Archive
September 2004
Vulnerabilities first published in this month (UTC), newest first.
563 results · Feed
-
Unscored —
Format string vulnerability in the CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.…
-
Unscored —
index.php in gBook 1.4 allows remote attackers to bypass authentication and gain administrative privileges by setting t…
-
Unscored —
w3m before 0.3.2.2 does not properly escape HTML tags in the ALT attribute of an IMG tag, which could allow remote atta…
-
Unscored —
Unknown vulnerability in Sympoll 1.2 allows remote attackers to read arbitrary files when register_globals is enabled, …
-
Unscored —
Buffer overflow in munpack in mpack 1.5 and earlier allows remote attackers to cause a denial of service and possibly e…
-
Unscored —CVE-2002-1327 EPSS 23%
Buffer overflow in the Windows Shell function in Microsoft Windows XP allows remote attackers to execute arbitrary code…
-
Unscored —
Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote attackers …
-
Unscored —CVE-2002-1436 Public exploit
The web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to execute arbitrary Perl co…
-
Medium —
Apache Tomcat Source Code Disclosure
The default servlet (org.apache.catalina.servlets.DefaultServlet) in Tomcat 4.0.4 and 4.1.10 and earlier allows remote attackers to read source code for server files via a direct request to the servlet.
-
Unscored —
A patch for shadow-utils 20000902 causes the useradd command to create a mail spool files with read/write privileges of…
-
Unscored —
mv in IRIX 6.5 creates a directory with world-writable permissions while moving a directory, which could allow local us…
-
Unscored —
print_all_bug_page.php in Mantis 0.17.3 and earlier does not verify the limit_reporters option, which allows remote att…
-
Unscored —
Mozilla 1.1 and earlier, and Mozilla-based browsers such as Netscape and Galeon, set the document referrer too quickly …
-
Unscored —CVE-2002-1242 Public exploit
SQL injection vulnerability in PHP-Nuke before 6.0 allows remote authenticated users to modify the database and gain pr…
-
Unscored —
Buffer overflow in DSC 3.0 parser from GSview, as used in KGhostView in KDE 1.1 and KDE 3.0.3a, may allow attackers to …
-
Unscored —
Macromedia Flash Player before 6.0.65.0 allows remote attackers to execute arbitrary code via certain malformed data he…
-
Unscored —
The BGP decoding routines in tcpdump 3.6.x before 3.7 do not properly copy data, which allows remote attackers to cause…
-
Unscored —
RCONAG6 for Novell Netware SP2, while running RconJ in secure mode, allows remote attackers to bypass authentication us…
-
Unscored —
dump_smutil.sh in IBM AIX allows local users to overwrite arbitrary files via a symlink attack on temporary files.
-
Unscored —
MsmMask.exe in MondoSearch 4.4 allows remote attackers to obtain the source code of scripts via the mask parameter.
-
Unscored —CVE-2002-1147 Public exploit
The HTTP administration interface for HP Procurve 4000M Switch firmware before C.09.16, with stacking features and remo…
-
Unscored —
anlgform.pl in Analog before 5.23 does not restrict access to the PROGRESSFREQ progress update command, which allows re…
-
Unscored —CVE-1999-0718 Public exploit
IBM GINA, when used for OS/2 domain authentication of Windows NT users, allows local users to gain administrator privil…
-
Unscored —
Windows NT searches a user's home directory (%systemroot% by default) before other directories to find critical program…
-
Unscored —
The PATH in Windows NT includes the current working directory (.), which could allow local users to gain privileges by …
-
Unscored —CVE-1999-1201 EPSS 14%
Windows 95 and Windows 98 systems, when configured with multiple TCP/IP stacks bound to the same MAC address, allow rem…
-
Unscored —
Apache WWW server 1.3.1 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via a la…
-
Unscored —CVE-1999-1397 EPSS 12%
Index Server 2.0 on IIS 4.0 stores physical path information in the ContentIndex\Catalogs subkey of the AllowedPaths re…
-
Unscored —
IIS 3.x and 4.x does not distinguish between pages requiring encryption and those that do not, which allows remote atta…
-
Unscored —
sadc in IBM AIX 4.1 through 4.3, when called from programs such as timex that are setgid adm, allows local users to ove…
-
Unscored —
Microsoft SQL Server 6.5 uses weak encryption for the password for the SQLExecutiveCmdExec account and stores it in an …
-
Unscored —
A configuration problem in the Ad Server Sample directory (AdSamples) in Microsoft Site Server 3.0 allows an attacker t…
-
Unscored —
Buffer overflow in Netscape Navigator/Communicator 4.7 for Windows 95 and Windows 98 allows remote attackers to cause a…
-
High 7.5
Off-by-one error in NcFTPd FTP server before 2.4.1 allows a remote attacker to cause a denial of service (crash) via a …
-
Unscored —
Unknown vulnerability in Generic-NQS (GNQS) allows local users to gain root privileges.
-
Unscored —
Bajie HTTP web server 0.30a allows remote attackers to read arbitrary files via a URL that contains a "....", a variant…
-
Unscored —
The logrotate script for OpenLDAP before 1.2.11 in Conectiva Linux sends an improper signal to the kernel log daemon (k…
-
Unscored —CVE-2000-0797 Public exploit
Buffer overflow in gr_osview in IRIX 6.2 and 6.3 allows local users to gain privileges via a long -D option.
-
Unscored —
Buffer overflow in HTTP server on the WatchGuard SOHO firewall allows remote attackers to cause a denial of service and…
-
Unscored —
HTTP server on the WatchGuard SOHO firewall does not properly restrict access to administrative functions such as passw…