CVE-2007-3871

Stampit Web uses guessable id values for online stamp purchases, which allows remote attackers to cause a denial of service stamp invalidation via a SOAP request with an id value for a stamp that has not yet been printed...

Code injection

Stampit Web uses guessable id values for online stamp purchases, which allows remote attackers to cause a denial of service stamp invalidation via a SOAP request with an id value for a stamp that has not yet been printed...

CVE-2007-3871

Stampit Web uses guessable id values for online stamp purchases, which allows remote attackers to cause a denial of service stamp invalidation via a SOAP request with an id value for a stamp that has not yet been printed...

CVE-2006-6756

The code function in install.fct.php in Ixprim 1.2 produces a guessable value of the confidential IXPCODE in mainfile.php, which might allow remote attackers to gain access to the administration panel via a brute force attack...

Session fixation

claroinitlocal.inc.php in Claroline 1.7.2 uses guessable session cookies MD5 hash of connection time, which allows remote attackers to hijack sessions and possibly gain administrative privileges...

Weaknesses in MIT magic cookie and XDM X Windows authorization

Overview MIT magic cookie and XDM authorization contain vulnerabilities that could allow remote attackers to connect to X displays. Description Two widely used X Window System authorization schemes have weaknesses in their sample implementations. MIT-MAGIC-COOKIE-1 On some systems built without t...

DSA-152 l2tpd - missing random seed

Bulletin has no description...

CVE-2001-0972

Surf-Net ASP Forum before 2.30 uses easily guessable cookies based on the UserID, which allows remote attackers to gain administrative privileges by calculating the value of the admin cookie UserID 1, i.e. "0888888."...

CVE-2001-0972

The CVE-2001-0972 entry concerns Surf-Net ASP Forum prior to version 2.30, where admin cookies are derived from the UserID and are easily guessable (example: admin cookie for UserID 1 is “0888888”). This creates a remote‑attack risk: a attacker could calculate the admin cookie and gain administra...

SpeedXess.txt

SpeedXess HASE-120IPOA Router Default password vulnerability by Secret [email protected] WOWHACKER: http://www.wowhacker.com -=Content=- Too many routers are exposed to default password problem, so I write this for the security of router. This is not for attack but security. I came to know many...

CVE-2001-0972

Surf-Net ASP Forum before 2.30 uses easily guessable cookies based on the UserID, which allows remote attackers to gain administrative privileges by calculating the value of the admin cookie UserID 1, i.e. "0888888."...

Voyant Technologies Sonata conferencing vulnerabilties.

Please Release Vulnerability Report For Voyant Technologies Sonata Conferencing product. Larry W. Cashdollar Vapid Labs Date Published: 11/07/2000 Advisory ID: 10132000-01 CVE CAN: None currently assigned. Title: Multiple Vulnerabilities found in Sonata teleconferencing Application. Class: Design...

CVE-2000-0384

NetStructure 7110 and 7180 have undocumented accounts servnow, root, and wizard whose passwords are easily guessable from the NetStructure's MAC address, which could allow remote attackers to gain root access...

Microsoft Windows SMB Guessable User Credentials

This script attempts to log into the remote host using several login / password combinations. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10404; scriptversion"1.63"; scriptsetattributeattribute:"pluginmodificationdate", value:"2020/04/27";...

CVE-2000-0384

NetStructure 7110 and 7180 have undocumented accounts servnow, root, and wizard whose passwords are easily guessable from the NetStructure's MAC address, which could allow remote attackers to gain root access...

CVE-1999-0699

The Bluestone Sapphire web server allows session hijacking via easily guessable session IDs...

CVE-1999-0505

CVE-1999-0505 affects Windows NT domain accounts where a guessable password enables local access. The NVD entry lists a LOCAL attack vector with LOW complexity, and NULL authentication, yielding complete confidentiality, integrity, and availability impact. Connected Red Hat/NVD records reiterate ...

CVE-1999-0503

CVE-1999-0503 concerns a Windows NT local user or administrator account with a guessable password. Connected sources corroborate that the issue enables basic local account compromise due to weak credentials (no explicit patch/version details provided in the documents). CVSS metrics in the initial...

CVE-1999-0505

A Windows NT domain user or administrator account has a guessable password...

CVE-1999-0507

CVE-1999-0507 describes a guessable password on an account of a network device (e.g., routers, firewalls). Connected OpenVAS entries show multiple checks for default or weak credentials (e.g., Cisco devices with default Telnet/SSH credentials), confirming that remote login could be possible when ...