NVD List
Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
---|---|---|---|---|---|---|---|---|---|
65603 | CVE-2006-7060 | cindex.php in Scriptsez.net E-Dating System allows remote attackers to obtain the full path via an invalid id parameter in a dologin action, which leaks the path in an error message. | 2 | 5 | Medium | 2016-12-20 | 2008-09-05 | View | |
579 | CVE-2008-0604 | The LDAP authentication feature in XLight FTP Server before 2.83, when used with some unspecified LDAP servers, does not check for blank passwords, which allows remote attackers to bypass intended access restrictions. | 2 | 6.8 | Medium | 2017-01-03 | 2008-09-05 | View | |
66371 | CVE-2005-0620 | Einstein 1.0 stores credit card information in plaintext in the world-readable wallets.dat file, which allows local users to steal the information. | 2 | 2.1 | Low | 2017-01-03 | 2008-09-05 | View | |
1347 | CVE-2008-1390 | The AsteriskGUI HTTP server in Asterisk Open Source 1.4.x before 1.4.19-rc3 and 1.6.x before 1.6.0-beta6, Business Edition C.x.x before C.1.6, AsteriskNOW before 1.0.2, Appliance Developer Kit before revision 104704, and s800i 1.0.x before 1.1.0.2 generates insufficiently random manager ID values, which makes it easier for remote attackers to hijack a manager session via a series of ID guesses. | 2 | 9.3 | High | 2017-01-03 | 2008-09-05 | View | |
67139 | CVE-2005-1400 | The i386_get_ldt system call in FreeBSD 4.7 to 4.11 and 5.x to 5.4 allows local users to access sensitive kernel memory via arguments with negative or very large values. | 2 | 4.6 | Medium | 2017-01-03 | 2008-09-05 | View |
Page 422 of 17672, showing 5 records out of 88360 total, starting on record 2106, ending on 2110