CVE-2004-0944

The web management interface for Mitel 3300 Integrated Communications Platform ICP before 4.2.2.11 generates easily predictable web session IDs, which allows remote attackers to hijack other sessions via the parentsessionid cookie...

CVE-2003-0944

Buffer overflow in the WAECHO default service in web-tools in SAP DB before 7.4.03.30 allows remote attackers to execute arbitrary code via a URL with a long requestURI...

CVE-2003-0944

SAP DB web-tools : The vulnerability set includes a buffer overflow in the default waecho service of SAP DB’s web-tools, and related issues in Web Agent Administration, Web SQL, and Web DBM. The root cause is improper handling of long requestURIs and related inputs, enabling remote code execution...

CVE-2002-0944

Cross-site scripting vulnerability in DeepMetrix LiveStats 5.03 through 6.2.1 allows remote attackers to execute arbitrary script as the LiveStats user via the 1 user-agent or 2 referrer, which are not filtered by the stats program...

CVE-2002-0944

Cross-site scripting vulnerability in DeepMetrix LiveStats 5.03–6.2.1 allows remote attackers to execute arbitrary script as the LiveStats user via the (1) user-agent or (2) referrer, which are not filtered by the stats program. Affected: DeepMetrix LiveStats versions 5.03 through 6.2.1. Impact: ...

CVE-2002-0944

Cross-site scripting vulnerability in DeepMetrix LiveStats 5.03 through 6.2.1 allows remote attackers to execute arbitrary script as the LiveStats user via the 1 user-agent or 2 referrer, which are not filtered by the stats program...

CVE-2001-0944

CVE-2001-0944 describes a DDE-based risk in mIRC where a local user can trigger a DDE message that executes a command, potentially running in another user’s process. This enables local privilege escalation with the command execution potentially affecting confidentiality, integrity, and availabili...

CVE-2001-0944

DDE in mIRC allows local users to launch applications under another user's account via a DDE message that executes a command, which may be executed by the other user's process...

CVE-2000-0944

The CVE-2000-0944 issue affects CGI Script Center News Update 1.1. The vulnerability is in the password change flow where the original news administration password is not properly validated, enabling remote attackers to modify the password without knowing the original. Impact is unauthenticated r...

CVE-2000-0944

CGI Script Center News Update 1.1 does not properly validate the original news administration password during a password change operation, which allows remote attackers to modify the password without knowing the original password...

CVE-1999-0944

The CVE stems from IBM WebSphere ikeyman tool storing a password for the SSL key database with weak encryption. Affected component: IBM WebSphere ikeyman tool. Root cause: use of weak encryption for password storage in the key database used for SSL connections, leading to potential disclosure or ...

MS:90CF099F-0944-43B6-B72D-04096DA53130

...