CVE-2002-1946

Videsh Sanchar Nigam Limited VSNL Integrated Dialer Software 1.2.000, when the "Save Password" option is used, stores the password with a weak encryption scheme one-to-one mapping in a registry key, which allows local users to obtain and decrypt the password...

CVE-2002-1946: Inadequate Encryption Strength

Videsh Sanchar Nigam Limited VSNL Integrated Dialer Software 1.2.000, when the "Save Password" option is used, stores the password with a weak encryption scheme one-to-one mapping in a registry key, which allows local users to obtain and decrypt the password...

CVE-2005-1605

Cross-site scripting XSS vulnerability in the guestbook for SiteStudio 1.6 allows remote attackers to inject arbitrary web script or HTML via the name field to 1 psoft.guestbook.GuestBookServ in Standalone Site Studio or 2 E-Guestsign.pl in Integrated Site Studio with H-Sphere...

FreeBSD-SA-05:06.iir

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-05:06.iir Security Advisory The FreeBSD Project Topic: Incorrect permissions on /dev/iir Category: core Module: sysdev Announced: 2005-05-06 Credits: Christian...

CVE-2004-0945: Undefined Security Weakness

The web management interface for Mitel 3300 Integrated Communications Platform ICP before 4.2.2.11 allows remote authenticated users to cause a denial of service resource exhaustion via a large number of active sessions, which exceeds ICP's maximum...

CVE-2004-0944: Undefined Security Weakness

The web management interface for Mitel 3300 Integrated Communications Platform ICP before 4.2.2.11 generates easily predictable web session IDs, which allows remote attackers to hijack other sessions via the parentsessionid cookie...

CVE-2004-0525

HP Integrated Lights-Out iLO 1.10 and other versions before 1.55 allows remote attackers to cause a denial of service hang by accessing iLO using the TCP/IP reserved port zero...

CVE-2004-0525

HP Integrated Lights-Out iLO 1.10 and other versions before 1.55 allows remote attackers to cause a denial of service hang by accessing iLO using the TCP/IP reserved port zero...

CVE-2004-0525: Undefined Security Weakness

HP Integrated Lights-Out iLO 1.10 and other versions before 1.55 allows remote attackers to cause a denial of service hang by accessing iLO using the TCP/IP reserved port zero...

Witango & Tango 2000 Application Server Remote System Buffer Overrun

NGSSoftware Insight Security Research Advisory Name: WiTango Application Server & Tango 2000 Systems Affected: Windows Severity: Critical Risk Category: Remote System Buffer Overrun Vendor URL: http://www.witango.com Author: Mark Litchfield [email protected] Date: 18th July 2003 Advisory numbe...

CVE-2002-1946

Videsh Sanchar Nigam Limited VSNL Integrated Dialer Software 1.2.000, when the "Save Password" option is used, stores the password with a weak encryption scheme one-to-one mapping in a registry key, which allows local users to obtain and decrypt the password...

PT-2002-2667 · Videsh Sanchar Nigam Limited · Vsnl Integrated Dialer

Name of the Vulnerable Software and Affected Versions: Videsh Sanchar Nigam Limited VSNL Integrated Dialer Software version 1.2.000 Description: The issue concerns the storage of passwords using a weak encryption scheme, specifically a one-to-one mapping, in a registry key when the "Save Password...

CVE-2002-0883

Vulnerability in Compaq ProLiant BL e-Class Integrated Administrator 1.0 and 1.10, allows authenticated users with Telnet, SSH, or console access to conduct unauthorized activities...

CVE-2002-0883

The CVE-2002-0883 entry describes a vulnerability in Compaq ProLiant BL e-Class Integrated Administrator 1.0 and 1.10. Authenticated users with Telnet, SSH, or console access can perform unauthorized activities, with full impact on confidentiality, integrity, and availability per CVSS v2. No expl...

CVE-2002-0883: Undefined Security Weakness

Vulnerability in Compaq ProLiant BL e-Class Integrated Administrator 1.0 and 1.10, allows authenticated users with Telnet, SSH, or console access to conduct unauthorized activities...

CVE-2001-0929: Undefined Security Weakness

Cisco IOS Firewall Feature set, aka Context Based Access Control CBAC or Cisco Secure Integrated Software, for IOS 11.2P through 12.2T does not properly check the IP protocol type, which could allow remote attackers to bypass access control lists...

Microsoft SQL Server and Microsoft Data Engine (MSDE) ship with a null default password

Overview Microsoft SQL Server and Microsoft Data Engine ship with a null default password on the administrative account sa. If the system administrator does not set the password, the system may be vulnerable to attack. Description Microsoft SQL Server MS SQL and Microsoft Data Engine MSDE ship...

CVE-2000-1241: Undefined Security Weakness

Unspecified vulnerability in Haakon Nilsen simple, integrated publishing system SIPS before 0.2.4 has an unknown impact and attack vectors, related to a "grave security fault."...

Переполнение буфера в Filo

Классическое переполнение буфера при длинном GET-запросе ко встроенному прокси-серверу...

PT-2009-6739

Name of the Vulnerable Software and Affected Versions OpenSSL versions prior to 0.9.8l GnuTLS versions prior to 2.8.5 Apache HTTP Server versions prior to 2.2.14 Microsoft Internet Information Services IIS 7.0 OpenVPN versions prior to 2.3.1 Mozilla Network Security Services NSS versions prior to...