242 matches found
CVE-2001-0648
CVE-2001-0648 describes a directory traversal vulnerability in PHProjekt 2.1 and earlier. A remote attacker can perform a dot-dot (..) attack on the file module to conduct unauthorized activities. The NVD entry lists a base score of 5.0 (Medium) with network access, low attack complexity, no auth...
CVE-2001-0648
Directory traversal vulnerability in PHProjekt 2.1 and earlier allows a remote attacker to conduct unauthorized activities via a dot dot .. attack on the file module...
CVE-1999-1262: Undefined Security Weakness
Java in Netscape 4.5 does not properly restrict applets from connecting to other hosts besides the one from which the applet was loaded, which violates the Java security model and could allow remote attackers to conduct unauthorized activities...
CVE-1999-1087: Undefined Security Weakness
Internet Explorer 4 treats a 32-bit number "dotless IP address" in the a URL as the hostname instead of an IP address, which causes IE to apply Local Intranet Zone settings to the resulting web page, allowing remote malicious web servers to conduct unauthorized activities by using URLs that conta...
CVE-2001-0648
Directory traversal vulnerability in PHProjekt 2.1 and earlier allows a remote attacker to conduct unauthorized activities via a dot dot .. attack on the file module...
CVE-1999-1141
Ascom Timeplex router allows remote attackers to obtain sensitive information or conduct unauthorized activities by entering debug mode through a sequence of CTRL-D characters...
CVE-1999-1513
CVE-1999-1513 affects a 3Com SuperStack II hub running software version 2.10. The vulnerability centers on a read-only MIB object (.1.3.6.1.4.1.43.10.4.2) that exposes the entire table of community strings, potentially enabling unauthorized activities. The available public description confirms th...
CVE-1999-1513: Undefined Security Weakness
Management information base MIB for a 3Com SuperStack II hub running software version 2.10 contains an object identifier .1.3.6.1.4.1.43.10.4.2 that is accessible by a read-only community string, but lists the entire table of community strings, which could allow attackers to conduct unauthorized...
CVE-2001-1030
Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists ACLs when the httpdaccelhost and httpaccelwithproxy off settings are used, which allows attackers to bypass the ACLs and conduct unauthorized activities such as port scanning...
CVE-2000-1099: Undefined Security Weakness
Java Runtime Environment in Java Development Kit JDK 1.2.205 and earlier can allow an untrusted Java class to call into a disallowed class, which could allow an attacker to escape the Java sandbox and conduct unauthorized activities...
CVE-2000-1099
Java Runtime Environment in Java Development Kit JDK 1.2.205 and earlier can allow an untrusted Java class to call into a disallowed class, which could allow an attacker to escape the Java sandbox and conduct unauthorized activities...
CVE-2000-1211
Zope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as DTML method objects, which could allow attackers to perform unauthorized activities...
CVE-2000-1211: Undefined Security Weakness
Zope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as DTML method objects, which could allow attackers to perform unauthorized activities...
CVE-2000-0419
The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote attackers to conduct unauthorized activities via the "Show Me" function in Office Help, aka the "Office 2000 UA Control" vulnerability...
CVE-2000-0334
CVE-2000-0334 affects the Allaire Spectra container editor preview tool. The issue arises from improper enforcement of object security, permitting an attacker to perform unauthorized activities through an object-method added to the container object via a publishing rule. The documented impact is ...
CVE-2000-0419: Undefined Security Weakness
The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote attackers to conduct unauthorized activities via the "Show Me" function in Office Help, aka the "Office 2000 UA Control" vulnerability...
CVE-2000-0334: Undefined Security Weakness
The Allaire Spectra container editor preview tool does not properly enforce object security, which allows an attacker to conduct unauthorized activities via an object-method that is added to the container object with a publishing rule...
CVE-2000-0419
The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote attackers to conduct unauthorized activities via the "Show Me" function in Office Help, aka the "Office 2000 UA Control" vulnerability...
CVE-2000-0062
CVE-2000-0062 pertains to the DTML implementation in Zope, where remote attackers could perform unauthorized activities. Connected advisories (GHSA-WCWP-R3FJ-MM3P; OSV) describe this as an Improper Authentication issue in Zope DTML, aligning with the historical vulnerability where DTML access cou...