| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2005-4778 | 2.1 | The powersave daemon in SUSE Linux 10.0 before 20051007 has an unspecified "configuration problem," which allows local users to suspend the computer and possibly perform certain other unauthorized actions. | 2008-09-05 20:57:00 | 2005-12-31 05:00:00 |
| CVE-2005-4777 | 4.9 | Tashcom ASPEdit 2.9 stores the administration password (aka the FTP password) in cleartext in the registry, which might allow local users to view the password. | 2008-09-05 20:57:00 | 2005-12-31 05:00:00 |
| CVE-2005-4776 | 7.2 | Integer overflow in the FreeBSD compatibility code (freebsd_misc.c) in NetBSD-current, NetBSD-3, NetBSD-2.0, and NetBSD-2 before 20050913; and NetBSD-1.6 before 20050914; allows local users to cause a denial of service (heap corruption or system cras | 2008-09-05 20:57:00 | 2005-12-31 05:00:00 |
| CVE-2005-4775 | 5.0 | Michael Scholz and Sebastian Stein Contineo 2.0, when the admin account lacks an e-mail address attribute, displays the password hash in a warning upon page reload, which might allow remote attackers to view the hash. | 2008-09-05 20:57:00 | 2005-12-31 05:00:00 |
| CVE-2005-4772 | 6.4 | liby2util in Yet another Setup Tool (YaST) in SUSE Linux before 20051007 preserves permissions and ownerships when copying a remote repository, which might allow local users to read or modify sensitive files, possibly giving local users the ability t | 2008-09-05 20:57:00 | 2005-12-31 05:00:00 |
| CVE-2005-4771 | 4.6 | Trusted Mobility Agent PC Policy in Trust Digital Trusted Mobility Suite provides a cancel button that bypasses the domain-authentication prompt, which allows local users to sync a handheld (PDA) device despite a policy setting that sync is unauthori | 2008-09-05 20:57:00 | 2005-12-31 05:00:00 |
| CVE-2005-4770 | 7.5 | SQL injection vulnerability in an unspecified Accelerated Enterprise Solutions product, possibly Accelerated E Solutions, allows remote attackers to execute arbitrary SQL commands via the password parameter. NOTE: the provenance of this information | 2008-09-05 20:57:00 | 2005-12-31 05:00:00 |
| CVE-2005-4769 | 7.5 | SQL injection vulnerability in addrbook.php in Belchior Foundry vCard PRO 3.1 allows remote attackers to execute arbitrary SQL commands via the addr_id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely f | 2008-09-05 20:57:00 | 2005-12-31 05:00:00 |
| CVE-2005-4768 | 7.5 | SQL injection vulnerability in manage_account.php in Tux Racer TuxBank 0.7x and 0.8 allows remote attackers to execute arbitrary SQL commands via the id parameter in a manageaccount action to index.php. | 2008-09-05 20:57:00 | 2005-12-31 05:00:00 |
| CVE-2005-4767 | 5.1 | BEA WebLogic Server and WebLogic Express 8.1 SP5 and earlier, and 7.0 SP6 and earlier, when using username/password authentication, does not lock out a username after the maximum number of invalid login attempts, which makes it easier for remote atta | 2008-09-05 20:57:00 | 2005-12-31 05:00:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: