Lucene search
K

1254 matches found

securityvulns
securityvulns
added 2006/10/19 12:0 a.m.42 views

Multiple vulnerabilities in Highwall Enterprise and Highwall Endpoint management interface

Multiple vulnerabilities in Highwall Enterprise and Highwall Endpoint 4.0.2.11045 management interface SUMMARY Highwall Enterprise and Highwall Endpoint wireless IDS management interface contain multiple vulnerabilities which can lead to privilege escalation and code execution. DETAILS Web...

2.2AI score
Exploits0
Symantec
Symantec
added 2006/10/10 12:0 a.m.12 views

Microsoft XML Core Services Information Disclosure Vulnerability

Description Microsoft XML Core Services is prone to an information-disclosure vulnerability. This vulnerability is caused by an error in how the affected component handles server redirects. An attacker can exploit this vulnerability by enticing a victim user into visiting a malicious web page...

7.6AI score
Exploits0References2Affected Software5
Symantec
Symantec
added 2006/10/10 12:0 a.m.14 views

Microsoft Windows XML Core Services XSLT Buffer Overrun Vulnerability

Description Microsoft Windows is prone to a remotely exploitable buffer-overrun condition in the XSLT implementation of XML core services. An attacker can exploit this issue to execute arbitrary code on an unsuspecting victim's computer. This may facilitate a remote compromise. Technologies...

0.3AI score
Exploits0References2Affected Software5
Saint
Saint
added 2006/08/07 12:0 a.m.31 views

Microsoft SQL Server Hello buffer overflow

Added: 08/07/2006 CVE: CVE-2002-1123 BID: 5411 OSVDB: 10132 Background Microsoft SQL Server is a database server package for Windows platforms. Problem Microsoft SQL Server 2000 is affected by a buffer overflow vulnerability in the code which handles user authentication. This allows a remote...

7.5CVSS7.8AI score0.89144EPSS
Exploits9
Saint
Saint
added 2006/08/07 12:0 a.m.45 views

Microsoft SQL Server Hello buffer overflow

Added: 08/07/2006 CVE: CVE-2002-1123 BID: 5411 OSVDB: 10132 Background Microsoft SQL Server is a database server package for Windows platforms. Problem Microsoft SQL Server 2000 is affected by a buffer overflow vulnerability in the code which handles user authentication. This allows a remote...

7.5CVSS7.8AI score0.89144EPSS
Exploits9
Saint
Saint
added 2006/08/07 12:0 a.m.21 views

Microsoft SQL Server Hello buffer overflow

Added: 08/07/2006 CVE: CVE-2002-1123 BID: 5411 OSVDB: 10132 Background Microsoft SQL Server is a database server package for Windows platforms. Problem Microsoft SQL Server 2000 is affected by a buffer overflow vulnerability in the code which handles user authentication. This allows a remote...

7.5CVSS7.8AI score0.89144EPSS
Exploits9
Saint
Saint
added 2006/08/07 12:0 a.m.37 views

Microsoft SQL Server Hello buffer overflow

Added: 08/07/2006 CVE: CVE-2002-1123 BID: 5411 OSVDB: 10132 Background Microsoft SQL Server is a database server package for Windows platforms. Problem Microsoft SQL Server 2000 is affected by a buffer overflow vulnerability in the code which handles user authentication. This allows a remote...

7.5CVSS7.8AI score0.89144EPSS
Exploits9
NVD
NVD
added 2006/06/01 1:2 a.m.19 views

CVE-2006-2719

JIWA Financials 6.4.14 stores usernames and passwords for all accounts in cleartext in the HRStaff table in Microsoft SQL Server, and sends the usernames and passwords in cleartext to the application's SQL Server ODBC driver, which might allow context-dependent attackers to obtain the passwords...

4.9CVSS7AI score0.00115EPSS
Exploits1References5
Prion
Prion
added 2006/06/01 1:2 a.m.14 views

Design/Logic Flaw

JIWA Financials 6.4.14 stores usernames and passwords for all accounts in cleartext in the HRStaff table in Microsoft SQL Server, and sends the usernames and passwords in cleartext to the application's SQL Server ODBC driver, which might allow context-dependent attackers to obtain the passwords...

4.9CVSS7.7AI score0.00115EPSS
Exploits1References5Affected Software1
NVD
NVD
added 2006/06/01 1:2 a.m.16 views

CVE-2006-2718

JIWA Financials 6.4.14 passes a Microsoft SQL Server account's username and password, and the name of a data source, to a Crystal Reports .rpt file, which allows remote authenticated users to execute certain standard stored procedures by referencing them in a user-written .rpt file, as demonstrat...

6.5CVSS7AI score0.01206EPSS
Exploits1References7
Cvelist
Cvelist
added 2006/06/01 1:0 a.m.12 views

CVE-2006-2718

JIWA Financials 6.4.14 passes a Microsoft SQL Server account's username and password, and the name of a data source, to a Crystal Reports .rpt file, which allows remote authenticated users to execute certain standard stored procedures by referencing them in a user-written .rpt file, as demonstrat...

7AI score0.01206EPSS
Exploits1References7
Saint
Saint
added 2006/02/05 12:0 a.m.22 views

Microsoft SQL Server 2000 resolution service buffer overflow

Added: 02/05/2006 CVE: CVE-2002-0649 BID: 5310 OSVDB: 4577 Background Microsoft SQL Server is a database server package for Windows platforms. SQL Server 2000 introduced the SQL Server Resolution Service, which runs on port 1434/UDP and identifies the port on which each SQL Server instance runs...

7.5CVSS7.8AI score0.86095EPSS
Exploits7
Saint
Saint
added 2006/02/05 12:0 a.m.38 views

Microsoft SQL Server 2000 resolution service buffer overflow

Added: 02/05/2006 CVE: CVE-2002-0649 BID: 5310 OSVDB: 4577 Background Microsoft SQL Server is a database server package for Windows platforms. SQL Server 2000 introduced the SQL Server Resolution Service, which runs on port 1434/UDP and identifies the port on which each SQL Server instance runs...

7.5CVSS7.8AI score0.86095EPSS
Exploits7
Saint
Saint
added 2006/02/05 12:0 a.m.31 views

Microsoft SQL Server 2000 resolution service buffer overflow

Added: 02/05/2006 CVE: CVE-2002-0649 BID: 5310 OSVDB: 4577 Background Microsoft SQL Server is a database server package for Windows platforms. SQL Server 2000 introduced the SQL Server Resolution Service, which runs on port 1434/UDP and identifies the port on which each SQL Server instance runs...

7.5CVSS8AI score0.86095EPSS
Exploits7
Tenable Nessus
Tenable Nessus
added 2006/01/31 12:0 a.m.12 views

Microsoft SQL Server Database Detection

Binary data 3393.prm...

7.3AI score
Exploits0
Saint
Saint
added 2005/12/20 12:0 a.m.57 views

BrightStor ARCserve Backup agent for MS-SQL buffer overflow

Added: 12/20/2005 CVE: CVE-2005-1272 BID: 14453 OSVDB: 18501 Background BrightStor ARCserve Backup is a backup and recovery solution for multiple platforms. Problem A buffer overflow in the backup agent for Microsoft SQL Server allows remote attackers to execute arbitrary commands. Resolution App...

7.5CVSS7.9AI score0.80954EPSS
Exploits8
Exploit DB
Exploit DB
added 2005/12/09 12:0 a.m.30 views

Lyris ListManager - Read Message Attachment SQL Injection (Metasploit)

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

7.4AI score
Exploits0
securityvulns
securityvulns
added 2005/12/06 12:0 a.m.42 views

Ideal BB.NET 1.3 XSS vuln

Ideal BB.NET 1.3 XSS vuln Vuln. dicovered by : r0t Date: 6 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/ideal-bbnet-13-xss-vuln.html vendor:www.idealscience.com/site/products/idealbb.net.aspx affected version: 1.3 and prior Product Description: It is a powerful bulletin board...

0.8AI score
Exploits0
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.319 views

Microsoft SQL (MSSQL) Server Brute Force Logins With Default Credentials (TCP/IP Listener)

The remote Microsoft SQL MSSQL Server has a common / publicly known password for one or more accounts. SPDX-FileCopyrightText: 2005 HD Moore SPDX-FileCopyrightText: New / improved code since 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C...

10CVSS7.2AI score0.00419EPSS
Exploits2
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.34 views

Microsoft SQL Server SQL Abuse Vulnerability (Q256052)

The remote SQL server seems to be vulnerable to the SQL abuse vulnerability described in technet article Q256052. SPDX-FileCopyrightText: 2001 Intranode Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...

7.5CVSS7AI score0.2419EPSS
Exploits0References5
Rows per page
Query Builder