1029 matches found
CVE-2007-6130
gnump3d 2.9final does not apply password protection to its plugins, which might allow remote attackers to bypass intended access restrictions...
CVE-2007-6130
gnump3d 2.9final does not apply password protection to its plugins, which might allow remote attackers to bypass intended access restrictions...
CVE-2007-6130
The CVE-2007-6130 issue affects gnump3d 2.9final, where password protection is not applied to plugins, potentially allowing remote attackers to bypass intended access restrictions. The vulnerability concerns plugin-level access controls rather than core authentication, with the NVD and SUSE entri...
CVE-2003-1454
Invision Power Services Invision Board 1.0 through 1.1.1, when a forum is password protected, stores the administrator password in a cookie in plaintext, which could allow remote attackers to gain access...
CVE-2003-1376
WinZip 8.0 uses weak random number generation for password protected ZIP files, which allows local users to brute force the encryption keys and extract the data from the zip file by guessing the state of the stream coder...
CVE-2003-1376
WinZip 8.0 is affected. The vulnerability stems from weak random number generation used for password protected ZIP files, allowing local attackers to brute force encryption keys by guessing the state of the ZIP stream coder. Reported impact is partial confidentiality, integrity, and availability....
Green crack Office software protection password-vulnerability warning-the black bar safety net
As is well known, we in the use of Office software packages, you can set open password or a modify with the write-protection password, to avoid being someone else to steal private information. But the days long, even if their own are forgotten once set what the password what do I do? Perhaps you'...
Authentication flaw
The server in Babo Violent 2 2.08.00 and earlier does not properly implement password protection, which might allow remote attackers to bypass authentication by reconnecting after a connection closes...
Design/Logic Flaw
The "Extended properties for entries" entryproperties plugin in serendipityevententryproperties.php in Serendipity 1.1.3 allows remote authenticated users to bypass password protection and "deliver custom entryproperties settings to the Serendipity Frontend" via a certain request that modifies th...
CVE-2007-4282
The "Extended properties for entries" entryproperties plugin in serendipityevententryproperties.php in Serendipity 1.1.3 allows remote authenticated users to bypass password protection and "deliver custom entryproperties settings to the Serendipity Frontend" via a certain request that modifies th...
CVE-2007-4282
The "Extended properties for entries" entryproperties plugin in serendipityevententryproperties.php in Serendipity 1.1.3 allows remote authenticated users to bypass password protection and "deliver custom entryproperties settings to the Serendipity Frontend" via a certain request that modifies th...
Green crack Office software protection password-vulnerability warning-the black bar safety net
As is well known, we in the use of Office software packages, you can set open password or a modify with the write-protection password, to avoid being someone else to steal private information. But the days long, even if their own are forgotten once set what the password what do I do? Perhaps you'...
CVE-2007-0734
fsck, as used by the AirPort Disk feature of the AirPort Extreme Base Station with 802.11n before Firmware Update 7.1, and by Apple Mac OS X 10.3.9 through 10.4.9, does not properly enforce password protection of a USB hard drive, which allows context-dependent attackers to list arbitrary...
Memory corruption
fsck, as used by the AirPort Disk feature of the AirPort Extreme Base Station with 802.11n before Firmware Update 7.1, and by Apple Mac OS X 10.3.9 through 10.4.9, does not properly enforce password protection of a USB hard drive, which allows context-dependent attackers to list arbitrary...
CVE-2007-0734
fsck, as used by the AirPort Disk feature of the AirPort Extreme Base Station with 802.11n before Firmware Update 7.1, and by Apple Mac OS X 10.3.9 through 10.4.9, does not properly enforce password protection of a USB hard drive, which allows context-dependent attackers to list arbitrary...
CVE-2007-0734
CVE-2007-0734 affects the AirPort Disk feature of the AirPort Extreme Base Station with 802.11n and Apple Mac OS X 10.3.9–10.4.9. The fsck component does not properly enforce password protection of a USB hard drive, allowing context-dependent attackers to list arbitrary directories or execute arb...
CVE-2007-0734: Improper Restriction of Operations within the Bounds of a Memory Buffer
fsck, as used by the AirPort Disk feature of the AirPort Extreme Base Station with 802.11n before Firmware Update 7.1, and by Apple Mac OS X 10.3.9 through 10.4.9, does not properly enforce password protection of a USB hard drive, which allows context-dependent attackers to list arbitrary...
Dodge ScanWebShell the little things-vulnerability warning-the black bar safety net
Method of use: Direct access to the xxx. asp? bin=zs will be in the current directory to generate a bin. asp. The connection password for the zs! PS: the file can Dodge ScanWebShell,but the generated bin. asp will be killed,after use please delete the bin. asp! % pass="zs" If request"bin"= pass...
Design/Logic Flaw
McAfee VirusScan Enterprise 8.5.0.i uses insecure permissions for certain Windows Registry keys, which allows local users to bypass local password protection via the UIP value in 1 HKEYLOCALMACHINE\SOFTWARE\McAfee\DesktopProtection or 2 HKEYLOCALMACHINE\SOFTWARE\Network Associates\TVD\VirusScan...
CVE-2007-1538
The CVE-2007-1538 entry concerns McAfee VirusScan Enterprise 8.5.0.i, where insecure permissions on Windows Registry keys (HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\DesktopProtection and HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\VirusScan Enterprise\CurrentVersion) allow local users to bypass l...