128 matches found
CVE-2001-1497
Microsoft Internet Explorer 4.0–6.0 has a local-privilege issue where an attacker can differentiate alphanumeric from non-alphanumeric password characters by using certain control-key navigation, potentially aiding brute-force guessing. The issue affects IE versions 4.0 through 6.0; CVSSv2 base s...
CVE-2005-1497
The CVE-2005-1497 entry concerns myBloggie 2.1.1. Affected component: index.php. Vulnerability: when handling an invalid post_id parameter, an error message reveals the server path, enabling partial information disclosure. Root cause: error message leakage rather than an executable exploit vector...
CVE-2004-1497
Web Forums Server 1.6 and 2.0 Power Pack stores passwords in plaintext in the Username.ini file, which allows local users to gain privileges...
CVE-2004-1497
Web Forums Server 1.6 and 2.0 Power Pack store passwords in plaintext in the Username.ini file, enabling local users to gain privileges. This indicates a local-privilege escalation risk due to insecure credential storage. The available sources describe the vulnerable component and impact but do n...
CVE-2004-1497
Web Forums Server 1.6 and 2.0 Power Pack stores passwords in plaintext in the Username.ini file, which allows local users to gain privileges...
CVE-2002-1497
Technical details about this CVE are not provided in the connected documents. The initial description notes an XSS in Null HTTP Server 0.5.0 and earlier, allowing arbitrary HTML in 404 responses. Monitor for updates.
CVE-2003-1497
Buffer overflow in the system log viewer of Linksys BEFSX41 1.44.3 allows remote attackers to cause a denial of service via an HTTP request with a long LogPageNum variable...
CVE-1999-1497
Ipswitch IMail 5.0 and 6.0 store e‑mail account passwords in registry keys using weak encryption, allowing local attackers to read passwords. Affected component: registry storage of credentials; Root cause: weak cryptography. Impact: local confidentiality and integrity compromise. CVSS base score...