EUVD-2026-66980

If CodeMeter Runtime before 8.41a or 9.10 is configured as a server, the configuration command handler does not enforce network- origin restrictions. Commands intended only for local or same-network clients can therefore be executed by arbitrary remote peers. An attacker can read potentially...

CVE-2026-81573

CodeMeter Runtime versions before 8.41a or 9.10 are affected when configured as a server. The configuration command handler fails to enforce network-origin restrictions, allowing arbitrary remote peers to execute commands intended only for local or same-network clients. This enables reading sensi...

CVE-2002-2389

TheServer 1.74 web server stores server.ini under the web document root with insufficient access control, which allows remote attackers to obtain cleartext passwords and gain access to server log files...

CVE-2002-2389

The CVE-2002-2389 entry concerns TheServer 1.74 web server. The vulnerability arises from storing server.ini under the web document root with insufficient access control, enabling remote attackers to read cleartext passwords and access server log files. This is corroborated by multiple connected ...

TheServer clear text password

We were able to read the server.ini file It may contain sensitive information like clear text passwords. This flaw is known to affect TheServer. OpenVAS Vulnerability Test $Id: theservercleartext.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: TheServer clear text password Authors: Michel...

TheServer server.ini Direct Request Plaintext Credentials Disclosure

We were able to read the server.ini file. It may contain sensitive information like plaintext passwords. This flaw is known to affect TheServer. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. References: Date: Mon, 14 Oct 2002 14:50:02 -0400 EDT From: "Larry W. Cashdollar" To:...