Lucene search
+L

211 matches found

securityvulns
securityvulns
added 2005/01/25 12:00 a.m.38 views

Spectrum Cash passwords weak encryption

Passwords are limited in character set and length and are sored with symbol substitution encryption...

1.9AI score
SaveExploits0References1Affected Software1
CVE
CVE
added 2005/01/19 5:00 a.m.81 views

CVE-2004-1362

CVE-2004-1362 affects the PL/SQL module of the Oracle HTTP Server in Oracle Application Server 10g when using the WE8ISO8859P1 character set. The issue is a character conversion flaw that allows remote attackers to bypass access restrictions for certain procedures via an encoded URL containing “%...

7.5CVSS9.2AI score0.0905EPSS
SaveExploits0References8Affected Software9
NVD
NVD
added 2004/11/03 5:00 a.m.29 views

CVE-2004-0844

Internet Explorer 6 on Double Byte Character Set DBCS systems allows remote attackers to alter displayed address bars and spoof web pages via a URL containing special characters, facilitating phishing attacks, aka the "Address Bar Spoofing on Double Byte Character Set Systems Vulnerability."...

5CVSS6.5AI score0.32759EPSS
SaveExploits0References9
Cvelist
Cvelist
added 2004/10/16 4:00 a.m.54 views

CVE-2004-0844

Internet Explorer 6 on Double Byte Character Set DBCS systems allows remote attackers to alter displayed address bars and spoof web pages via a URL containing special characters, facilitating phishing attacks, aka the "Address Bar Spoofing on Double Byte Character Set Systems Vulnerability."...

7.5AI score0.32759EPSS
SaveExploits0References9
CERT
CERT
added 2004/10/13 12:00 a.m.37 views

Microsoft Internet Explorer vulnerable to address bar spoofing on double byte character set systems

Overview Microsoft Internet Explorer contains a vulnerability in how it processes URLs on Double Byte Character Set DBCS systems. This could allow an attacker to spoof the address of a web site. Description Microsoft Internet Explorer contains a canonicalization error when it parses special...

5CVSS7.2AI score0.32759EPSS
SaveExploits0References2
exploitpack
exploitpack
added 2004/08/04 12:00 a.m.63 views

Oracle 9i - Multiple Vulnerabilities

Oracle 9i - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/10871/info Reportedly, multiple unspecified Oracle products contain multiple unspecified vulnerabilities. The reported vulnerabilities include SQL-injection issues, buffer-overflow issues, and others. There have also...

8.5CVSS0.8AI score0.13782EPSS
SaveExploits9
Exploit DB
Exploit DB
added 2004/08/04 12:00 a.m.65 views

Oracle 9i - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/10871/info Reportedly, multiple unspecified Oracle products contain multiple unspecified vulnerabilities. The reported vulnerabilities include SQL-injection issues, buffer-overflow issues, and others. There have also been reports that issues covered in th...

8.5CVSS5.8AI score0.13782EPSS
SaveExploits9
CERT
CERT
added 2003/08/26 12:00 a.m.44 views

Microsoft Internet Explorer contains buffer overflow in Type attribute of OBJECT element on double-byte character set systems

Overview Certain versions of Microsoft Internet Explorer IE that support double-byte character sets DBCS contain a buffer overflow vulnerability in the Type attribute of the OBJECT element. A remote attacker could execute arbitrary code with the privileges of the user running IE. Description...

7.7AI score
SaveExploits0References5
securityvulns
securityvulns
added 2003/08/21 12:00 a.m.35 views

[NT] Internet Explorer Object Type Buffer Overflow in Double-Byte Character Set Environment

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

1.4AI score
SaveExploits0
securityvulns
securityvulns
added 2002/11/27 12:00 a.m.39 views

OpenVMS weak passwords

Llimit character set, case insensitivity and fast encryption algorythm allow password bruteforcing...

2.7AI score
SaveExploits0References1
Packet Storm
Packet Storm
added 2000/10/17 12:00 a.m.34 views

iis-unicode.txt

Recently I received an email from Par Osterberg that directed my attention to a post in the Packetstorm forums: http://209.143.242.119/cgi-bin/cbmc/forums.cgi?authkey=anonymous&uname=anonymous&datopic=Windows&mesgcheck=defined&gum=474&editoron= An anonymous person posts that they can run arbitrar...

0.1AI score
SaveExploits0
Rows per page
Query Builder