4741 matches found
ATA-186 Password Disclosure Vulnerability
...
[Full-Disclosure] Cross Site Java applets
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cross-Site Java breaks Sandbox Isolation for Unsigned Applets ============================================================= Product : Java Plugin Version : 1.4.201 OS : Win32 should apply for other OSs too URL : http://java.sun.com Found by : Marc...
NFS Exported Share Information Disclosure
At least one of the NFS shares exported by the remote server could be mounted by the scanning host. An attacker may be able to leverage this to read and possibly write files on remote host. Note: Shares protected by an ACL that includes the IP of the Nessus host will not be tested. C Tenable...
Cisco VPN 5000 Client Multiple Vulnerabilities
...
CGI bugs
No description provided...
KPMG-2002018: Pointsec for PalmOS PIN disclosure
-------------------------------------------------------------------- Title: Pointsec for PalmOS PIN disclosure BUG-ID: 2002018 Released: 03rd May 2002 Discovered by: Laurens Binken, KPMG IRM, the Netherlands -------------------------------------------------------------------- Problem: ========...
Security Advisory for Bugzilla v2.15 (cvs20020103) and older
All users of Bugzilla, the bug-tracking system from mozilla.org, who are using a version of Bugzilla installed from a downloaded tarball or package file are strongly recommended to update to version 2.14.1. All users of Bugzilla who are currently using version 2.15 checked out of cvs prior to 15...
Проблемы с encrypted loop device под linux (data injection)
Данные предохраняются от несанкционированного доступа, но возможно несанкционированное добавление данных...
CVE-1999-1430
PIM software for Royal daVinci does not properly password-protext access to data stored in the .mdb Microsoft Access file, which allows local users to read the data without a password by directly accessing the files with a different application, such as Access...
Zope Image and File Update Data Protection Bypass
According to its banner, the remote web server is Zope 2.2.5. Such versions suffer from a security issue involving incorrect protection of a data updating method on Image and File objects. Because the method is not correctly protected, it is possible for users with DTML editing privileges to upda...
ISS SAVANT Advisory 00/26
Internet Security Systems SAVANT Windows 2000 Advisory No: 00/26 Dated: 10 May 2000 Platforms Affected: Windows 2000 Server Windows 2000 Professional Subject: Default configuration of SYSKEY permits compromise of Encrypting File System Summary: The Encrypting File System EFS permits files and...
hotmail.passwd.trap.txt
Date: Fri, 23 Apr 1999 13:55:24 -0500 From: David L. Nicol To: [email protected] Subject: javascript hotmail password trap Hello, I was informed this morning that a free form data mailer I maintain http://www.tipjar.com/generic.html was being involved in a javascript-based hotmail password...
ms-frame-spoof.txt
From: Microsoft Product Security Notification Service mailto:[email protected] On Behalf Of Microsoft Product Security Sent: Wednesday, December 23, 1998 9:51 AM To: [email protected] Subject: Microsoft Security Bulletin MS98-020 The following is a...
Update Rollup 7 for System Center 2012 R2 - Data Protection Manager (KB3065246)
Update Rollup 7 for System Center 2012 R2 - Data Protection Manager KB3065246...
Update Rollup 8 for System Center 2016 - Data Protection Manager (KB4511102)
Update Rollup 8 for System Center 2016 - Data Protection Manager KB4511102...