4380 matches found
CVE-2004-0347
Cross-site scripting XSS vulnerability in delhomepage.cgi in NetScreen-SA 5000 Series running firmware 3.3 Patch 1 build 4797 allows remote authenticated users to execute arbitrary script as other users via the row parameter...
Debian DSA-130-1 : ethereal - remotely triggered memory allocation error
Ethereal versions prior to 0.9.3 were vulnerable to an allocation error in the ASN.1 parser. This can be triggered when analyzing traffic using the SNMP, LDAP, COPS, or Kerberos protocols in ethereal. This vulnerability was announced in the ethereal security advisory enpa-sa-00003. This issue has...
CVE-2004-0347
Cross-site scripting XSS vulnerability in delhomepage.cgi in NetScreen-SA 5000 Series running firmware 3.3 Patch 1 build 4797 allows remote authenticated users to execute arbitrary script as other users via the row parameter...
CVE-2004-0347
CVE-2004-0347 : A cross-site scripting (XSS) vulnerability exists in the delhomepage.cgi script of NetScreen‑SA 5000 Series running firmware 3.3 Patch 1 (build 4797). The issue allows remote authenticated users to inject and execute arbitrary script as other users via the row parameter. Affected ...
SQL Server Cleartext 'sa' Account 'password' Password Authentication (deprecated)
Binary data 1123.prm...
SQL Server Cleartext 'sa' Account 'sa' Password Authentication (deprecated)
Binary data 1122.prm...
SQL Server Cleartext 'sa' Account 'sa' Password Attempted Login (deprecated)
Binary data 1109.prm...
SQL Server Cleartext 'sa' Account 'admin' Password Authentication (deprecated)
Binary data 1125.prm...
SQL Server Cleartext 'sa' Account 'administrator' Password Attempted Login (deprecated)
Binary data 1111.prm...
NetScreen-SA crossite scripting
Crossite scripting in delhomepage.cgi...
CVE-2000-1209
The "sa" account is installed with a default null password on 1 Microsoft SQL Server 2000, 2 SQL Server 7.0, and 3 Data Engine MSDE 1.0, including third party packages that use these products such as 4 Tumbleweed Secure Mail MMS 5 Compaq Insight Manager, and 6 Visio 2000, which allows remote...
Microsoft SQL Server sa Account Default Blank Password
The remote instance of MS SQL / SQL Server has the default 'sa' account enabled without any password. An attacker may leverage this flaw to execute commands against the remote host, as well as read the content of any databases it might have. %NASLMINLEVEL 70300 this script attempts to log in to a...
MS-SQL 'sa' user exploit code
Hi BugTraq-ers, It has come to light that it is now common knowledge that MS-SQL has a blank 'sa' password by default. This seems to affect a lot of servers on the internet. Since this knowledge has been made public by others, I'll release my program 'linsql' linux only -- ports anyone? which can...
Tumbleweed Worldsecure (MMS) BLANK 'sa' account password vulnerability
I've recently discovered the following vulnerability: Product: Tumbleweed Messaging Management System MMS Formerly Worldtalk Worldsecure http://www.tumbleweed.com/solutions/products/mmsproducts Version: 4.3 - 4.5 all builds Description: Product uses Microsoft's MSDE Database engine which is a...
CVE-2000-0402
The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator sa account in plaintext in a log file which is readable by any user, aka the "SQL Server 7.0 Service Pack Password" vulnerability...
Moderately critical - Cross Site Scripting - SA-CORE-2019-004
More info at https://www.drupal.org/SA-CORE-2019-004...
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2020-002
More info at https://www.drupal.org/sa-core-2020-002...
Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2020-010
More info at https://www.drupal.org/sa-core-2020-010...