Archive
6 January 2005
Vulnerabilities first published on this day (UTC), newest first.
27 results · Feed
-
Unscored —
A bug in the HTML parser in a certain Microsoft HTML library, as used in various third party products, may allow remote…
-
Unscored —
The getItemInfoByAtom function in the ActiveX control for Microsoft Windows Media Player 9.0 returns a 0 if the file do…
-
Unscored —
The triggers in Oracle 9i and 10g allow local users to gain privileges by using a sequence of partially privileged acti…
-
Unscored —CVE-2004-1319 EPSS 27%
The DHTML Edit Control (dhtmled.ocx) allows remote attackers to inject arbitrary web script into other domains by setti…
-
Unscored —
The configuration backup in Asante FM2008 running firmware 1.06 stores the username and password in cleartext, which co…
-
Unscored —CVE-2004-1330 Public exploit
Buffer overflow in paginit in AIX 5.1 through 5.3 allows local users to execute arbitrary code via a long username.
-
Unscored —
Cisco Unity 2.x, 3.x, and 4.x, when integrated with Microsoft Exchange, has several hard coded usernames and passwords,…
-
Unscored —CVE-2004-1326 Public exploit
Buffer overflow in dxterm in Ultrix 4.5 allows local users to execute arbitrary code via a long -setup parameter.
-
Unscored —
The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windo…
-
Unscored —
SQL injection vulnerability in the (1) MDSYS.SDO_GEOM_TRIG_INS1 and (2) MDSYS.SDO_LRS_TRIG_INS default triggers in Orac…
-
Unscored —
The POSIX Capability Linux Security Module (LSM) for Linux kernel 2.6 does not properly handle the credentials of a pro…
-
Unscored —CVE-2004-1335 Public exploit
Memory leak in the ip_options_get function in the Linux kernel before 2.6.10 allows local users to cause a denial of se…
-
Unscored —
Asante FM2008 running firmware 1.06 is shipped with a default username and password, which could allow remote attackers…
-
Unscored —
The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in th…
-
Unscored —
Unknown vulnerability in newgrp in HP-UX B.11.00, B.11.04, and B.11.11 allows local users to gain elevated privileges.
-
Unscored —CVE-2004-1331 EPSS 19%
The execCommand method in Microsoft Internet Explorer 6.0 SP2 allows remote attackers to bypass the "File Download - Se…
-
Unscored —
Stack-based buffer overflow in the FTP daemon in HP-UX 11.11i, with the -v (debug) option enabled, allows remote attack…
-
Unscored —CVE-2004-1329 Public exploit
Untrusted execution path vulnerability in the diag commands (1) lsmcode, (2) diag_exec, (3) invscout, and (4) invscoutd…
-
Unscored —
Buffer overflow in the LDAP component for Netscape Directory Server (NDS) 3.6 on HP-UX and other operating systems allo…
-
Unscored —
Integer overflow in the ip_options_get function in the Linux kernel before 2.6.10 allows local users to cause a denial …
-
Unscored —
Multiple syscalls in the compat subsystem for NetBSD before 2.0 allow local users to cause a denial of service (kernel …
-
Unscored —CVE-2004-1333 Public exploit
Integer overflow in the vc_resize function in the Linux kernel 2.4 and 2.6 before 2.6.10 allows local users to cause a …
-
Unscored —
Cross-site scripting (XSS) vulnerability in namazu.cgi for Namazu 2.0.13 and earlier allows remote attackers to inject …
-
Unscored —CVE-2004-1327 Public exploit
Buffer overflow in Crystal FTP Client 2.8 allows remote malicious servers to execute arbitrary code via a response to a…
-
Unscored —
The xdvizilla script in tetex-bin 2.0.2 creates temporary files with predictable file names, which allows local users t…
-
Unscored —CVE-2005-0021 Public exploit
Multiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via (1) an IPv6 address wit…
-
Unscored —
Buffer overflow in the spa_base64_to_bits function in Exim before 4.43, as originally obtained from Samba code, and as …