787 matches found
CVE-2002-1947
Webmin 0.21–1.0 uses the same built-in SSL key across installations, allowing remote attackers to eavesdrop on or hijack SSL sessions. The root cause is the shared SSL key across deployments. No remediation or patch details are provided in the connected documents.
Microsoft Windows NT 4.0/2000 Predictable LPC Message Identifier - Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/1748/info LPC Local Procedure Call is a message-passing service that allows threads and processes to communicate with each other on a local machine as opposed to RPC Remote Procedure Call that takes place between different hosts. The structure of a messag...
Microsoft Windows NT 4.02000 Predictable LPC Message Identifier - Multiple Vulnerabilities
Microsoft Windows NT 4.02000 Predictable LPC Message Identifier - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/1748/info LPC Local Procedure Call is a message-passing service that allows threads and processes to communicate with each other on a local machine as opposed to RP...
RUS-CERT Advisory 200004-01: GNU Emacs 20
RUS-CERT Advisory 200004-01: GNU Emacs 20 RUS-CERT, University of Stuttgart 2000-04-18 Summary Several vulnerabilities were discovered in all Emacs versions up to 20.6, namely: Under certain circumstances, unprivileged local users can eavesdrop the communication between Emacs and its subprocesses...
macof.sniff.dos.switched.txt
Date: Wed, 5 May 1999 09:15:25 +0100 From: [email protected] To: [email protected] Subject: Infosec.19990305.macof.a Infosec Security Vulnerability Report No: Infosec.19990305.macof.a ===================================== Vulnerability Summary --------------------- Problem: Due to limitatio...
CVE-2022-32510
An issue was discovered on certain Nuki Home Solutions devices. The HTTP API exposed by a Bridge used an unencrypted channel to provide an administrative interface. A token can be easily eavesdropped by a malicious actor to impersonate a legitimate user and gain access to the full set of API...
Weak authentication in ATT VNC
Advisory ID Internal CORE-21011501 Advisory ID: CORE-2001011501 Bugtraq ID: 2275 CVE Name: None currently assigned. Title: Weak authentication in ATT VNC Class: Design error Remotely Exploitable: yes Locally Exploitable: no Release Mode: USER RELEASE Vulnerability Description: As stated in the VN...