Searching scheme software vulnerabilities

Buffer overflow in (1) pluggable authentication

overflow | Buffer |

Buffer overflow in (1) pluggable authentication module (PAM) on Solaris 2.5.1 and 2.5 and (2) unix_scheme in Solaris 2.4 and 2.3 allows local users to gain root privileges via programs that use these modules such as passwd, yppasswd, and nispasswd.


Vulnerability in (1) rlogin daemon rshd and (2)

Vulnerability |

Vulnerability in (1) rlogin daemon rshd and (2) scheme on SCO UNIX OpenServer 5.0.5 and earlier, and SCO UnixWare 7.0.1 and earlier, allows remote attackers to gain privileges.


SunPCi II VNC uses a weak authentication scheme

authentication | communications | attackers | encrypted | challenge | password | sniffing | scheme | random | SunPCi | obtain | remote | allows | which | used | uses | weak | byte | VNC | key |

SunPCi II VNC uses a weak authentication scheme, which allows remote attackers to obtain the VNC password by sniffing the random byte challenge, which is used as the key for encrypted communications.


NewsReactor 1.0 uses a weak encryption scheme,

NewsReactor | encryption | passwords | newsgroup | accounts | decrypt | access | scheme | users' | other | allow | could | which | users | local | uses | weak | gain |

NewsReactor 1.0 uses a weak encryption scheme, which could allow local users to decrypt the passwords and gain access to other users' newsgroup accounts.


EarlyImpact ProductCart uses a weak encryption

ProductCart | EarlyImpact | encryption | attackers | passwords | plaintext | password | encrypt | scheme | obtain | attack | chosen | allows | remote | which | uses | weak | via |

EarlyImpact ProductCart uses a weak encryption scheme to encrypt passwords, which allows remote attackers to obtain the password via a chosen plaintext attack.


GeoVision Digital Video Surveillance System 6.0

Surveillance | GeoVision | Digital | System | Video |

GeoVision Digital Video Surveillance System 6.04, 6.1 and 7.0 uses a weak encryption scheme to encrypt passwords, which allows remote attackers to obtain the password via sniffing.


WebEOC before 6.0.2 uses a weak encryption sche

before | WebEOC |

WebEOC before 6.0.2 uses a weak encryption scheme for passwords, which makes it easier for attackers to crack passwords.


Mozilla Firefox 1.0.4 and 1.0.5 does not choose

Firefox | Mozilla |

Mozilla Firefox 1.0.4 and 1.0.5 does not choose the challenge with the strongest authentication scheme available as required by RFC2617, which might cause credentials to be sent in plaintext even if an encrypted channel is available.


Advansysperu Software USB Lock Auto-Protect (AP

Auto-Protect | Advansysperu | Software | Lock | USB |

Advansysperu Software USB Lock Auto-Protect (AP) 1.5 uses a weak encryption scheme to encrypt passwords, which allows local users to gain sensitive information and bypass USB interface protection.


Buffer overflow in uidadmin in SCO Unixware 7.1

uidadmin | Unixware | overflow | Buffer | SCO |

Buffer overflow in uidadmin in SCO Unixware 7.1.3 and 7.1.4 allows local users to execute arbitrary code via a -S (scheme) argument that specifies a large file, a different vulnerability than CVE-2001-1063.


Cross-site scripting (XSS) vulnerability in Tin

Cross-site | scripting |

Cross-site scripting (XSS) vulnerability in TinyPHPForum (TPF) 3.6 and earlier allows remote attackers to inject arbitrary web script via a javascript: scheme in an "[a]" bbcode tag, possibly the txt parameter to action.php.


Finder in Apple Mac OS X 10.3.9 and 10.4.6 allo

Finder | Apple | Mac |

Finder in Apple Mac OS X 10.3.9 and 10.4.6 allows user-assisted attackers to execute arbitrary code by tricking a user into launching an Internet Location item that appears to use a safe URL scheme, but which actually has a different and more risky scheme.


SQL injection vulnerability in Default.asp in E

vulnerability | Defaultasp | attackers | arbitrary | EzASPSite | injection | parameter | password | commands | execute | earlier | obtain | Scheme | allows | remote | admin | SHA1 | hash | SQL | RC3 | via |

SQL injection vulnerability in Default.asp in EzASPSite 2.0 RC3 and earlier allows remote attackers to execute arbitrary SQL commands and obtain the SHA1 hash of the admin password via the Scheme parameter.


The MS-Logon authentication scheme in UltraVNC

authentication | UltraVNC | MS-Logon | scheme |

The MS-Logon authentication scheme in UltraVNC (aka Ultr@VNC) 1.0.1 uses weak encryption (XOR) for challenge/response, which allows remote attackers to gain privileges by sniffing and decrypting passwords.


Directory traversal vulnerability in phpMyVisit

vulnerability | phpMyVisites | pmv_ck_view | protection | attackers | arbitrary | sequences | traversal | Directory | parameter | bypasses | leading | include | allows | before | COOKIE | scheme | remote | files | which | via |

Directory traversal vulnerability in phpMyVisites before 2.2 allows remote attackers to include arbitrary files via leading ".." sequences on the pmv_ck_view COOKIE parameter, which bypasses the protection scheme.


Multiple cross-site request forgery (CSRF) vuln

cross-site | Multiple | forgery | request |

Multiple cross-site request forgery (CSRF) vulnerabilities in TKS Banking Solutions ePortfolio 1.0 Java allow remote attackers to perform unspecified restricted actions in the context of certain accounts by bypassing the client-side protection scheme.


Directory traversal vulnerability in Microsoft

vulnerability | attackers | sequences | arbitrary | Microsoft | traversal | Directory | Explorer | Internet | possibly | related | certain | remote | allows | scheme | "%5C" | files | read | via | URI |

Directory traversal vulnerability in Microsoft Internet Explorer allows remote attackers to read arbitrary files via directory traversal sequences in a URI with a certain scheme, possibly related to "..%5C" (encoded backslash) sequences.


** DISPUTED ** Microsoft Internet Explorer 6 e

character | Microsoft | arbitrary | "script" | sequence | Internet | DISPUTED | executes | Explorer | ending | script | scheme | using | names | URIs | web |

** DISPUTED ** Microsoft Internet Explorer 6 executes web script from URIs of arbitrary scheme names ending with the "script" character sequence, using the (1) vbscript: handler for scheme names with 7 through 9 characters, and the (2) javascript: handler for scheme names with 10 or more characters, which might allow remote attackers to bypass certain XSS protection schemes. NOTE: other researchers dispute the significance of this issue, stating "this only works when typed in the address bar."


Opera 9.21 allows remote attackers to spoof the

Opera |

Opera 9.21 allows remote attackers to spoof the data: URI scheme in the address bar via a long URI with trailing whitespace, which prevents the beginning of the URI from being displayed.


konqueror/konq_combo.cc in Konqueror 3.5.7 allo

konqueror/konq_combocc | Konqueror |

konqueror/konq_combo.cc in Konqueror 3.5.7 allows remote attackers to spoof the data: URI scheme in the address bar via a long URI with trailing whitespace, which prevents the beginning of the URI from being displayed.


Software vulnerabilities results 1 to 20 of 60     
Page: 1234►