its software vulnerabilities

Searching its software vulnerabilities

The ffingerd 1.19 allows remote attackers to id

The ffingerd 1.19 allows remote attackers to identify users on the target system based on its responses.

A service may include useful information in its

A service may include useful information in its banner or help function (such as the name and version), making it useful for information gathering activities.

ROUTERmate has a default SNMP community name wh

ROUTERmate has a default SNMP community name which allows remote attackers to modify its configuration.

IBM WebSphere sets permissions that allow a loc

IBM WebSphere sets permissions that allow a local user to modify a deinstallation script or its data files stored in /usr/bin.

WS_FTP Pro 6.0 uses weak encryption for passwor

WS_FTP Pro 6.0 uses weak encryption for passwords in its initialization files, which allows remote attackers to easily decrypt the passwords and gain privileges.

Oracle Web Listener 2.1 allows remote attackers

Oracle Web Listener 2.1 allows remote attackers to bypass access restrictions by replacing a character in the URL with its HTTP-encoded (hex) equivalent.

loadmodule in SunOS 4.1.x, as used by xnews, do

loadmodule in SunOS 4.1.x, as used by xnews, does not properly sanitize its environment, which allows local users to gain privileges, a different vulnerability than CVE-1999-1584.

The Razor configuration management tool uses we

The Razor configuration management tool uses weak encryption for its password file, which allows local users to gain privileges.

WinU 5.x and earlier uses weak encryption to st

WinU 5.x and earlier uses weak encryption to store its configuration password, which allows local users to decrypt the password and gain privileges.

WinU 1.0 through 5.1 has a backdoor password th

WinU 1.0 through 5.1 has a backdoor password that allows remote attackers to gain access to its administrative interface and modify configuration.

SnapStream PVS 1.2a stores its passwords in pla

SnapStream PVS 1.2a stores its passwords in plaintext in the file SSD.ini, which could allow a remote attacker to gain privileges on the server.

mkpasswd in expect 5.2.8, as used by Red Hat Li

mkpasswd | expect |

mkpasswd in expect 5.2.8, as used by Red Hat Linux 6.2 through 7.0, seeds its random number generator with its process ID, which limits the space of possible seeds and makes it easier for attackers to conduct brute force password attacks.

Cross-site scripting in PostCalendar 3.02 allow

PostCalendar | Cross-site | scripting |

Cross-site scripting in PostCalendar 3.02 allows remote attackers to insert arbitrary HTML and script, and steal cookies, by modifying a calendar entry in its preview page.

Mantis 0.17.5 and earlier stores its database p

Mantis |

Mantis 0.17.5 and earlier stores its database password in cleartext in a world-readable configuration file, which allows local users to perform unauthorized database operations.

Format string vulnerability in the WGate compon

Format string vulnerability in the WGate component for SAP Internet Transaction Server (ITS) allows remote attackers to execute arbitrary code via a high "trace level."

The MHTML protocol handler in Microsoft Outlook

The MHTML protocol handler in Microsoft Outlook Express 5.5 SP2 through Outlook Express 6 SP1 allows remote attackers to bypass domain restrictions and execute arbitrary code, as demonstrated on Internet Explorer using script in a compiled help (CHM) file that references the InfoTech Storage (ITS) protocol handlers such as (1) ms-its, (2) ms-itss, (3) its, or (4) mk:@MSITStore, aka the "MHTML URL Processing Vulnerability."

Software vulnerabilities results 1 to 20 of 124

Page: 12 3 4 5...7 ►