Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
notify technology notifylink enterprise server vulnerabilities and exploits
(subscribe to this query)
668
VMScore
CVE-2005-0809
NotifyLink, when configured for client key retrieval, allows remote malicious users to obtain AES keys via a direct request to /hwp/get.asp, then uses a weak encryption scheme (fixed byte reordering) to protect the key, which allows remote malicious users to obtain the key via a ...
Notify Technology Notifylink Enterprise Server
445
VMScore
CVE-2005-0812
The web interface in NotifyLink 3.0 displays passwords in cleartext on the administrative page, which could allow remote attackers or local users to obtain sensitive information.
Notify Technology Notifylink Enterprise Server
409
VMScore
CVE-2005-0811
The web interface in NotifyLink 3.0 does not properly restrict access to functions that have been disabled in the GUI, which allows remote authenticated users to bypass intended restrictions via a direct request to certain URLs.
Notify Technology Notifylink Enterprise Server
668
VMScore
CVE-2005-0810
SQL injection vulnerability in NotifyLink prior to 3.0 allows remote malicious users to execute arbitrary SQL commands via the URL.
Notify Technology Notifylink Enterprise Server
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322
cross-site request forgery
unauthorized
CVE-2024-33925
reflected XSS
CVE-2023-51580
CVE-2023-51579
CVE-2015-2051
CVE-2023-51609
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started