Svi - CERT CVE

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2001-1540 5.0 IPRoute 0.973, 0.974 and 1.18 allows remote attackers to cause a denial of service via fragmented IP packets that split the TCP header. 2008-09-05 20:26:00
CVE-2001-1538 7.5 SpeedXess HA-120 DSL router has a default administrative password of "speedxess", which allows remote attackers to gain access. 2008-09-05 20:26:00
CVE-2001-1535 4.6 Slashcode 2.0 creates new accounts with an 8-character random password, which could allow local users to obtain session ID's from cookies and gain unauthorized access via a brute force attack. 2008-09-05 20:26:00
CVE-2001-1532 5.0 WebX stores authentication information in the HTTP_REFERER variable, which is included in URL links within bulletin board messages posted by users, which could allow remote attackers to hijack user sessions. 2008-09-05 20:26:00
CVE-2001-1531 7.5 Buffer overflow in Claris Emailer 2.0v2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an email attachment with a long filename. 2008-09-05 20:26:00
CVE-2001-1530 4.6 run.cgi in Webmin 0.80 and 0.88 creates temporary files with world-writable permissions, which allows local users to execute arbitrary commands. 2008-09-05 20:26:00
CVE-2001-1529 7.5 Buffer overflow in rpc.yppasswdd (yppasswd server) in AIX allows attackers to gain unauthorized access via a long string. NOTE: due to lack of details in the vendor advisory, it is not clear if this is the same issue as CVE-2001-0779. 2008-09-05 20:26:00
CVE-2001-1526 4.3 Cross-site scripting (XSS) vulnerability in the comments action in index.php in easyNews 1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the zeit parameter. 2008-09-05 20:26:00
CVE-2001-1525 5.0 Directory traversal vulnerability in the comments action in easyNews 1.5 and earlier allows remote attackers to modify news.dat, template.dat and possibly other files via a ".." in the cid parameter. 2008-09-05 20:26:00
CVE-2001-1523 4.3 Cross-site scripting (XSS) vulnerability in the DMOZGateway module for PHP-Nuke allows remote attackers to inject arbitrary web script or HTML via the topic parameter. 2008-09-05 20:26:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/40089
Zapisa po stranici: