763 matches found
CVE-2007-2703
BEA WebLogic Portal 9.2 GA can corrupt a visitor entitlements role if an administrator provides a long role description, which might allow remote authenticated users to access privileged resources...
CVE-2006-6614
The saveloglocal function in Fully Automatic Installation FAI 2.10.1, and possibly 3.1.2, when verbose mode is enabled, stores the root password hash in /var/log/fai/current/fai.log, whose file permissions allow it to be copied to other hosts when fai-savelog is called and allows attackers to...
CVE-2004-1920
X-Micro WLAN 11b Broadband Router (versions 1.2.2, 1.2.2.3, 1.2.2.4, 1.6.0.0) contains a hardcoded 'super' username and password, which could allow remote attackers to gain access. The connected documents confirm the affected product and credential issue but do not provide details on exploitation...
CVE-2004-1342
CVS 1.12 and earlier on Debian GNU/Linux, when using the repouid patch, allows remote attackers to bypass authentication via the pserver access method...
[NEWS] UTStarcom's iAN-02EX Remote Access Vulnerability
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
LimeWire 4.1.2 - 4.5.6 Inappropriate Get Request Remote Exploit
Exploit for multiple platform in category remote exploits =============================================================== LimeWire 4.1.2 - 4.5.6 Inappropriate Get Request Remote Exploit =============================================================== !/usr/bin/perl Limewire 4.1.2 - 4.5.6 remote an...
CVE-2005-0747
ApplyYourself i-Class allows remote attackers to obtain sensitive information about their own applications by reusing the hidden ID field, as demonstrated using the id parameter to ApplicantDecision.asp...
CVE-2005-0494
The RgSecurity form in the HTTP server for the Thomson TCW690 cable modem running firmware 2.1 and software ST42.03.0a does not properly validate the password before performing changes, which allows remote attackers on the LAN to gain access via a direct POST request...
CVE-2004-1650
D-Link DCS-900 Internet Camera listens on UDP port 62976 for an IP address, which allows remote attackers to change the IP address of the camera via a UDP broadcast packet...
CVE-2004-1591
CVE-2004-1591 affects the Micronet Wireless Broadband Router SP916BM (firmware before 1.9). The web interface resets the router password to the default password when the device is shut off, potentially allowing an attacker to gain access remotely. The available documents confirm the affected prod...
HP-UX PHSS_30173 : HP-UX XFree86, Remote Unauthorized Privileged Access, Execution of Arbitrary Code (HPSBUX01018 SSRT4692 rev.2)
s700800 11.11 Xserver cumulative patch : A potential security vulnerability has been identified with HP UX, where a buffer overflow in XFree86 could be remotely exploited to gain unauthorized privileged access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch...
[Full-Disclosure] [ GLSA 200502-21 ] lighttpd: Script source disclosure
Gentoo Linux Security Advisory GLSA 200502-21 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
Moderate: Red Hat Security Advisory: mod_python security update
An updated modpython package that fixes a security issue in the publisher handle is now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Modpython is a module that embeds the Python language interpreter...
Symantec UPX Parsing Engine Heap Overflow
SUMMARY Symantec resolved a potential remote access compromise vulnerability reported by ISS X-Force. The vulnerability was identified in an early version of a Symantec antivirus scanning module responsible for parsing UPX compressed files that is still in limited use in some Symantec security...
Python Security Advisory PSF-2005-001 - SimpleXMLRPCServer.py
http://www.python.org/security/PSF-2005-001/ --------------------------------------------------------------------- Python Security Advisory Advisory ID: PSF-2005-001 Issue Date: February 3, 2005 Product: Python Versions: 2.2 all versions, 2.3 prior to 2.3.5, 2.4 CVE Names: CAN-2005-0089...
CVE-2005-0112
The web-based administrative interface for 3Com OfficeConnect Wireless 11g Access Point AP 1.00.08, and possibly earlier versions before 1.03.07A, allows remote attackers to bypass authentication and obtain sensitive information by directly accessing the 1 config.bin 2 profile.wlp?PN=ggg or 3...
CVE-2004-1474
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 uses a default read/write SNMP community string, which allows remote attackers to alter the firewall's configuration file...
CVE-2004-1791
The web management interface in Edimax AR-6004 ADSL Routers uses a default administrator name and password, which also appear as the default login text for the management interface, which allows remote attackers to gain access...
CVE-2004-1885
Ipswitch WSFTP Server 4.0.2 allows remote authenticated users to execute arbitrary programs as SYSTEM by using the SITE command to modify certain iFtpSvc options that are handled by iftpmgr.exe...