Lucene search
+L

3699 matches found

Cvelist
Cvelist
•added 2002/07/15 4:00 a.m.•35 views

CVE-2002-0675

Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not require administrative privileges to perform a firmware upgrade, which allows unauthorized users to upgrade the phone...

6.6AI score0.00351EPSS
SaveExploits0References4
CVE
CVE
•added 2002/07/15 4:00 a.m.•72 views

CVE-2002-0670

The CVE-2002-0670 issue affects Pingtel xpressa SIP phones (software versions 1.2.5–1.2.7.4). The web interface uses HTTP Basic authentication with Base64-encoded credentials, allowing remote attackers to sniff and decode usernames/passwords in transit. Documents confirm the risk is tied to unenc...

7.5CVSS6.8AI score0.01635EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2002/07/15 4:00 a.m.•53 views

CVE-2002-0675

The CVE affects Pingtel xpressa SIP phones (model PX-1) with software versions 1.2.5–1.2.7.4. The root cause is that firmware upgrades can be performed without administrative privileges, enabling an unauthorized user to upgrade the phone. The accompanying @stake advisory details multiple vulnerab...

4.6CVSS6.6AI score0.00351EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2002/07/15 12:00 a.m.•6 views

CVE-2002-0675: Undefined Security Weakness

Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not require administrative privileges to perform a firmware upgrade, which allows unauthorized users to upgrade the phone...

4.6CVSS5.8AI score0.00351EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2002/07/15 12:00 a.m.•9 views

CVE-2002-0670: Undefined Security Weakness

The web interface for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 uses Base64 encoded usernames and passwords for HTTP basic authentication, which allows remote attackers to steal and easily decode the passwords via sniffing...

7.5CVSS5.9AI score0.01635EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2002/07/15 12:00 a.m.•8 views

CVE-2002-0667: Undefined Security Weakness

Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 has a default null administrator password, which could allow remote attackers to gain access to the phone...

10CVSS5.8AI score0.02615EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2002/06/25 12:00 a.m.•12 views

CVE-2002-0028: Undefined Security Weakness

Buffer overflow in ICQ before 2001B Beta v5.18 Build 3659 allows remote attackers to execute arbitrary code via a Voice Video & Games request...

7.5CVSS6.5AI score0.05271EPSS
SaveExploits0References1
exploitpack
exploitpack
•added 2002/05/09 12:00 a.m.•32 views

Cisco ATA-186 - HTTP Device Configuration Disclosure

Cisco ATA-186 - HTTP Device Configuration Disclosure source: https://www.securityfocus.com/bid/4711/info The Cisco ATA-186 Analog Telephone Adapter is a hardware device designed to interface between analog telephones and Voice over IP VoIP. It includes support for web based configuration...

7.4AI score
SaveExploits0
Cvelist
Cvelist
•added 2002/03/09 5:00 a.m.•35 views

CVE-1999-1167

Cross-site scripting vulnerability in Third Voice Web annotation utility allows remote users to read sensitive data and generate fake web pages for other Third Voice users by injecting malicious Javascript into an annotation...

6.2AI score0.02285EPSS
SaveExploits0References3
CVE
CVE
•added 2002/03/09 5:00 a.m.•61 views

CVE-1999-1167

CVE-1999-1167 describes a Cross-site scripting vulnerability in the Third Voice Web annotation utility. The issue allows remote attackers to read sensitive data and generate fake web pages for other Third Voice users by injecting malicious JavaScript into an annotation. Affected component is the ...

6.4CVSS6.5AI score0.02285EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2002/03/09 12:00 a.m.•8 views

CVE-1999-1167: Undefined Security Weakness

Cross-site scripting vulnerability in Third Voice Web annotation utility allows remote users to read sensitive data and generate fake web pages for other Third Voice users by injecting malicious Javascript into an annotation...

6.4CVSS5.8AI score0.02285EPSS
SaveExploits0References1
CERT
CERT
•added 2002/01/15 12:00 a.m.•47 views

ICQ contains a buffer overflow while processing Voice Video & Games feature requests

Overview There is a remotely exploitable buffer overflow in ICQ. Attackers that are able to exploit the vulnerability may be able to execute arbitrary code with the privileges of the victim user. Description ICQ is a program for communicating with other users over the Internet. ICQ is widely used...

7.5CVSS6AI score0.05271EPSS
SaveExploits0References2
NVD
NVD
•added 1999/12/31 5:00 a.m.•24 views

CVE-1999-1167

Cross-site scripting vulnerability in Third Voice Web annotation utility allows remote users to read sensitive data and generate fake web pages for other Third Voice users by injecting malicious Javascript into an annotation...

6.4CVSS6.2AI score0.02285EPSS
SaveExploits0References3
Packet Storm
Packet Storm
•added 1999/08/17 12:00 a.m.•36 views

iParty.daemon.DoS.txt

Date: Sat, 08 May 1999 13:11:34 EDT From: wh00t X To: [email protected] Cc: [email protected], [email protected] Subject: iParty Daemon Vulnerability w/ Exploit Code worse than thought? Hi, iParty, by Intel Experimental Technologies Department, unofficial information source a...

7.4AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
•added 1970/01/01 12:00 a.m.•12 views

Update for Office Communications Server 2007 R2, Outside Voice Control (KB 980372)

This Package fixes issues described in KB Article 980372...

2.9AI score
SaveExploits0
Microsoft KB
Microsoft KB
•added 1970/01/01 12:00 a.m.•28 views

Security update 1970-01-01

...

5.3AI score
SaveExploits0
Microsoft KB
Microsoft KB
•added 1970/01/01 12:00 a.m.•25 views

Security update 1970-01-01

...

5.3AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
•added 1970/01/01 12:00 a.m.•13 views

Detectoid for Microsoft Office Communications Server 2007 R2, Outside Voice Control

Detectoid for Microsoft Office Communications Server 2007 R2, Outside Voice Control...

2.6AI score
SaveExploits0
Microsoft KB
Microsoft KB
•added 1970/01/01 12:00 a.m.•171 views

Security update 1970-01-01

...

5.3AI score
SaveExploits0
Rows per page
Query Builder