Archive
26 July 2002
Vulnerabilities first published on this day (UTC), newest first.
50 results · Feed
-
Unscored —
The PostgreSQL authentication modules (1) mod_auth_pgsql 0.9.5, and (2) mod_auth_pgsql_sys 0.9.4, allow remote attacker…
-
Unscored —
namerslv in AIX 4.3.3 core dumps when called with a very long argument, possibly as a result of a buffer overflow.
-
Unscored —
Buffer overflow in the progressive reader for libpng 1.2.x before 1.2.4, and 1.0.x before 1.0.14, allows attackers to c…
-
Unscored —CVE-2002-0769 Public exploit
The web-based configuration interface for the Cisco ATA 186 Analog Telephone Adaptor allows remote attackers to bypass …
-
Unscored —CVE-2002-0786 Public exploit
iCon administrative web server for Critical Path inJoin Directory Server 4.0 allows authenticated inJoin administrators…
-
Unscored —
Buffer overflow in Talentsoft Web+ 5.0 allows remote attackers to execute arbitrary code via an HTTP request with a lon…
-
Unscored —
Buffer overflow in uucp in AIX 4.3.3.
-
Unscored —CVE-2002-0787 Public exploit
Cross-site scripting vulnerabilities in iCon administrative web server for Critical Path inJoin Directory Server 4.0 al…
-
Unscored —
Directory traversal vulnerability in Lysias Lidik web server 0.7b allows remote attackers to list directories via an HT…
-
Unscored —CVE-2002-0773 Public exploit
imp_rootdir.asp for Hosting Controller allows remote attackers to copy or delete arbitrary files and directories via a …
-
Unscored —
SQL injection vulnerability in stored procedures for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000…
-
Unscored —
Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 (MS…
-
Unscored —
IP/IPX gateway for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service via a connection…
-
Unscored —CVE-2002-0731 Public exploit
Cross-site scripting vulnerability in demonstration scripts for vqServer allows remote attackers to execute arbitrary s…
-
Unscored —CVE-2002-0771 Public exploit
Cross-site scripting vulnerability in viewcvs.cgi for ViewCVS 0.9.2 allows remote attackers to inject script and steal …
-
Unscored —
Vulnerability in template.dhcpo in AIX 4.3.3 related to an insecure linker argument.
-
Unscored —
CGIscript.net csMailto.cgi program exports feedback to a file that is accessible from the web document root, which coul…
-
Unscored —
(1) Webmin 0.96 and (2) Usermin 0.90 with password timeouts enabled allow local and possibly remote attackers to bypass…
-
Unscored —
Format string vulnerability in the logging() function in C-Note Squid LDAP authentication module (squid_auth_LDAP) 2.0.…
-
Unscored —CVE-2002-0770 Public exploit
Quake 2 (Q2) server 3.20 and 3.21 allows remote attackers to obtain sensitive server cvar variables, obtain directory l…
-
Unscored —
CGIscript.net csMailto.cgi program allows remote attackers to read arbitrary files by specifying the target filename in…
-
Unscored —
Novell BorderManager 3.5 with PAT (Port-Address Translate) enabled allows remote attackers to cause a denial of service…
-
Unscored —
mail and mailx in AIX 4.3.3 core dump when called with a very long argument, an indication of a buffer overflow.
-
Unscored —
Buffer overflow in the MIB parsing component of mibiisa for Solaris 5.6 through 8 allows remote attackers to gain root …
-
Unscored —
Novell Netware FTP server NWFTPD before 5.02r allows remote attackers to cause a denial of service (CPU consumption) vi…
-
Unscored —CVE-2002-0732 Public exploit
Cross-site scripting vulnerability in MyGuestbook 1.0 allows remote attackers to execute arbitrary script or inject HTM…
-
Unscored —
The web management interface for Cisco Content Service Switch (CSS) 11000 switches allows remote attackers to cause a d…
-
Unscored —
FTP proxy server for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service (network conne…
-
Unscored —CVE-2002-0730 Public exploit
Cross-site scripting vulnerability in guestbook.pl for Philip Chinery's Guestbook 1.1 allows remote attackers to execut…
-
Unscored —
Cross-site scripting in PostCalendar 3.02 allows remote attackers to insert arbitrary HTML and script, and steal cookie…
-
Unscored —
BadBlue 1.7.0 allows remote attackers to list the contents of directories via a URL with an encoded '%' character at th…
-
Unscored —CVE-2002-0772 Public exploit
Directory traversal vulnerability in dsnmanager.asp for Hosting Controller allows remote attackers to read arbitrary fi…
-
Unscored —CVE-2002-0783 Public exploit
Opera 6.01, 6.0, and 5.12 allows remote attackers to execute arbitrary JavaScript in the security context of other site…
-
Unscored —
Hosting Controller creates a default user AdvWebadmin with a default password, which could allow remote attackers to ga…
-
Unscored —CVE-2002-0793 Public exploit
Hard link and possibly symbolic link following vulnerabilities in QNX RTOS 4.25 (aka QNX4) allow local users to overwri…
-
Unscored —
Phorum 3.3.2a allows remote attackers to execute arbitrary commands via an HTTP request to (1) plugin.php, (2) admin.ph…
-
Unscored —CVE-2002-0767 Public exploit
simpleinit on Linux systems does not close a read/write FIFO file descriptor before creating a child process, which all…
-
Unscored —
CGIscript.net csMailto.cgi program allows remote attackers to use csMailto as a "spam proxy" and send mail to arbitrary…
-
Unscored —
Buffer overflow in YoungZSoft CMailServer 3.30 allows remote attackers to execute arbitrary code via a long USER argume…
-
Unscored —
RTSP proxy for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service via a GET request to…