Lucene search
+L

646 matches found

exploitpack
exploitpack
•added 2004/08/05 12:00 a.m.•15 views

Microsoft Internet Explorer 6 - mms Protocol Handler Executable Command Line Injection

Microsoft Internet Explorer 6 - mms Protocol Handler Executable Command Line Injection source: https://www.securityfocus.com/bid/10879/info A vulnerability has been reported to exist in Microsoft Internet Explorer that may allow remote attackers to pass arbitrary command line arguments to an...

0.2AI score
SaveExploits0
CVE
CVE
•added 2003/04/02 5:00 a.m.•55 views

CVE-2002-0697

Microsoft Metadirectory Services (MMS) 2.2 is affected by a vulnerability where remote attackers can bypass authentication by connecting an LDAP client directly to MMS and bypassing MMS credential checks, potentially allowing modification of sensitive data. The affected component is MMS 2.2; the ...

10CVSS7.3AI score0.17988EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2003/04/02 12:00 a.m.•5 views

CVE-2002-0697: Undefined Security Weakness

Microsoft Metadirectory Services MMS 2.2 allows remote attackers to bypass authentication and modify sensitive data by using an LDAP client to directly connect to MMS and bypass the checks for MMS credentials...

10CVSS5.9AI score0.17988EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2002/08/10 12:00 a.m.•8 views

CVE-2000-1209: Undefined Security Weakness

The "sa" account is installed with a default null password on 1 Microsoft SQL Server 2000, 2 SQL Server 7.0, and 3 Data Engine MSDE 1.0, including third party packages that use these products such as 4 Tumbleweed Secure Mail MMS 5 Compaq Insight Manager, and 6 Visio 2000, which allows remote...

10CVSS5.8AI score0.87307EPSS
SaveExploits4References1
CVE
CVE
•added 2000/09/21 4:00 a.m.•70 views

CVE-2000-0772

The CVE-2000-0772 entry concerns Tumbleweed Messaging Management System (MMS) 4.6 and earlier (formerly Worldtalk Worldsecure) that creates a default account named “sa” with no password, enabling unauthenticated access. The NVD entry attributes a CVSSv2 base score of 7.5 (HIGH) with network attac...

7.5CVSS7AI score0.01396EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2000/09/21 12:00 a.m.•7 views

CVE-2000-0772: Undefined Security Weakness

The installation of Tumbleweed Messaging Management System MMS 4.6 and earlier formerly Worldtalk Worldsecure creates a default account "sa" with no password...

7.5CVSS5.7AI score0.01396EPSS
SaveExploits0References1
Rows per page
Query Builder