Archive
28 March 2005
Vulnerabilities first published on this day (UTC), newest first.
26 results · Feed
-
Unscored —
Stack-based buffer overflow in shar in GNU sharutils 4.2.1 allows local users to execute arbitrary code via a long -o c…
-
Unscored —
Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via (1) long out…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the htp PL/SQL package for Oracle 9i Application Server (9iAS) allows remot…
-
Unscored —
iPlanet Web Server Enterprise Edition and Netscape Enterprise Server 4.0 and 4.1 allows remote attackers to conduct HTT…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in compose.php in SquirrelMail before 1.2.3 allows remote attackers to …
-
Unscored —
Novell NetWare 5.1 installs sample applications that allow remote attackers to obtain sensitive information via (1) nds…
-
Unscored —
Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 allows remote attackers to obtain sensitive information via a …
-
Unscored —
The quick login feature in Slash Slashcode does not redirect the user to an alternate URL when the wrong password is pr…
-
Unscored —CVE-2002-1656 Public exploit
X-News (x_news) 1.1 and earlier allows attackers to authenticate as other users by obtaining the MD5 checksum of the pa…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Verity Search97 allows remote attackers to insert arbitrary web content and…
-
Unscored —
PostgreSQL 7.2.1 and 7.2.2 allows local users to delete transaction log (pg_clog) data and cause a denial of service (d…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 allows …
-
Unscored —
Cross-site scripting (XSS) vulnerability in read_body.php in SquirrelMail before 1.2.3 allows remote attackers to execu…
-
Unscored —
SSH Secure Shell for Servers 3.0.0 to 3.1.1 allows remote attackers to override the AllowedAuthentications configuratio…
-
Unscored —
The Apache configuration file (httpd.conf) in Oracle 9i Application Server (9iAS) uses a Location alias for /perl direc…
-
Unscored —
Farm9 Cryptcat, when started in server mode with the -e option, does not enable encryption, which allows clients to com…
-
Unscored —
Multiple buffer overflows in RealNetworks Helix Universal Server 9.0 (9.0.2.768) allow remote attackers to execute arbi…
-
Unscored —
Multiple buffer overflows in Oracle Web Cache for Oracle 9i Application Server (9iAS) allow remote attackers to execute…
-
Unscored —
Multiple components in Oracle 9i Application Server (9iAS) are installed with over 160 default usernames and passwords,…
-
Unscored —
SSH Secure Shell for Servers and SSH Secure Shell for Workstations 2.0.13 through 3.2.1, when running without a PTY, do…
-
Unscored —
Buffer overflow in the URL catcher feature for SSH Secure Shell for Workstations client 3.1 to 3.2.0 allows remote atta…
-
Unscored —
The Web Publishing feature in Netscape Enterprise Server 3.x and iPlanet Web Server 4.x allows remote attackers to caus…
-
Unscored —CVE-2002-1652 Public exploit
Buffer overflow in cgicso.c for cgiemail 1.6 allows remote attackers to cause a denial of service (crash) and possibly …
-
Unscored —
The spell checker plugin (check_me.mod.php) for SquirrelMail before 1.2.3 allows remote attackers to execute arbitrary …
-
Unscored —
Buffer overflow in the slc_add_reply function in various BSD-based Telnet clients, when handling LINEMODE suboptions, a…
-
Unscored —
Heap-based buffer overflow in the env_opt_add function in telnet.c for various BSD-based Telnet clients allows remote a…