Skip to content
OpenAdvisories

Archive

28 March 2005

Vulnerabilities first published on this day (UTC), newest first.

26 results · Feed

  • Unscored —

    Stack-based buffer overflow in shar in GNU sharutils 4.2.1 allows local users to execute arbitrary code via a long -o c…

  • Unscored —

    Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via (1) long out…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the htp PL/SQL package for Oracle 9i Application Server (9iAS) allows remot…

  • Unscored —

    iPlanet Web Server Enterprise Edition and Netscape Enterprise Server 4.0 and 4.1 allows remote attackers to conduct HTT…

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability in compose.php in SquirrelMail before 1.2.3 allows remote attackers to …

  • Unscored —
    CVE-2002-1634 Public exploit EPSS 17%

    Novell NetWare 5.1 installs sample applications that allow remote attackers to obtain sensitive information via (1) nds…

  • Unscored —

    Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 allows remote attackers to obtain sensitive information via a …

  • Unscored —

    The quick login feature in Slash Slashcode does not redirect the user to an alternate URL when the wrong password is pr…

  • Unscored —
    CVE-2002-1656 Public exploit

    X-News (x_news) 1.1 and earlier allows attackers to authenticate as other users by obtaining the MD5 checksum of the pa…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Verity Search97 allows remote attackers to insert arbitrary web content and…

  • Unscored —

    PostgreSQL 7.2.1 and 7.2.2 allows local users to delete transaction log (pg_clog) data and cause a denial of service (d…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 allows …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in read_body.php in SquirrelMail before 1.2.3 allows remote attackers to execu…

  • Unscored —

    SSH Secure Shell for Servers 3.0.0 to 3.1.1 allows remote attackers to override the AllowedAuthentications configuratio…

  • Unscored —

    The Apache configuration file (httpd.conf) in Oracle 9i Application Server (9iAS) uses a Location alias for /perl direc…

  • Unscored —

    Farm9 Cryptcat, when started in server mode with the -e option, does not enable encryption, which allows clients to com…

  • Unscored —
    CVE-2002-1643 Public exploit EPSS 75%

    Multiple buffer overflows in RealNetworks Helix Universal Server 9.0 (9.0.2.768) allow remote attackers to execute arbi…

  • Unscored —

    Multiple buffer overflows in Oracle Web Cache for Oracle 9i Application Server (9iAS) allow remote attackers to execute…

  • Unscored —

    Multiple components in Oracle 9i Application Server (9iAS) are installed with over 160 default usernames and passwords,…

  • Unscored —

    SSH Secure Shell for Servers and SSH Secure Shell for Workstations 2.0.13 through 3.2.1, when running without a PTY, do…

  • Unscored —

    Buffer overflow in the URL catcher feature for SSH Secure Shell for Workstations client 3.1 to 3.2.0 allows remote atta…

  • Unscored —

    The Web Publishing feature in Netscape Enterprise Server 3.x and iPlanet Web Server 4.x allows remote attackers to caus…

  • Unscored —
    CVE-2002-1652 Public exploit

    Buffer overflow in cgicso.c for cgiemail 1.6 allows remote attackers to cause a denial of service (crash) and possibly …

  • Unscored —

    The spell checker plugin (check_me.mod.php) for SquirrelMail before 1.2.3 allows remote attackers to execute arbitrary …

  • Unscored —

    Buffer overflow in the slc_add_reply function in various BSD-based Telnet clients, when handling LINEMODE suboptions, a…

  • Unscored —
    CVE-2005-0468 Public exploit EPSS 27%

    Heap-based buffer overflow in the env_opt_add function in telnet.c for various BSD-based Telnet clients allows remote a…