Vulnerabilities (CVE)

Filtered by CWE-19
Total 222 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2005-4856 1 Ez 1 Ez Publish 2024-11-21 5.0 MEDIUM N/A
The admin interface in eZ publish 3.5 before 3.5.7, 3.6 before 3.6.5, 3.7 before 3.7.3, and 3.8 before 20051110 does not properly handle authorization errors, which allows remote attackers to obtain sensitive information and see the admin pagelayout and associated templates via a request with (1) "anything after the url" or (2) a "wrong url".
CVE-1999-0226 1 Microsoft 1 Windows Nt 2024-11-20 10.0 HIGH N/A
Windows NT TCP/IP processes fragmented IP packets improperly, causing a denial of service.