Searching technologies software vulnerabilities

Hughes Technologies Virtual DNS (VDNS) Server 1

Technologies | Virtual | Hughes | DNS |

Hughes Technologies Virtual DNS (VDNS) Server 1.0 allows a remote attacker to create a denial of service by connecting to port 6070, sending some data, and closing the connection.


IMAP server in Alt-N Technologies MDaemon 3.5.6

Technologies | MDaemon | server | Alt-N | IMAP |

IMAP server in Alt-N Technologies MDaemon 3.5.6 allows a local user to cause a denial of service (hang) via long (1) SELECT or (2) EXAMINE commands.


Format string vulnerability in (1) sastcpd in S

vulnerability | string | Format |

Format string vulnerability in (1) sastcpd in SAS/Base 8.0 and 8.1 or (2) objspawn in SAS/Integration Technologies 8.0 and 8.1 allows local users to execute arbitrary code via format specifiers in a command line argument.


Buffer overflow in (1) sastcpd in SAS/Base 8.0

overflow | Buffer |

Buffer overflow in (1) sastcpd in SAS/Base 8.0 and 8.1 or (2) objspawn in SAS/Integration Technologies 8.0 and 8.1 allows local users to execute arbitrary code via large command line argument.


Cross-site scripting (XSS) vulnerability in the

Cross-site | scripting |

Cross-site scripting (XSS) vulnerability in the web-based message board in Prospero Technologies allows remote attackers to inject arbitrary web script or HTML via a message board post.


Alt-N Technologies MDaemon 5.0.5.0 and earlier

Technologies | MDaemon | Alt-N |

Alt-N Technologies MDaemon 5.0.5.0 and earlier creates a default MDaemon mail account with a password of MServer, which could allow remote attackers to send anonymous email.


Buffer overflow in WorldClient.cgi in WorldClie

WorldClientcgi | Technologies | WorldClient | overflow | MDaemon | Buffer | Alt-N |

Buffer overflow in WorldClient.cgi in WorldClient in Alt-N Technologies MDaemon 5.0.5.0 and earlier allows local users to execute arbitrary code via a long folder name (NewFolder parameter).


Directory traversal vulnerability in WorldClien

WorldClientcgi | vulnerability | Technologies | WorldClient | traversal | Directory | MDaemon | Alt-N |

Directory traversal vulnerability in WorldClient.cgi in WorldClient for Alt-N Technologies MDaemon 5.0.5.0 and earlier allows local users to delete arbitrary files via a ".." (dot dot) in the Attachments parameter.


Digi-Net Technologies DigiChat 3.5 allows chat

Technologies | addresses | parameter | "Showip" | Digi-Net | DigiChat | applet | allows | obtain | users | other | chat | via |

Digi-Net Technologies DigiChat 3.5 allows chat users to obtain the IP addresses of other chat users via a "Showip" parameter in the chat applet.


The Hawking Technologies HAR11A modem/router al

modem/router | Technologies | information | connecting | attackers | sensitive | Hawking | obtain | HAR11A | allows | remote | port |

The Hawking Technologies HAR11A modem/router allows remote attackers to obtain sensitive information by connecting to port 254, which displays a management interface and information on established connections.


The GUI in Alt-N Technologies MDaemon 7.2 and e

Technologies | privileges | NOTEPADEXE | including | processes | executes | physical | MDaemon | earlier | access | allows | create | SYSTEM | child | which | Alt-N | local | users | files | gain | such | new | GUI |

The GUI in Alt-N Technologies MDaemon 7.2 and earlier, including 6.8, executes child processes such as NOTEPAD.EXE with SYSTEM privileges when users create new files, which allows local users with physical access to gain privileges.


Cross-site scripting (XSS) vulnerability in Kry

Cross-site | scripting |

Cross-site scripting (XSS) vulnerability in Kryloff Technologies Subject Search Server (SSServer) 1.1 allows remote attackers to inject arbitrary web script or HTML via the "Search For" field.


SQL injection vulnerability in article.php in P

vulnerability | Technologies | articlephp | Pineapple | injection | Lore | SQL |

SQL injection vulnerability in article.php in Pineapple Technologies Lore 1.5.4 allows remote attackers to execute arbitrary SQL commands via the id parameter.


SQL injection vulnerability in comment.php in P

vulnerability | Technologies | commentphp | Pineapple | injection | Lore | SQL |

SQL injection vulnerability in comment.php in Pineapple Technologies Lore 1.5.6 and earlier allows remote attackers to execute arbitrary SQL commands via the article_id parameter.


SQL injection vulnerability in index.php in Inf

vulnerability | Technologies | injection | Infinite | indexphp | Core | SQL |

SQL injection vulnerability in index.php in Infinite Core Technologies (ICT) 1.0 Gold and earlier allows remote attackers to execute arbitrary SQL commands via the post parameter.


Multiple unspecified vulnerabilities in MDaemon

vulnerabilities | Technologies | WorldClient | unspecified | Multiple | MDaemon | before | Alt-N |

Multiple unspecified vulnerabilities in MDaemon and WorldClient in Alt-N Technologies MDaemon before 9.50 allow attackers to cause a denial of service (memory consumption) via unspecified vectors resulting in memory leaks.


Unspecified vulnerability in WorldClient in Alt

vulnerability | Technologies | WorldClient | Unspecified | MDaemon | before | Alt-N |

Unspecified vulnerability in WorldClient in Alt-N Technologies MDaemon before 9.50 has unknown impact and attack vectors related to a "JavaScript exploit."


PassGo SSO Plus 2.1.0.32, and probably earlier

PassGo | Plus | SSO |

PassGo SSO Plus 2.1.0.32, and probably earlier versions, uses insecure permissions (Everyone/Full Control) for the PassGo Technologies directory, which allows local users to gain privileges by modifying critical programs.


Multiple cross-site scripting (XSS) vulnerabili

cross-site | scripting | Multiple |

Multiple cross-site scripting (XSS) vulnerabilities in default.asp in PWP Technologies The Classified Ad System allow remote attackers to inject arbitrary web script or HTML via the (1) cat or (2) main parameter.


Unspecified vulnerability in DomainPOP in Alt-N

vulnerability | Technologies | Unspecified | DomainPOP | MDaemon | before | Alt-N |

Unspecified vulnerability in DomainPOP in Alt-N Technologies MDaemon before 9.61 allows remote attackers to cause a denial of service (crash) via malformed messages.


Software vulnerabilities results 1 to 20 of 41     
Page: 123►