Oracle 9iAS allows access to CGI script source code within CGI-BIN directory

Overview Oracle 9i Application Server 9iAS allows remote anonymous users to view source code in CGI scripts stored in the Apache cgi-bin. Attackers may analyze these scripts to discover usernames, passwords, or other proprietary data or methods. Description The default Apache configuration file i...

Утечка данных из RealServer

При обращении по URL вида http://targetserver/admin/includes/ сервер выдает данные из оперативной памяти, которые могут содержать важную информацию...

CVE-2000-0382

ColdFusion ClusterCATS appends stale query string arguments to a URL during HTML redirection, which may provide sensitive information to the redirected site...

INFO:AppleShare IP 6.3.2 squashes security bug

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 AppleShare IP Web & File 6.3.2 fixes a potential security problem in the Web server in versions of AppleShare IP 6.1 and later. When an invalid range request is made to the Web server by a client computer, the Web server can return an extra 32 kilobyt...

CVE-1999-0604

The CVE-1999-0604 entry refers to an incorrect configuration in the WebStore 1.0 shopping cart CGI program (web_store.cgi) that could disclose private information. Connected sources (Red Hat CVE page, CVE lists, EUVD entry) corroborate the same description. No patches or remediation details are p...

CVE-1999-0605

Technical details for CVE-1999-0605 are not publicly available in the provided documents. Monitor for updates.

Security Update for SQL Server 2017 RTM GDR (KB4494351)

An information disclosure vulnerability exists in Microsoft SQL Server Analysis Services if it incorrectly enforces metadata permissions. An attacker could exploit the vulnerability if the attacker's credentials allow access to an affected Analysis Services database. This security update fixes a...