Searching offline software vulnerabilities

Offline Explorer 1.4 before Service Release 2 a

specifying | arbitrary | attackers | Explorer | Release | Offline | Service | letter | allows | remote | before | drive | files | read |

Offline Explorer 1.4 before Service Release 2 allows remote attackers to read arbitrary files by specifying the drive letter (e.g. C:) in the requested URL.


The sort_offline function for texindex in texin

sort_offline | overwrite | arbitrary | temporary | function | texindex | texinfo | earlier | symlink | allows | attack | users | local | files | via |

The sort_offline function for texindex in texinfo 4.8 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files.


The pswd.js script relies on the client to calc

brute-force | downloading | conducting | hard-coded | attackers | calculate | password | username | offline | attacks | whether | allows | remote | obtain | relies | client | pswdjs | script | server | values | hashed | which | match |

The pswd.js script relies on the client to calculate whether a username and password for a server match hard-coded hashed values, which allows remote attackers to obtain a username and password by downloading pswd.js and conducting brute-force offline attacks.


BEA WebLogic Server 8.1 through 8.1 SP5 imprope

information | improperly | cleartext | configxml | sensitive | WebLogic | reading | editing | offline | through | allows | Server | backup | obtain | users | local | after | which | file | data | BEA | SP5 |

BEA WebLogic Server 8.1 through 8.1 SP5 improperly cleartext data in a backup of config.xml after offline editing, which allows local users to obtain sensitive information by reading this backup file.


Software vulnerabilities results 1 to 5 of 5     
Page: 1