Page 5 of 45 results (0.021 seconds)

CVSS: 9.8EPSS: 1%CPEs: 11EXPL: 4

31 Dec 2002 — iPlanet Web Server Enterprise Edition and Netscape Enterprise Server 4.0 and 4.1 allows remote attackers to conduct HTTP Basic Authentication via the wp-force-auth Web Publisher command, which provides a distinct attack vector and may make it easier to conduct brute force password guessing without detection. • http://lists.virus.org/vulnwatch-0201/msg00008.html •

CVSS: 10.0EPSS: 0%CPEs: 6EXPL: 0

12 Mar 2001 — Insecure file permissions for Netscape FastTrack Server 2.x, Enterprise Server 2.0, and Proxy Server 2.5 in SCO UnixWare 7.0.x and 2.1.3 allow an attacker to gain root privileges. • ftp://ftp.sco.com/SSE/security_bulletins/SB-99.08a •

CVSS: 7.5EPSS: 3%CPEs: 1EXPL: 1

30 Jul 1999 — Default configuration of the search engine in Netscape Enterprise Server 3.5.1, and possibly other versions, allows remote attackers to read the source of JHTML files by specifying a search command using the HTML-tocrec-demo1.pat pattern file. • https://www.exploit-db.com/exploits/19443 •

CVSS: 7.5EPSS: 5%CPEs: 22EXPL: 0

26 Jun 1998 — Information from SSL-encrypted sessions via PKCS #1. • https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-002 • CWE-327: Use of a Broken or Risky Cryptographic Algorithm •

CVSS: 9.1EPSS: 13%CPEs: 11EXPL: 1

10 Dec 1996 — List of arbitrary files on Web host via nph-test-cgi script. • https://www.exploit-db.com/exploits/19536 •