196 matches found
CVE-2002-1086
Multiple SQL injection vulnerabilities in ezContents 1.41 and earlier allow remote attackers to conduct unauthorized activities...
CVE-2002-0340
CVE-2002-0340 concerns Windows Media Player (WMP) 8.00.00.4477 and potentially other versions, where the player can automatically detect and execute .wmf and similar content even if the file extension or content type does not indicate .wmf. This behavior could enable attackers to trigger unauthor...
CVE-2001-0648
CVE-2001-0648 describes a directory traversal vulnerability in PHProjekt 2.1 and earlier. A remote attacker can perform a dot-dot (..) attack on the file module to conduct unauthorized activities. The NVD entry lists a base score of 5.0 (Medium) with network access, low attack complexity, no auth...
CVE-2001-0648
Directory traversal vulnerability in PHProjekt 2.1 and earlier allows a remote attacker to conduct unauthorized activities via a dot dot .. attack on the file module...
CVE-2001-0648
Directory traversal vulnerability in PHProjekt 2.1 and earlier allows a remote attacker to conduct unauthorized activities via a dot dot .. attack on the file module...
CVE-1999-1141
Ascom Timeplex router allows remote attackers to obtain sensitive information or conduct unauthorized activities by entering debug mode through a sequence of CTRL-D characters...
CVE-1999-1513
CVE-1999-1513 affects a 3Com SuperStack II hub running software version 2.10. The vulnerability centers on a read-only MIB object (.1.3.6.1.4.1.43.10.4.2) that exposes the entire table of community strings, potentially enabling unauthorized activities. The available public description confirms th...
CVE-2001-1030
Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists ACLs when the httpdaccelhost and httpaccelwithproxy off settings are used, which allows attackers to bypass the ACLs and conduct unauthorized activities such as port scanning...
CVE-2000-1099
Java Runtime Environment in Java Development Kit JDK 1.2.205 and earlier can allow an untrusted Java class to call into a disallowed class, which could allow an attacker to escape the Java sandbox and conduct unauthorized activities...
CVE-2000-1211
Zope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as DTML method objects, which could allow attackers to perform unauthorized activities...
CVE-2000-0419
The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote attackers to conduct unauthorized activities via the "Show Me" function in Office Help, aka the "Office 2000 UA Control" vulnerability...
CVE-2000-0334
CVE-2000-0334 affects the Allaire Spectra container editor preview tool. The issue arises from improper enforcement of object security, permitting an attacker to perform unauthorized activities through an object-method added to the container object via a publishing rule. The documented impact is ...
CVE-2000-0419
The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote attackers to conduct unauthorized activities via the "Show Me" function in Office Help, aka the "Office 2000 UA Control" vulnerability...
CVE-2000-0062
CVE-2000-0062 pertains to the DTML implementation in Zope, where remote attackers could perform unauthorized activities. Connected advisories (GHSA-WCWP-R3FJ-MM3P; OSV) describe this as an Improper Authentication issue in Zope DTML, aligning with the historical vulnerability where DTML access cou...
PowerScripts PlusMail WebConsole 1.0 - Weak Authentication (1)
// source: https://www.securityfocus.com/bid/2653/info PowerScripts PlusMail Web Control Panel is a web-based administration suite for maintaining mailing lists, mail aliases, and web sites. It is reportedly possible to change the administrative username and password without knowing the current...