4252 matches found
Winmail Server <= 4.2 Build 0824 Multiple Vulnerabilities
The remote host is running Winmail Server, a commercial mail server for Windows from AMAX Information Technologies. The web interface that is used by Winmail Server for reading mail and administering the server fails to sanitize user-supplied input to various parameters and scripts. Beyond the...
CVE-2002-2184
Digi-Net Technologies DigiChat 3.5 allows chat users to obtain the IP addresses of other chat users via a "Showip" parameter in the chat applet...
CVE-2004-2504
The GUI in Alt-N Technologies MDaemon 7.2 and earlier, including 6.8, executes child processes such as NOTEPAD.EXE with SYSTEM privileges when users create new files, which allows local users with physical access to gain privileges...
Skype Technologies Multiple Buffer Overflows
Binary data 3268.prm...
[Full-disclosure] CAID 33485 - Computer Associates iGateway debug mode HTTP GET request buffer overflow vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: Computer Associates iGateway debug mode HTTP GET request buffer overflow vulnerability CA Vulnerability ID: 33485 Discovery Date: 2005-10-06 CA Advisory Date: 2005-10-14 Discovered By: EMendoza Impact: Remote attacker can execute arbitrary code...
[Bday release] Comersus shopping cart has multiple Sql injection and Cross Site Scripting vulnerabilities
Dcrab 's Security Advisory http://www.dbtech.org Deadbolt Computer Technologies SPECIAL BIRTHDAY RELEASE, 18TH BIRTHDAY RELEASE FOR DIABOLIC CRAB, YOU CAN SEND EMAILS TO [email protected] Get Dcrab's Services to audit your Web servers, scripts, networks, etc or even code them. Learn more at...
CVE-2002-1739
Alt-N Technologies Mdaemon versions 5.0–5.0.6 store user passwords with a weak encryption algorithm, enabling local users to crack them. Local access is required; confidentiality impact is indicated. Remediation: upgrade to a version that uses stronger password encryption. The connected PT-securi...
CVE-2002-1733
Technical details are not publicly available in the provided documents for CVE-2002-1733. Monitor for updates; no confirmed affected products, versions, or fixes are specified in the supplied sources.
CVE-2002-1741
CVE-2002-1741 describes a directory traversal vulnerability in WorldClient.cgi within WorldClient for Alt-N Technologies MDaemon
CVE-2002-1740
Buffer overflow in WorldClient.cgi in WorldClient in Alt-N Technologies MDaemon 5.0.5.0 and earlier allows local users to execute arbitrary code via a long folder name NewFolder parameter...
CVE-2002-1738
CVE-2002-1738 affects Alt-N Technologies MDaemon 5.0.5.0 and earlier. The issue is that a default MDaemon mail account is created with the password “MServer,” which could allow remote attackers to send anonymous email. The available sources describe the affected product and the default credential...
CVE-2002-1740
The CVE-2002-1740 entry describes a buffer overflow in WorldClient.cgi (WorldClient) of Alt-N Technologies MDaemon
CVE-2002-1738
Alt-N Technologies MDaemon 5.0.5.0 and earlier creates a default MDaemon mail account with a password of MServer, which could allow remote attackers to send anonymous email...
CVE-2002-1739
Alt-N Technologies Mdaemon 5.0 through 5.0.6 uses a weak encryption algorithm to store user passwords, which allows local users to crack passwords...
CVE-2002-1733
Cross-site scripting XSS vulnerability in the web-based message board in Prospero Technologies allows remote attackers to inject arbitrary web script or HTML via a message board post...
Kaspersky AntiVirus "klif.sys" Privilege Escalation Vulnerability
Security advisory. Kaspersky antivirus v. 5.0.227, 5.0.228, 5.0.335 under Windows2000. There is nothing found under Windows XP. There is Windows2000 security subsystem breakout found inside Kaspersky antivirus v. 5.0.227, 5.0.228, 5.0.335. It is possible to exploit it with local privilege...
Уязвимость в KAV.
Уведомление безопасности. Антивирус Касперского версий 5.0.227, 5.0.228 и 5.0.335 под Windows2000. В Windows XP ничего нижеописанного не найдено. В антивирусе Касперского версии 5.0.227, 5.0.228 в составе Kaspersky Personal Security Suite и 5.0.335,работающими под операционной системой Windows200...
PicoWebServer Remote Unicode Stack Overflow
Title: PicoWebServer Remote Unicode Stack Overflow Release Date: 28. May 2005 Author: Dennis Elser dennis backtrace de Vendor: Newmad Technologies http://www.newmad.se Vendor Status: Contacted Product: PicoWebServer Affected Version: 1.0 Platform: Microsoft Windows CE / PocketPC Processor Type: A...
CVE-2005-1599
The CVE-2005-1599 entry describes a cross-site scripting (XSS) flaw in Kryloff Technologies Subject Search Server (SSServer) 1.1, exploitable via the "Search For" field to inject arbitrary web script/HTML. The NVD/CVE records show a MEDIUM risk (CVSSv2: AV:N/AC:M/Au:N/C:N/I:P/A:N, base 4.3) but n...
