Lucene search
+L

2036 matches found

securityvulns
securityvulns
added 2007/05/25 12:0 a.m.58 views

Vulnerability in Credant Mobile Guardian Shield for Windows

Vulnerability in Credant Mobile Guardian Shield for Windows Vendor: Credant Technologies Inc. http://www.credant.com/ Product: Credant Mobile Guardian Shield for Windows Version: 5.2.1.105 and prior Affected Operating Systems: Windows XP SP2 and likely others Product Overview: Credant Technologie...

0.5AI score
SaveExploits0
NVD
NVD
added 2007/01/23 12:28 a.m.16 views

CVE-2007-0413

BEA WebLogic Server 8.1 through 8.1 SP5 stores cleartext data in a backup of config.xml after offline editing, which allows local users to obtain sensitive information by reading this backup file...

4.4CVSS5.7AI score0.00302EPSS
SaveExploits0References6
CVE
CVE
added 2007/01/23 12:0 a.m.66 views

CVE-2007-0413

CVE-2007-0413 - MODE C BEA WebLogic Server versions 8.1 through 8.1 SP5 store cleartext data in a backup of config.xml after offline editing. This allows local users to obtain sensitive information by reading the backup file. The vulnerability is due to storing sensitive configuration data in an ...

4.4CVSS5.7AI score0.00302EPSS
SaveExploits0References6Affected Software1
Check Point Advisories
Check Point Advisories
added 2006/11/30 12:0 a.m.4 views

Block MSN Messenger Live 8

Windows Live Messenger, formerly and still commonly known as MSN Messenger or MSN, is a freeware instant messaging client for Windows XP and Windows Vista. It is part of Microsoft's Windows Live set of online services.Released on June 19, 2006, MSN Messenger Live 8 has many features including...

3AI score
SaveExploits0
myhack58
myhack58
added 2006/11/29 12:0 a.m.26 views

Hacking quest dove gray is not on-line analysis summary-vulnerability warning-the black bar safety net

Not automatically on-line of reason: 1. You do not have public IP or you are within the network did not do the appropriate port mapping; 2. You opened the firewall closes the Dove gray to use to the port; 3. You do not have to update the IP to your domain name; 4. Your service-side configuration...

0.1AI score
SaveExploits0
myhack58
myhack58
added 2006/09/02 12:0 a.m.25 views

Thoroughly get super star--try it!- Vulnerability warning-the black bar safety net

A. Installation article 1. Installation If you previously installed a super star, please you go first in Control Panel to remove the super-star, and the installation directory deleted, and then in the registry, REGEDIT to delete the Super Stars. As follows: HKEYCURRENTUSERSoftware SUPERSTAR...

0.9AI score
SaveExploits0
NVD
NVD
added 2006/08/10 12:4 a.m.14 views

CVE-2006-4068

The pswd.js script relies on the client to calculate whether a username and password match hard-coded hashed values for a server, and uses a hashing scheme that creates a large number of collisions, which makes it easier for remote attackers to conduct offline brute force attacks. NOTE: this scri...

5CVSS6.8AI score0.02755EPSS
SaveExploits2References3
CVE
CVE
added 2006/08/10 12:0 a.m.55 views

CVE-2006-4068

The CVE concerns a client-side pswd.js script that relies on the user’s environment to verify a username/password against hard-coded hashed values on the server. The hashing scheme reportedly produces a large number of collisions, which can ease offline brute-force attempts by an attacker. The de...

5CVSS7.2AI score0.02755EPSS
SaveExploits2References3Affected Software1
Cvelist
Cvelist
added 2006/08/10 12:0 a.m.27 views

CVE-2006-4068

The pswd.js script relies on the client to calculate whether a username and password match hard-coded hashed values for a server, and uses a hashing scheme that creates a large number of collisions, which makes it easier for remote attackers to conduct offline brute force attacks. NOTE: this scri...

6.8AI score0.02755EPSS
SaveExploits2References3
Tenable Nessus
Tenable Nessus
added 2006/07/03 12:0 a.m.25 views

CentOS 3 : evolution (CESA-2005:238)

Updated evolution packages that fix various bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Evolution is the GNOME collection of personal information management PIM tools. Evolution includes a mailer, calendar, contact manage...

9.8CVSS5.5AI score0.03179EPSS
SaveExploits0References6
OSV
OSV
added 2005/12/31 5:0 a.m.6 views

DEBIAN-CVE-2005-4683

PADL MigrationTools 46, when a failure occurs, stores contents of /etc/shadow in a world-readable /tmp/nis.$$.ldif file, and possibly other sensitive information in other temporary files, which are not properly managed by 1 migrateallonline.sh, 2 migratealloffline.sh, 3 migrateallnetinfoonline.sh...

2.1CVSS6.7AI score0.00383EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2005/05/19 12:0 a.m.30 views

RHEL 3 : evolution (RHSA-2005:238)

Updated evolution packages that fix various bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Evolution is the GNOME collection of personal information management PIM tools. Evolution includes a mailer, calendar, contact manage...

9.8CVSS5.5AI score0.03179EPSS
SaveExploits0References3
NVD
NVD
added 2005/05/02 4:0 a.m.13 views

CVE-2005-0737

Buffer overflow in Yahoo! Messenger allows remote attackers to execute arbitrary code via the offline mode...

7.5CVSS7.9AI score0.0407EPSS
SaveExploits2References2
CVE
CVE
added 2005/03/13 5:0 a.m.67 views

CVE-2005-0737

CVE-2005-0737 describes a buffer overflow in Yahoo! Messenger that allows remote attackers to execute arbitrary code via the offline mode. The vulnerability is associated with Yahoo! Messenger; the underlying cause is a buffer overflow condition, enabling potential arbitrary code execution and im...

7.5CVSS8.3AI score0.0407EPSS
SaveExploits2References2Affected Software1
securityvulns
securityvulns
added 2005/03/09 12:0 a.m.33 views

Yahoo Messenger Instang messaging agent buffer overflow

Buffer overflow during offline status message displaying...

3.7AI score
SaveExploits0References1
securityvulns
securityvulns
added 2004/04/13 12:0 a.m.43 views

asleap - offline LEAP authentication hacking

MS-CHAP NTLM vulnerability allows offline passwords attacks...

2.9AI score
SaveExploits0References2
securityvulns
securityvulns
added 2004/04/13 12:0 a.m.38 views

Release of Cisco Attack tool Asleap

In August 2003, I wrote a tool called asleap for Linux systems to exploit a weakness in the Cisco LEAP authentication protocol. Using this tool, an attacker can actively compromise Cisco LEAP networks by mounting an offline dictionary attack against weak user passwords. In my testing, I was able ...

6.9AI score
SaveExploits0
Cvelist
Cvelist
added 2003/04/02 5:0 a.m.28 views

CVE-2002-0818

wwwoffled in World Wide Web Offline Explorer WWWOFFLE allows remote attackers to cause a denial of service and possibly execute arbitrary code via a negative Content-Length value...

7.6AI score0.04052EPSS
SaveExploits0References6
securityvulns
securityvulns
added 2002/07/19 12:0 a.m.43 views

Buffer overflow in WWW Offline Explorer

Buffer overflow on negative Content-Length...

3.6AI score
SaveExploits0References1Affected Software1
NVD
NVD
added 2001/02/16 5:0 a.m.14 views

CVE-2001-0038

Offline Explorer 1.4 before Service Release 2 allows remote attackers to read arbitrary files by specifying the drive letter e.g. C: in the requested URL...

5CVSS6.7AI score0.03326EPSS
SaveExploits2References3
Rows per page
Query Builder