CVE-2002-0770

Quake 2 Q2 server 3.20 and 3.21 allows remote attackers to obtain sensitive server cvar variables, obtain directory listings, and execute Q2 server admin commands via a client that does not expand "$" macros, which causes the server to expand the macros and leak the information, as demonstrated...

Information leak in Oracle Reports Server

It's possible to obtain system data...

CVE-2002-0524

The CVE-2002-0524 entry affects ASP-Nuke RC2 and earlier . The vulnerability arises from error messages that disclose the server’s absolute path when attackers trigger two conditions: (1) calling database-inc.asp with incorrect cookies, or (2) calling Post.asp with certain arguments. This results...

CVE-2002-0409

CVE-2002-0409 involves an issue in orderdetails.aspx used as example code for Microsoft .NET developers, where an attacker can view other users’ orders by tampering the OrderID parameter. The description from NVD/CVE records states that remote attackers can access another user’s orders due to the...

CVE-2001-0327

The CVE-2001-0327 issue affects iPlanet Web Server Enterprise Edition 4.1 and earlier. It is an information-disclosure vulnerability in which a remote attacker can exploit a crafted URL-encoded Host: header in HTTP requests, causing the server to reveal data from memory in the Location: header. R...

CVE-1999-1259

Technical details about CVE-1999-1259 are not publicly available in the provided documents beyond the high-level description of Office 98 disk space handling; monitor for updates.

CVE-1999-1188

The CVE affects MySQL 3.21, where mysqld creates log files with world-readable permissions. This exposes passwords for newly created users to local users who can read those logs. The issue is a local-privilege-information-disclosure risk due to improper file permissions, allowing exposure of sens...

Cisco Security Advisory: Data Leak with Cisco Express Forwarding

-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: Data Leak with Cisco Express Forwarding Enabled Revision 1.0 For Public Release 2002 February 27 08:00 UTC -0800 - -------------------------------------------------------------------------- Summary ======= All Cisco devices running Cisco...

Data Leak with Cisco Express Forwarding Enabled

...

Oracle 9iAS allows access to CGI script source code within CGI-BIN directory

Overview Oracle 9i Application Server 9iAS allows remote anonymous users to view source code in CGI scripts stored in the Apache cgi-bin. Attackers may analyze these scripts to discover usernames, passwords, or other proprietary data or methods. Description The default Apache configuration file i...

Утечка данных из RealServer

При обращении по URL вида http://targetserver/admin/includes/ сервер выдает данные из оперативной памяти, которые могут содержать важную информацию...

CVE-2000-0382

ColdFusion ClusterCATS appends stale query string arguments to a URL during HTML redirection, which may provide sensitive information to the redirected site...

INFO:AppleShare IP 6.3.2 squashes security bug

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 AppleShare IP Web & File 6.3.2 fixes a potential security problem in the Web server in versions of AppleShare IP 6.1 and later. When an invalid range request is made to the Web server by a client computer, the Web server can return an extra 32 kilobyt...

CVE-1999-0605

Technical details for CVE-1999-0605 are not publicly available in the provided documents. Monitor for updates.

CVE-1999-0604

The CVE-1999-0604 entry refers to an incorrect configuration in the WebStore 1.0 shopping cart CGI program (web_store.cgi) that could disclose private information. Connected sources (Red Hat CVE page, CVE lists, EUVD entry) corroborate the same description. No patches or remediation details are p...

CVE-2023-40149

CVE-2023-40149 is rejected as Unused by its CNA and does not represent an active vulnerability entry.

Security Update for SQL Server 2017 RTM GDR (KB4494351)

An information disclosure vulnerability exists in Microsoft SQL Server Analysis Services if it incorrectly enforces metadata permissions. An attacker could exploit the vulnerability if the attacker's credentials allow access to an affected Analysis Services database. This security update fixes a...