Archive
September 2004
Vulnerabilities first published in this month (UTC), newest first.
563 results · Feed
-
Unscored —CVE-2002-1222 Public exploit
Buffer overflow in the embedded HTTP server for Cisco Catalyst switches running CatOS 5.4 through 7.3 allows remote att…
-
Unscored —
Cross-site scripting vulnerability (XSS) in Internet Explorer 5.01 through 6.0 allows remote attackers to read and exec…
-
Unscored —CVE-2002-1260 EPSS 16%
The Java Database Connectivity (JDBC) APIs in Microsoft Virtual Machine (VM) 5.0.3805 and earlier allow remote attacker…
-
Unscored —
Cacti before 0.6.8 allows attackers to execute arbitrary commands via the "Data Input" option in console mode.
-
Unscored —
Cross-site scripting vulnerability (XSS) in the PHP interface for ht://Check 1.1 allows remote web servers to insert ar…
-
Unscored —
Microsoft SQL Server 7.0 and 2000, including Microsoft Data Engine (MSDE) 1.0 and Microsoft Desktop Engine (MSDE) 2000,…
-
Unscored —
Buffer overflow in the authentication function for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 a…
-
Unscored —CVE-2002-1320 Public exploit
Pine 4.44 and earlier allows remote attackers to cause a denial of service (core dump and failed restart) via an email …
-
Unscored —
Canna 3.6 and earlier does not properly validate requests, which allows remote attackers to cause a denial of service o…
-
Unscored —CVE-2002-1463 Public exploit
Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor Models 500/700/1000 and 1100/12…
-
Unscored —
Buffer overflow in cnd-program for mgetty before 1.1.29 allows remote attackers to cause a denial of service and possib…
-
Unscored —
The CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, does not properly close the …
-
Unscored —CVE-2002-1255 EPSS 14%
Microsoft Outlook 2002 allows remote attackers to cause a denial of service (repeated failure) via an email message wit…
-
Unscored —
Buffer overflow in Microsoft PPTP Service on Windows XP and Windows 2000 allows remote attackers to cause a denial of s…
-
Unscored —CVE-2002-1230 Public exploit
NetDDE Agent on Windows NT 4.0, 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute…
-
Unscored —
The getdbm procedure in ypxfrd allows local users to read arbitrary files, and remote attackers to read databases outsi…
-
Unscored —
The wizard in KGPG 0.6 through 0.8.2 does not properly provide the passphrase to gpg when creating new keys, which caus…
-
Unscored —CVE-2002-1239 Public exploit
QNX Neutrino RTOS 6.2.0 uses the PATH environment variable to find and execute the cp program while operating at raised…
-
Unscored —
The LAN-to-LAN IPSEC capability for Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.4, allows remote attackers to…
-
Unscored —
The Google toolbar 1.1.58 and earlier allows remote web sites to monitor a user's input into the toolbar via an "onkeyd…
-
Unscored —
faxspool in mgetty before 1.1.29 uses a world-writable spool directory for outgoing faxes, which allows local users to …
-
Unscored —CVE-2002-1211 Public exploit
Prometheus 6.0 and earlier allows remote attackers to execute arbitrary PHP code via a modified PROMETHEUS_LIBRARY_BASE…
-
Unscored —
Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18, allows local users to ex…
-
Unscored —
Memory leak in ypdb_open in yp_db.c for ypserv before 2.5 in the NIS package 3.9 and earlier allows remote attackers to…
-
Unscored —
Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, allows remote attackers to obtain potentially sensitive inform…
-
Unscored —
vim 6.0 and 6.1, and possibly other versions, allows attackers to execute arbitrary commands using the libcall feature …
-
Unscored —CVE-2002-1325 EPSS 14%
Microsoft Virtual Machine (VM) build 5.0.3805 and earlier allows remote attackers to determine a local user's username …
-
Unscored —
Buffer overflow in the irw_through function for Canna 3.5b2 and earlier allows local users to execute arbitrary code as…
-
Unscored —
Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to add printers without authentication…
-
Unscored —CVE-2002-1469 Public exploit
scponly does not properly verify the path when finding the (1) scp or (2) sftp-server programs, which could allow remot…
-
Unscored —
The upgrade of IRIX on Origin 3000 to 6.5.13 through 6.5.16 changes the MAC address of the system, which could modify i…
-
Unscored —
Abuse 2.00 and earlier allows local users to gain privileges via command line arguments that specify alternate Lisp scr…
-
Unscored —CVE-2002-1224 Public exploit
Directory traversal vulnerability in kpf for KDE 3.0.1 through KDE 3.0.3a allows remote attackers to read arbitrary fil…
-
Unscored —
The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x before 4.0.6, allows remote attackers to gain privileg…
-
Unscored —
Cross-site scripting (XSS) vulnerability in MHonArc before 2.5.14 allows remote attackers to inject arbitrary HTML into…
-
Unscored —CVE-2002-1530 Public exploit
The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows users to obtain usernames an…
-
Unscored —
The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x to 4.0.6, allows remote attackers to execute arbitrary…
-
Unscored —CVE-2002-1156 EPSS 15%
Apache 2.0.42 allows remote attackers to view the source code of a CGI script via a POST request to a directory with bo…
-
Unscored —
The web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to obtain Perl version infor…
-
Unscored —
The vncserver wrapper for vnc before 3.3.3r2-21 uses the rand() function instead of srand(), which causes vncserver to …