291 matches found
CVE-2003-1213: Undefined Security Weakness
The default installation of MaxWebPortal 1.30 stores the portal database under the web document root with insecure access control, which allows remote attackers to obtain sensitive information via a direct request to database/db2000.mdb...
CVE-2004-1786: Undefined Security Weakness
PortalApp places user credentials under the web root with insufficient access control, which allows remote attackers to gain access to sensitive information via a direct request to 8275.mdb...
CVE-2005-1425: Undefined Security Weakness
Uapplication Uguestbook 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for mdb-database/guestbook.mdb...
CVE-2005-1426: Undefined Security Weakness
Uapplication Ublog Reload stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for mdb-database/blog.mdb aka mdb-database/blog.msb...
CVE-2005-0944
CVE-2005-0944 concerns a stack-based overflow in the Microsoft Jet Database Engine (msjet40.dll, 4.0.8618.0) used by Office/Access. The vulnerability is in the MDB file parser and can allow remote, user‑unassisted or user‑assisted execution of arbitrary code when a crafted MDB file is opened, wit...
CVE-2005-0944
Unknown vulnerability in Microsoft Jet DB engine msjet40.dll 4.00.8618.0, related to insufficient data validation, allows remote attackers to execute arbitrary code via a crafted mdb file...
CVE-2005-0944: Undefined Security Weakness
Unknown vulnerability in Microsoft Jet DB engine msjet40.dll 4.00.8618.0, related to insufficient data validation, allows remote attackers to execute arbitrary code via a crafted mdb file...
BlackMoon weak encryption
Passwords are stored in .mdb file...
dbtools weak encryption
Account for database connection is stored in .mdb file...
Проблемы с MDB-файлам в Internet Explorer (code execution)
При открытии mdb файла, который может содержать скрипты, не выдается пердупреждения...
CVE-1999-1430: Undefined Security Weakness
PIM software for Royal daVinci does not properly password-protext access to data stored in the .mdb Microsoft Access file, which allows local users to read the data without a password by directly accessing the files with a different application, such as Access...