDATE messages...
CVE-2003-0589
admin.php in Digi-ads 1.1 allows remote attackers to bypass authentication via a cookie with the username set to the name of the administrator, which satisfies an improper condition in admin.php that does not require a correct password...
CVE-2002-0589
PVote before 1.9 allows remote attackers to change the administrative password and gain privileges by directly calling chinfo.php with the newpass and confirm parameters both set to the new password...
CVE-2002-0589
The CVE-2002-0589 issue affects PVote prior to 1.9. An unauthenticated remote attacker can change the administrative password by directly calling ch_info.php with newpass and confirm parameters both set to the new password, enabling privilege gain. The available documents confirm the vulnerabilit...
CVE-2001-0589
NetScreen ScreenOS prior to 2.5r6 on the NetScreen-10 and Netscreen-100 can allow a local attacker to bypass the DMZ 'denial' policy via specific traffic patterns...
CVE-2001-0589
Technical details such as affected products, versions, root cause, or available fixes for CVE-2001-0589 are not provided in the connected documents. The given sources only reiterate the vulnerability at a high level; monitor for updates.
CVE-2000-0589
SawMill 5.0.21 is affected by a weakness in how it stores passwords, enabling an attacker to decrypt the administrative password and modify the SawMill configuration. The vulnerability stems from weak encryption/hash usage, facilitating information disclosure and potential configuration tampering...
Microsoft Windows SMB Registry : Schedule Key Permission Weakness Local Privilege Escalation
The registry key SYSTEM\CurrentControlSet\Services\Schedule is writeable by users who are not in the admin group. Since the scheduler runs with SYSTEM privileges, this allow a malicious user to gain these privileges on this system. C Tenable Network Security, Inc. include"compat.inc"; if...
CVE-1999-0589
CVE-1999-0589 is associated with insecure permissions on system-critical Windows NT registry keys. Connected advisories identify multiple registry keys that are writable by non-admin users, enabling potential privilege escalation to SYSTEM: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlog...