Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The remote web management interface of Aprelium Technologies Abyss Web Server 1.1.2 and earlier does not log connection attempts to the web management port (9999), which allows remote attackers to mount brute force attacks on the administration console without detection.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft Windows文件保护数字签名确认漏洞
Vulnerability Description
微软的文件保护系统(WFP)是从Windows 2000开始提供的一种保护重要系统文件的机制，通过对文件数字签名的验证来确认文件未被改动。 有人发现该机制在实现上存在一个安全问题，可导致文件保护失效。 文件保护系统除了信任微软预设的那些数字签名证书外，也会信任任何根CA服务器发布的数字签名证书，并赖以保护操作系统文件和设备驱动，所以，入侵者可以自建一个使用根CA数字签名的的程序来欺骗文件保护系统。
CVSS Information
N/A
Vulnerability Type
N/A