| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2001-1152 | 7.5 | Baltimore Technologies WEBsweeper 4.02, when used to manage URL blacklists, allows remote attackers to bypass blacklist restrictions and connect to unauthorized web servers by modifying the requested URL, including (1) a // (double slash), (2) a /SUB | 2008-09-05 20:25:00 | 2001-09-05 04:00:00 |
| CVE-2001-0978 | 7.5 | login in HP-UX 10.26 does not record failed login attempts in /var/adm/btmp, which could allow attackers to conduct brute force password guessing attacks without being detected or observed using the lastb program. | 2008-09-05 20:25:00 | 2001-09-03 04:00:00 |
| CVE-2001-1169 | 7.5 | keyinit in S/Key does not require authentication to initialize a one-time password sequence, which allows an attacker who has gained privileges to a user account to create new one-time passwords for use in other activities that may use S/Key authenti | 2008-09-05 20:25:00 | 2001-09-02 04:00:00 |
| CVE-2001-1061 | 10.0 | Vulnerability in lsmcode in unknown versions of AIX, possibly related to a usage error. | 2008-09-05 20:25:00 | 2001-08-31 04:00:00 |
| CVE-2001-1040 | 6.4 | HP LaserJet, and possibly other JetDirect devices, resets the admin password when the device is turned off, which could allow remote attackers to access the device without the password. | 2008-09-05 20:25:00 | 2001-08-31 04:00:00 |
| CVE-2001-1039 | 7.5 | The JetAdmin web interface for HP JetDirect does not set a password for the telnet interface when the admin password is changed, which allows remote attackers to gain access to the printer. | 2008-09-05 20:25:00 | 2001-08-31 04:00:00 |
| CVE-2001-1025 | 10.0 | PHP-Nuke 5.x allows remote attackers to perform arbitrary SQL operations by modifying the "prefix" variable when calling any scripts that do not already define the prefix variable (e.g., by including mainfile.php), such as article.php. | 2008-09-05 20:25:00 | 2001-08-31 04:00:00 |
| CVE-2001-1008 | 7.5 | Java Plugin 1.4 for JRE 1.3 executes signed applets even if the certificate is expired, which could allow remote attackers to conduct unauthorized activities via an applet that has been signed by an expired certificate. | 2008-09-05 20:25:00 | 2001-08-31 04:00:00 |
| CVE-2001-1007 | 5.0 | Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses a small keyspace for device keys and does not impose a delay when an incorrect key is entered, which allows attackers to more quickly guess the key via a brute force attack. | 2008-09-05 20:25:00 | 2001-08-31 04:00:00 |
| CVE-2001-1006 | 5.0 | Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA does not encrypt sensitive files and relies solely on its password feature to restrict access, which allows an attacker to read the files using a different application. | 2008-09-05 20:25:00 | 2001-08-31 04:00:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40089
Zapisa po stranici: