Macromedia ColdFusion MX CFIDE/probe.cfm Direct Request Path Disclosure

A vulnerability has been reported for Macromedia ColdFusion MX that may reveal the physical path information to attackers. When certain malformed URL requests port 8500 are received by the server, an error message is returned containing the full path of the ColdFusion installation. %NASLMINLEVEL...

Guestbook tr3.a Password Disclosure

The remote install of Guestbook tr3.a fails to restrict access to its password file. An unauthenticated, remote attacker can leverage this issue to gain control of the affected application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Ref: Message-ID: From: subj To:...

Ipswitch IMail Web Interface URI Referer Session Token Disclosure

The remote host is running IMail web interface. In this version, the session is maintained via the URL. It will be disclosed in the Referer field if you receive an email with external links e.g. images %NASLMINLEVEL 70300 C Tenable Network Security, Inc. References: http://www.nessus.org/u?fd6d15...

CVE-2001-0303

tstisapi.dll in Pi3Web 1.0.1 web server allows remote attackers to determine the physical path of the server via a URL that requests a non-existent file...

Finger 0@host Unused Account Disclosure

The remote host is running a 'finger' service that suffers from an information disclosure vulnerability. Specifically, it allows an unauthenticated attacker to display a list of accounts on the remote host that have never been used. This list can help an attacker to guess the operating system typ...

CVE-2025-49822

...

CVE-2025-4209

This CVE entry is rejected by its CVE Numbering Authority and does not represent an active vulnerability entry.

CVE-2024-23854

...

CVE-2021-41008

...

CVE-2024-21714

...

CVE-2022-25997

...