Notify Technology - vulnerabilities (CVEs)

4 CVEs in 1 products, 0 in the last 30 days, newest from 2005-05-02.

Products

• Notifylink - 4 CVEs

Newest CVEs of Notify Technology

• CVE-2005-0812 - CVSS 5 (medium), 2005-05-02: The web interface in NotifyLink 3.0 displays passwords in cleartext on the administrative page, which could allow remote attackers or local users to obtain…
• CVE-2005-0811 - CVSS 4.6 (medium), 2005-05-02: The web interface in NotifyLink 3.0 does not properly restrict access to functions that have been disabled in the GUI, which allows remote authenticated users…
• CVE-2005-0810 - CVSS 7.5 (high), 2005-05-02: SQL injection vulnerability in NotifyLink before 3.0 allows remote attackers to execute arbitrary SQL commands via the URL.
• CVE-2005-0809 - CVSS 7.5 (high), 2005-05-02: NotifyLink, when configured for client key retrieval, allows remote attackers to obtain AES keys via a direct request to /hwp/get.asp, then uses a weak…