Lucene search
+L

128 matches found

CVE
CVE
added 2005/06/21 4:00 a.m.63 views

CVE-2001-1497

Microsoft Internet Explorer 4.0–6.0 has a local-privilege issue where an attacker can differentiate alphanumeric from non-alphanumeric password characters by using certain control-key navigation, potentially aiding brute-force guessing. The issue affects IE versions 4.0 through 6.0; CVSSv2 base s...

2.1CVSS6.8AI score0.02047EPSS
SaveExploits0References4Affected Software2
CVE
CVE
added 2005/05/11 4:00 a.m.61 views

CVE-2005-1497

The CVE-2005-1497 entry concerns myBloggie 2.1.1. Affected component: index.php. Vulnerability: when handling an invalid post_id parameter, an error message reveals the server path, enabling partial information disclosure. Root cause: error message leakage rather than an executable exploit vector...

5CVSS6.6AI score0.01409EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2005/02/19 5:00 a.m.25 views

CVE-2004-1497

Web Forums Server 1.6 and 2.0 Power Pack stores passwords in plaintext in the Username.ini file, which allows local users to gain privileges...

6.6AI score0.00314EPSS
SaveExploits0References1
CVE
CVE
added 2005/02/19 5:00 a.m.49 views

CVE-2004-1497

Web Forums Server 1.6 and 2.0 Power Pack store passwords in plaintext in the Username.ini file, enabling local users to gain privileges. This indicates a local-privilege escalation risk due to insecure credential storage. The available sources describe the vulnerable component and impact but do n...

4.6CVSS7AI score0.00314EPSS
SaveExploits0References1
NVD
NVD
added 2004/12/31 5:00 a.m.15 views

CVE-2004-1497

Web Forums Server 1.6 and 2.0 Power Pack stores passwords in plaintext in the Username.ini file, which allows local users to gain privileges...

4.6CVSS6.6AI score0.00314EPSS
SaveExploits0References1
CVE
CVE
added 2004/09/01 4:00 a.m.57 views

CVE-2002-1497

Technical details about this CVE are not provided in the connected documents. The initial description notes an XSS in Null HTTP Server 0.5.0 and earlier, allowing arbitrary HTML in 404 responses. Monitor for updates.

4.3CVSS6AI score0.01685EPSS
SaveExploits1References3Affected Software1
NVD
NVD
added 2003/12/31 5:00 a.m.20 views

CVE-2003-1497

Buffer overflow in the system log viewer of Linksys BEFSX41 1.44.3 allows remote attackers to cause a denial of service via an HTTP request with a long LogPageNum variable...

6.3CVSS6.8AI score0.01404EPSS
SaveExploits1References5
CVE
CVE
added 2001/09/12 4:00 a.m.63 views

CVE-1999-1497

Ipswitch IMail 5.0 and 6.0 store e‑mail account passwords in registry keys using weak encryption, allowing local attackers to read passwords. Affected component: registry storage of credentials; Root cause: weak cryptography. Impact: local confidentiality and integrity compromise. CVSS base score...

7.2CVSS6.7AI score0.01404EPSS
SaveExploits3References2Affected Software1
Rows per page
Query Builder