4869 matches found
PT-2006-4158 · Namo · Namo Deepsearch
Name of the Vulnerable Software and Affected Versions: Namo DeepSearch version 4.5 Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the p parameter in the mclient.cgi component. Recommendations: For Namo...
security flaw
PHP 4.0 with cURL functions allows remote attackers to bypass the openbasedir setting and read arbitrary files via a file: URL argument to the curlinit function...
[Full-Disclosure] unzoo 4.4 directory travels
ddaa sseeccuurriittyy ccoonnssuullttaannttee ''''ddoouubblleess'''' aauuddiitttteedd mmaannyy mmoorree aarrcchhiivveess ssiinnssee llaasstt ttiimmee!! uunnzzoooo 44..44 hhaavvee ddiirreeccttoorryy ttrraavveerrssaall bbuugg ttoo!! bbwwaahhaahhaahhaahh!! ggiivvee mmee mmaannyy sseeccuurriittyy jjoo...
DEBIAN-CVE-2003-0138
Version 4 of the Kerberos protocol krb4, as used in Heimdal and other packages, allows an attacker to impersonate any principal in a realm via a chosen-plaintext attack...
DEBIAN-CVE-2003-0139
Certain weaknesses in the implementation of version 4 of the Kerberos protocol krb4 in the krb5 distribution, when triple-DES keys are used to key krb4 services, allow an attacker to create krb4 tickets for unauthorized principals using a cut-and-paste attack and "ticket splicing."...
CVE-2003-0138
Version 4 of the Kerberos protocol krb4, as used in Heimdal and other packages, allows an attacker to impersonate any principal in a realm via a chosen-plaintext attack...
PT-2001-2119 · Knox · Knox Arkeia Server
Name of the Vulnerable Software and Affected Versions: Knox Arkeia server version 4.2 Description: The issue is related to the use of a constant salt when encrypting passwords using the crypt function, which makes it easier for an attacker to conduct brute force password guessing. Recommendations...
PT-1999-1842 · Netscape · Netscape
Name of the Vulnerable Software and Affected Versions: Netscape version 4.7 Description: The issue concerns the storage of user passwords in the preferences.js file during email sessions. Specifically, when using IMAP or POP, user passwords are recorded, regardless of the "remember passwords"...
CVE-1999-0356
ControlIT v4.5 and earlier uses weak encryption to store usernames and passwords in an address book...
PT-1998-1076 · Microsoft · Internet Explorer
Name of the Vulnerable Software and Affected Versions: Internet Explorer version 4.0 Description: A buffer overflow issue has been identified. Recommendations: For Internet Explorer version 4.0, at the moment, there is no information about a newer version that contains a fix for this issue...
2018-09 Preview of Quality Rollup for .NET Framework 2.0, 3.0, 4.5.2, 4.6 on Windows Server 2008 SP2 for x64 (KB4458614)
2018-09 Preview of Quality Rollup for .NET Framework 2.0, 3.0, 4.5.2, 4.6 on Windows Server 2008 SP2 for x64 KB4458614...
2021-08 Cumulative Update for .NET Framework 3.5 and 4.7.2 for Windows Server 2019 for ARM64 (KB5004870)
2021-08 Cumulative Update for .NET Framework 3.5 and 4.7.2 for Windows Server 2019 for ARM64 KB5004870...
2021-05 Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 7 for x64 (KB5001878)
2021-05 Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 7 for x64 KB5001878...
2017-10 Security and Quality Rollup for .NET Framework 2.0, 3.0, 4.5.2, 4.6 on Windows Server 2008 SP2 (KB4043768)
2017-10 Security and Quality Rollup for .NET Framework 2.0, 3.0, 4.5.2, 4.6 on Windows Server 2008 SP2 KB4043768...
2025-08 Cumulative Update Preview for .NET Framework 3.5 and 4.8 for Windows 10 Version 22H2 for ARM64 (KB5064794)
2025-08 Cumulative Update Preview for .NET Framework 3.5 and 4.8 for Windows 10 Version 22H2 for ARM64 KB5064794...
Windows Messenger 4.7
Windows Messenger 4.7...
Bing Bar GM4 4-5
...
Bing Bar CMDODF 4-5
...
PT-2011-5232 · Linux +4 · Linux Kernel +16
Name of the Vulnerable Software and Affected Versions: openSUSE systemtap-runtime-debuginfo affected versions not specified openSUSE systemtap-sdt-devel affected versions not specified openSUSE systemtap affected versions not specified openSUSE libvmtools0 affected versions not specified Linux...
