Skip to content
OpenAdvisories

Archive

10 March 2005

Vulnerabilities first published on this day (UTC), newest first.

24 results · Feed

  • Unscored —

    BEA WebLogic Server and WebLogic Express 8.1 SP2 and earlier, and 7.0 SP4 and earlier, when using 2-way SSL with a cust…

  • Unscored —

    The Web Services fat client for BEA WebLogic Server and Express 7.0 SP4 and earlier, when using 2-way SSL and multiple …

  • Unscored —

    The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6…

  • Unscored —

    Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, allows remote attackers to…

  • Unscored —
    CVE-2004-1770 Public exploit EPSS 10%

    The login page for cPanel 9.1.0, and possibly other versions, allows remote attackers to execute arbitrary code via she…

  • Unscored —

    The kernel in Solaris 2.6, 7, 8, and 9 allows local users to gain privileges by loading arbitrary loadable kernel modul…

  • Unscored —

    Buffer overflow in CDE libDtSvc on HP-UX B.11.00, B.11.04, B.11.11, and B.11.22 allows local users to gain root privile…

  • Unscored —

    Unknown vulnerability in F-Secure Anti-Virus (FSAV) 4.52 for Linux before Hotfix 3 allows the Sober.D worm to bypass FA…

  • Unscored —

    BEA WebLogic Server and WebLogic Express version 8.1 up to SP2, 7.0 up to SP4, and 6.1 up to SP6 may store the database…

  • Unscored —

    Buffer overflow in hsrun.exe for HAHTsite Scenario Server 5.1 Patch 06 (build 91) allows remote attackers to cause a de…

  • Unscored —

    Off-by-one buffer overflow in ModSecurity (mod_security) 1.7.4 for Apache 2.x, when SecFilterScanPost is enabled, allow…

  • Unscored —

    BEA WebLogic Server and Express 8.1, SP1 and earlier, stores the administrator password in cleartext in config.xml, whi…

  • Unscored —

    Unknown vulnerability in Ethereal 0.8.13 to 0.10.2 allows attackers to cause a denial of service (segmentation fault) v…

  • Unscored —

    The default installation of NetScreen-Security Manager before Feature Pack 1 does not enable encryption for communicati…

  • Unscored —

    The character converters in the Spamhunter and Language ID modules for Symantec Brightmail AntiSpam 6.0.1 before patch …

  • Unscored —
    CVE-2004-1769 Public exploit EPSS 35%

    The "Allow cPanel users to reset their password via email" feature in cPanel 9.1.0 build 34 and earlier, including 8.x,…

  • Unscored —

    Buffer overflow in the IMAP daemon (IMAP4d32.exe) for Ipswitch Collaboration Suite (ICS) before 8.15 Hotfix 1 allows re…

  • Unscored —
    CVE-2003-1096 Public exploit EPSS 10%

    The Cisco LEAP challenge/response authentication mechanism uses passwords in a way that is susceptible to dictionary at…

  • Unscored —

    BEA WebLogic Server and Express version 7.0 SP3 may follow certain code execution paths that result in an incorrect cur…

  • Unscored —
    CVE-2003-1090 Public exploit EPSS 12%

    Buffer overflow in AbsoluteTelnet before 2.12 RC10 allows remote attackers to execute arbitrary code via a long window …

  • Unscored —

    BEA WebLogic Server 6.1, 7.0 and 7.0.0.1, when routing messages to a JMS target domain that is inaccessible, may leak t…

  • Unscored —

    BEA WebLogic Server and Express 7.0 and 7.0.0.1, when using "memory" session persistence for web applications, does not…

  • Unscored —
    CVE-2003-1091 Public exploit

    Integer overflow in MP3Broadcaster for Apple QuickTime/Darwin Streaming Server 4.1.3 allows remote attackers to cause a…

  • Unscored —
    CVE-2003-1092 Public exploit

    Unknown vulnerability in the "Automatic File Content Type Recognition (AFCTR) Tool version of the file package before 3…