Vulnerabilities > Notify Technology

DATE CVE VULNERABILITY TITLE RISK
2005-05-02 CVE-2005-0812 Multiple vulnerability in Notify Technology Notifylink Enterpriseserver
The web interface in NotifyLink 3.0 displays passwords in cleartext on the administrative page, which could allow remote attackers or local users to obtain sensitive information.
network
low complexity
notify-technology
5.0
2005-05-02 CVE-2005-0811 Multiple vulnerability in Notify Technology Notifylink Enterpriseserver
The web interface in NotifyLink 3.0 does not properly restrict access to functions that have been disabled in the GUI, which allows remote authenticated users to bypass intended restrictions via a direct request to certain URLs.
local
low complexity
notify-technology
4.6
2005-05-02 CVE-2005-0810 Multiple vulnerability in Notify Technology Notifylink Enterpriseserver
SQL injection vulnerability in NotifyLink before 3.0 allows remote attackers to execute arbitrary SQL commands via the URL.
network
low complexity
notify-technology
7.5
2005-05-02 CVE-2005-0809 Multiple vulnerability in Notify Technology Notifylink Enterpriseserver
NotifyLink, when configured for client key retrieval, allows remote attackers to obtain AES keys via a direct request to /hwp/get.asp, then uses a weak encryption scheme (fixed byte reordering) to protect the key, which allows remote attackers to obtain the key via a brute force attack.
network
low complexity
notify-technology
7.5