Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
notify technology notifylink enterprise server vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv2
CVE-2005-0809
NotifyLink, when configured for client key retrieval, allows remote malicious users to obtain AES keys via a direct request to /hwp/get.asp, then uses a weak encryption scheme (fixed byte reordering) to protect the key, which allows remote malicious users to obtain the key via a ...
Notify Technology Notifylink Enterprise Server
5
CVSSv2
CVE-2005-0812
The web interface in NotifyLink 3.0 displays passwords in cleartext on the administrative page, which could allow remote attackers or local users to obtain sensitive information.
Notify Technology Notifylink Enterprise Server
4.6
CVSSv2
CVE-2005-0811
The web interface in NotifyLink 3.0 does not properly restrict access to functions that have been disabled in the GUI, which allows remote authenticated users to bypass intended restrictions via a direct request to certain URLs.
Notify Technology Notifylink Enterprise Server
7.5
CVSSv2
CVE-2005-0810
SQL injection vulnerability in NotifyLink prior to 3.0 allows remote malicious users to execute arbitrary SQL commands via the URL.
Notify Technology Notifylink Enterprise Server
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injection
SSRF
buffer overflow
CVE-2023-28952
CVE-2023-41822
CVE-2024-27956
CVE-2023-7028
CVE-2024-34447
CVE-2024-34460
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started