EUVD-2004-2494

Malware in sbrugna...

EUVD-2002-2366

Malware in sbrugna...

CVE-2002-2388

Buffer overflow in INweb POP3 mail server 2.01 allows remote attackers to cause a denial of service crash via a long HELO command...

CVE-2024-12564

Exposure of Sensitive Information to an Unauthorized Actor vulnerability was discovered in Open Design Alliance CDE inWEB SDK before 2025.3. Installing CDE Server with default settings allows unauthorized users to visit prometheus metrics page. This can allow attackers to understand more things...

CVE-2024-12564 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ODA CDE inWEB SDK before 2025.3

Exposure of Sensitive Information to an Unauthorized Actor vulnerability was discovered in Open Design Alliance CDE inWEB SDK before 2025.3. Installing CDE Server with default settings allows unauthorized users to visit prometheus metrics page. This can allow attackers to understand more things...

CVE-2024-12564

CVE-2024-12564 affects Open Design Alliance CDE inWEB SDK prior to 2025.3. The vulnerability arises from default CDE Server settings that allow unauthorized users to access the Prometheus metrics page, exposing information about the target application. Impact is described as exposure of sensitive...

CVE-2024-12564 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ODA CDE inWEB SDK before 2025.3

Exposure of Sensitive Information to an Unauthorized Actor vulnerability was discovered in Open Design Alliance CDE inWEB SDK before 2025.3. Installing CDE Server with default settings allows unauthorized users to visit prometheus metrics page. This can allow attackers to understand more things...

Open Design Alliance CDE inWEB SDK 安全漏洞

Open Design Alliance CDE inWEB SDK is an application organized by the Open Design Alliance ODA. Web application for editing, creating and viewing DWGs. A security vulnerability exists in versions of the Open Design Alliance CDE inWEB SDK prior to 2025.3, which arises from the installation of CDE...

CVE-2002-2388

The vulnerability CVE-2002-2388 affects INweb POP3 mail server 2.01. The root cause is a buffer overflow triggered by a long HELO command, allowing remote attackers to cause a denial of service (crash). This is described in the CVE entry and corroborated by Red Hat and CVE records. No remediation...

CVE-2002-2388

Buffer overflow in INweb POP3 mail server 2.01 allows remote attackers to cause a denial of service crash via a long HELO command...

adv45-K-159-2006.txt

ECHOADV45$2006 ----------------------------------------------------------------------------------------- ECHOADV45$2006 WEBinsta CMS 0.3.1 templatesdir Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran...

[ECHO_ADV_45$2006] WEBinsta CMS 0.3.1 (templates_dir) Remote File Inclusion Vulnerability

ECHOADV45$2006 ----------------------------------------------------------------------------------------- ECHOADV45$2006 WEBinsta CMS 0.3.1 templatesdir Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran...

CVE-2004-2503

INweb Mail Server 2.40 allows remote attackers to cause a denial of service crash via a large number of connect/disconnect actions to the 1 POP3 and 2 SMTP services...

CVE-2004-2503

INweb Mail Server 2.40 is affected. The issue allows remote attackers to cause a denial of service (crash) by a large number of connect/disconnect actions to the POP3 and SMTP services. The provided sources do not detail root cause or a patch; exploitation info is not stated. Remediation details ...

CVE-2004-2503

INweb Mail Server 2.40 allows remote attackers to cause a denial of service crash via a large number of connect/disconnect actions to the 1 POP3 and 2 SMTP services...

CVE-2002-2388

Buffer overflow in INweb POP3 mail server 2.01 allows remote attackers to cause a denial of service crash via a long HELO command...

INwebMailServer.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: MD5 - -- INweb Mail Server v2.01 Denial of Service Vulnerability -- - -- Type Denial of Service - -- Release Date November 12, 2002 - -- Product / Vendor The INweb Mail Server is a standard Internet POP3 and SMTP mail server that runs flawlessly under...

[SecurityOffice] INweb Mail Server v2.01 Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: MD5 - -- INweb Mail Server v2.01 Denial of Service Vulnerability -- - -- Type Denial of Service - -- Release Date November 12, 2002 - -- Product / Vendor The INweb Mail Server is a standard Internet POP3 and SMTP mail server that runs flawlessly under...

INweb Mail Server buffer overflow

Buffer overflow on oversized string...