NVD List
| Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
|---|---|---|---|---|---|---|---|---|---|
| 73718 | CVE-2003-0601 | Workgroup Manager in Apple Mac OS X Server 10.2 through 10.2.6 does not disable a password for a new account before it is saved for the first time, which allows remote attackers to gain unauthorized access via the new account before it is saved. | 2 | 7.5 | High | 2017-07-18 | 2017-07-10 | View | |
| 79588 | CVE-2002-0583 | WorkforceROI Xpede 4.1 uses a small random namespace (5 alphanumeric characters) for temporary expense claim reports in the /reports/temp directory, which allows remote attackers to read the reports via a brute force attack. | 2 | 5 | Medium | 2017-01-05 | 2008-09-05 | View | |
| 79587 | CVE-2002-0582 | WorkforceROI Xpede 4.1 stores temporary expense claim reports in a world-readable and indexable /reports/temp directory, which allows remote attackers to read the reports by accessing the directory. | 2 | 5 | Medium | 2017-01-05 | 2008-09-05 | View | |
| 79589 | CVE-2002-0584 | WorkforceROI Xpede 4.1 allows remote attackers to read user timesheets by modifying the TSN ID parameter to the ts_app_process.asp script, which is easily guessable because it is incremented by 1 for each new timesheet. | 2 | 5 | Medium | 2017-01-05 | 2008-09-05 | View | |
| 79585 | CVE-2002-0580 | WorkforceROI Xpede 4.1 allows remote attackers to obtain the database username via a request to datasource.asp, which leaks the username in a form and allows the attacker to more easily conduct brute force password guessing attacks. | 2 | 7.5 | High | 2017-01-05 | 2008-09-05 | View |
Page 161 of 17672, showing 5 records out of 88360 total, starting on record 801, ending on 805
