Page 2 of 15 results (0.000 seconds)

CVSS: 9.8EPSS: 1%CPEs: 11EXPL: 4

31 Dec 2002 — iPlanet Web Server Enterprise Edition and Netscape Enterprise Server 4.0 and 4.1 allows remote attackers to conduct HTTP Basic Authentication via the wp-force-auth Web Publisher command, which provides a distinct attack vector and may make it easier to conduct brute force password guessing without detection. • http://lists.virus.org/vulnwatch-0201/msg00008.html •

CVSS: 7.5EPSS: 1%CPEs: 9EXPL: 2

31 Dec 2002 — The Web Publishing feature in Netscape Enterprise Server 3.x and iPlanet Web Server 4.x allows remote attackers to cause a denial of service (crash) via a wp-html-rend request. • http://cert.uni-stuttgart.de/archive/vulnwatch/2002/01/msg00007.html •

CVSS: 9.1EPSS: 7%CPEs: 2EXPL: 3

04 Apr 2001 — The Web Publishing feature in Netscape Enterprise Server 4.x and earlier allows remote attackers to list arbitrary directories under the web server root via the INDEX command. • https://www.exploit-db.com/exploits/20591 •

CVSS: 7.5EPSS: 5%CPEs: 22EXPL: 0

26 Jun 1998 — Information from SSL-encrypted sessions via PKCS #1. • https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-002 • CWE-327: Use of a Broken or Risky Cryptographic Algorithm •

CVSS: 9.1EPSS: 1%CPEs: 6EXPL: 0

06 Feb 1998 — Some web servers under Microsoft Windows allow remote attackers to bypass access restrictions for files with long file names. • https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0012 •