3574 matches found
CVE-2001-0133
CVE-2001-0133 affects Interscan VirusWall 3.6.x and earlier. The web administration interface reportedly does not use encryption, enabling remote attackers to obtain the administrator password by sniffing credentials sent during login or via setpasswd.cgi and other HTTP GET requests that transmit...
Two Holes in Sun Cluster 2.x
Hole 1 ------- Summary ------- Sun Cluster 2.x Sun Microsystems' commercial high-availability product for Solaris leaks potentially sensitive information to local or remote users. Specifics --------- In a standard Sun Cluster install, there is a service called clustmon that runs on port 12000. It...
CVE-2000-0278
The SalesLogix Eviewer allows remote attackers to cause a denial of service by accessing the URL for the slxweb.dll administration program, which does not authenticate the user...
CVE-2000-0068
daynad program in Intel InBusiness E-mail Station does not require authentication, which allows remote attackers to modify its configuration, delete files, or read mail...
CVE-2000-0058
Network HotSync program in Handspring Visor does not have authentication, which allows remote attackers to retrieve email and files...
CVE-2000-0068
daynad program in Intel InBusiness E-mail Station does not require authentication, which allows remote attackers to modify its configuration, delete files, or read mail...
Omnicron OmniHTTPd 1.1/2.4 Pro - Remote Buffer Overflow
// source: https://www.securityfocus.com/bid/739/info There is a remotely exploitable buffer overflow vulnerability in the CGI program "imagemap", which is distributed with Omnicron's OmniHTTPD. During operations made on arguments passed to the program, a lack of bounds checking on a strcpy call...
Hybrid Networks Cable Broadband Access System 1.0 - Remote Configuration
Hybrid Networks Cable Broadband Access System 1.0 - Remote Configuration source: https://www.securityfocus.com/bid/695/info Hybrid Network's cable modems are vulnerable to several different types of attack due to a lack of authentication for the remote administration/configuration system. The cab...
[SECURITY] Current versions of seyon may contain malicious code
One year ago, we have received a report from SGI that a vulnerability has been discovered in the seyon program which can lead to a root compromise. Any user who can execute the seyon program can exploit this vulnerability. However, the license of Seyon doesnt permit us to provide a fix, now is th...
trend.micro.interscan.ftp.proxy.txt
Date: Mon, 14 Jun 1999 17:47:17 -0400 From: "Lherisson, Karl C." To: [email protected] Subject: Possible Security Flaw in Trend Micro's InterScan FTP Proxy Hi my name is Karl C. Lherisson a network consultant at a securities firm. I am writing to inform you that I recently purchased Trend...
PT-1999-1049 · Novell · Laserfiche
Name of the Vulnerable Software and Affected Versions: Novell NetWare version of LaserFiche affected versions not specified Description: The issue concerns the storage of usernames and passwords in an unencrypted manner. Additionally, it allows administrative changes to be made without proper...
CVE-2024-31631
CVE-2024-31631 is rejected/not used per the initial description.