1679 matches found
CVE-2002-0752
CGIscript.net csMailto.cgi program exports feedback to a file that is accessible from the web document root, which could allow remote attackers to obtain sensitive information by directly accessing the file...
CVE-2002-0560
PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to obtain sensitive information via the OWAUTIL stored procedures 1 OWAUTIL.signature, 2 OWAUTIL.listprint, or 3 OWAUTIL.showquerycolumns...
Gafware CFXImage 1.6.41.6.6 - ShowTemp File Disclosure
Gafware CFXImage 1.6.41.6.6 - ShowTemp File Disclosure source: https://www.securityfocus.com/bid/4882/info Gafware's CFXImage is a custom tag for ColdFusion. A program included with the CFXImage documentation doesn't properly filter its input. It is reported that a flaw exists in this program tha...
Cisco IDS Device Manager 3.1.1 - Arbitrary File Read Access
source: https://www.securityfocus.com/bid/4760/info IDS Device Manager is a web interface to the Cisco IDS systems. It is distributed and maintained by Cisco Systems. The IDS Device Manager may allow a remote user to gain access to sensitive information on the system. Due to improper handling of...
CVE-2001-1217
Directory traversal vulnerability in PL/SQL Apache module in Oracle Oracle 9i Application Server allows remote attackers to access sensitive information via a double encoded URL with .. dot dot sequences...
CVE-2001-0373
The default configuration of the Dr. Watson program in Windows NT and Windows 2000 generates user.dmp crash dump files with world-readable permissions, which could allow a local user to gain access to sensitive information...
CVE-2001-0898
Opera 6.0 and earlier allows remote attackers to access sensitive information such as cookies and links for other domains via Javascript that uses setTimeout to 1 access data after a new window to the domain has been opened or 2 access data via about:cache...
Cacheflow CacheOS 3.1/4.0 Web Administration - Arbitrary Cached Page Code Leakage
source: https://www.securityfocus.com/bid/3841/info CacheOS is the firmware designed and distributed with CacheFlow web cache systems. It is maintained and distributed by CacheFlow. When a user connects to the system via the web administration interface on port 8081, and issues an HTTP...
ibm informix Web Datablade 3.x4.1 - Directory Traversal
ibm informix Web Datablade 3.x4.1 - Directory Traversal source: https://www.securityfocus.com/bid/3575/info Informix is an enterprise database distributed and maintained by IBM. The Web Datablade Module for Informix SQL is used to provide wbBinaries for storing large binary resources such as...
CVE-2001-1303
The default configuration of SecuRemote for Check Point Firewall-1 allows remote attackers to obtain sensitive configuration information for the protected network without authentication...
CVE-2001-0396
The pre-login mode in the System Administrator interface of Lightwave ConsoleServer 3200 allows remote attackers to obtain sensitive information such as system status, configuration, and users...
CVE-2000-1164
WinVNC installs the WinVNC3 registry key with permissions that give Special Access read and modify to the Everybody group, which allows users to read and modify sensitive information such as passwords and gain access to the system...
datawizards ftpxq 2.0.93 - Directory Traversal
datawizards ftpxq 2.0.93 - Directory Traversal source: https://www.securityfocus.com/bid/2426/info FtpQX is a ftp daemon designed to provide ftp services for Microsoft Operating Systems. It is maintained and distributed by Datawizard Technologies. A problem in the software could allow access to...
CVE-2000-1164
WinVNC installs the WinVNC3 registry key with permissions that give Special Access read and modify to the Everybody group, which allows users to read and modify sensitive information such as passwords and gain access to the system...
CVE-2000-0707
PCCS MySQLDatabase Admin Tool Manager 1.2.4 and earlier installs the file dbconnect.inc within the web root, which allows remote attackers to obtain sensitive information such as the administrative password...
CVE-2000-0430
The provided documents identify CVE-2000-0430 as a flaw in Cart32 where remote attackers can access sensitive debugging information by appending /expdate to the URL. Affected component: Cart32 (web/URL handling). Root cause: improper handling of URL paths leading to exposure of debugging data; im...
CVE-2000-0345
The on-line help system options in Cisco routers allows non-privileged users without "enabled" access to obtain sensitive information via the show command...
netscape.4.x.java.txt
Netscape 4.x javascript security flaw Versions tested: Windows98/Netscape4.7,Windows95/Netscape4.05 Description: Credits to Henri Torgemane Netscape has a "persistent" navigator object, which means that any data put in the window.navigator object will be accessible to every other window as long a...