Vendor archive

demarc_security CVEs

Beta · best-effort

2 CVEs tagged to vendor demarc_security — 1 Critical, 1 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2003-0340

Published May 21, 2003

Demarc Puresecure 1.6 stores authentication information for the logging server in plaintext, which allows attackers to steal login names and passwords to gain privileges.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2002-0539

Published Jul 3, 2002

Demarc PureSecure 1.05 allows remote attackers to gain administrative privileges via a SQL injection attack in a session ID that is stored in the s_key cookie.

CVSS 10.0 · Critical

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1