CVE-2003-0499

Mantis 0.17.5 and earlier stores its database password in cleartext in a world-readable configuration file, which allows local users to perform unauthorized database operations...

[SECURITY] [DSA 288-1] New OpenSSL packages fix decipher vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 288-1 [email protected] http://www.debian.org/security/ Martin Schulze April 17th, 2003 http://www.debian.org/security/faq -...

CVE-2002-1442

The Google toolbar 1.1.58 and earlier allows remote web sites to perform unauthorized toolbar operations including script execution and file reading in other zones such as "My Computer" by opening a window to tools.google.com or the res: protocol, then using script to modify the window's location...

CVE-2001-1383

CVE-2001-1383 affects the initscript in setserial 2.17-4 and earlier, where it creates predictable temporary file names. This could allow local users to perform unauthorized operations on files. The Connected documents confirm the same description across CVE lists and NVD records, with no provide...

CVE-2001-1383: Undefined Security Weakness

initscript in setserial 2.17-4 and earlier uses predictable temporary file names, which could allow local users to conduct unauthorized operations on files...

Important: Red Hat Security Advisory: : Updated OpenSSL packages fix vulnerabilities

Updated OpenSSL packages are available that fix a potential timing-based attack and a modified Bleichenbacher attack. OpenSSL is a commercial-grade, full-featured, and open source toolkit that implements Secure Sockets Layer SSL v2/v3 and Transport Layer Security TLS v1 protocols as well as a...

CVE-2002-1442

Affected product: Google Toolbar (IE) up to version 1.1.58 and earlier. Vulnerability: remote sites could trigger unauthorized toolbar operations, including script execution and file reading in other zones (e.g., My Computer) by opening a window to tools.google.com or the res: protocol and then u...

CVE-2002-1442

The Google toolbar 1.1.58 and earlier allows remote web sites to perform unauthorized toolbar operations including script execution and file reading in other zones such as "My Computer" by opening a window to tools.google.com or the res: protocol, then using script to modify the window's location...

CVE-2002-0961

Vulnerabilities in Voxel Dot Net CBMS 0.7 and earlier allow remote attackers to conduct unauthorized operations as other users, e.g. by deleting clients via dltclnt.php, possibly in a SQL injection attack...

CVE-2002-0961

The CVE-2002-0961 entry concerns Voxel Dot Net CBMS 0.7 and earlier. Affected software: Voxel Dot Net CBMS (0.7 and earlier). Vulnerability: remote attackers may perform unauthorized operations as other users, for example deleting clients via dltclnt.php, with potential SQL injection in play. Roo...

CVE-2002-0961: Undefined Security Weakness

Vulnerabilities in Voxel Dot Net CBMS 0.7 and earlier allow remote attackers to conduct unauthorized operations as other users, e.g. by deleting clients via dltclnt.php, possibly in a SQL injection attack...

CVE-2001-1348

TWIG 2.6.2 and earlier allows remote attackers to perform unauthorized database operations via a SQL injection attack on the id parameter...

CVE-2001-1265

CVE-2001-1265 concerns a directory traversal vulnerability in IBM alphaWorks Java TFTP server 1.21. The issue allows remote attackers to perform unauthorized operations on arbitrary files using a .. (dot dot) path traversal technique. The CVSS vector from NVD indicates a network-accessible, low-c...

CVE-2001-1265: Undefined Security Weakness

Directory traversal vulnerability in IBM alphaWorks Java TFTP server 1.21 allows remote attackers to conduct unauthorized operations on arbitrary files via a .. dot dot attack...

CVE-2001-0665

Affected product: Internet Explorer 6 and earlier. Vulnerability: HTTP Request Encoding allows remote attackers to trigger what look like user-originated HTTP requests, potentially enabling privilege escalation or execution of operations in web-based services. Root cause: encoding flaw in HTTP re...