Skip to content
OpenAdvisories

Archive

14 April 2005

Vulnerabilities first published on this day (UTC), newest first.

31 results · Feed

  • Unscored —

    Business Objects WebIntelligence 2.7.0 through 2.7.4 only enforces access controls on the client, which allows remote a…

  • Unscored —

    Buffer overflow in Entrust LibKmp ISAKMP library, as used by Symantec Enterprise Firewall 7.0 through 8.0, Gateway Secu…

  • Unscored —
    CVE-2004-0824 Public exploit

    PPPDialer for Mac OS X 10.2.8 through 10.3.5 allows local users to overwrite system files via a symlink attack on PPPDi…

  • Unscored —
    CVE-2004-0637 Public exploit EPSS 18%

    Oracle Database Server 8.1.7.4 through 9.2.0.4 allows local users to execute commands with additional privileges via th…

  • Unscored —

    OpenLDAP 1.0 through 2.1.19, as used in Apple Mac OS 10.3.4 and 10.3.5 and possibly other operating systems, may allow …

  • Unscored —
    CVE-2004-0390 Public exploit

    SCO OpenServer 5.0.5 through 5.0.7 only supports Xauthority style access control when users log in using scologin, whic…

  • Unscored —
    CVE-2004-0641 Public exploit

    Thomson SpeedTouch 510 ADSL Router with firmware GV8BAA3.270, and possibly earlier versions, generates predictable TCP …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Business Objects InfoView 5.1.4 through 5.1.8 for WebIntelligence 2.7.0 thr…

  • Unscored —

    Terminal for Apple Mac OS X 10.3.6 may indicate that "Secure Keyboard Entry" is enabled even when it is not, which coul…

  • Unscored —

    Unknown vulnerability in Apple Mac OS X 10.3.6 server, when using Kerberos authentication and Cyrus IMAP allows local u…

  • Unscored —

    Buffer overflow in PSNormalizer for Apple Mac OS X 10.3.6 allows remote attackers to execute arbitrary code via a craft…

  • Unscored —

    Postfix server for Apple Mac OS X 10.3.6, when using CRAM-MD5, allows remote attackers to send mail without authenticat…

  • Unscored —

    Human Interface Toolbox (HIToolBox) for Apple Mac 0S X 10.3.6 allows local users to exit applications via the force-qui…

  • Unscored —

    Apache for Apple Mac OS X 10.2.8 and 10.3.6 allows remote attackers to read files and resource fork content via HTTP re…

  • Unscored —

    Apache for Apple Mac OS X 10.2.8 and 10.3.6 restricts access to files in a case sensitive manner, but the Apple HFS+ fi…

  • Unscored —
    CVE-2004-1121 Public exploit

    Apple Safari 1.0 through 1.2.3 allows remote attackers to spoof the URL displayed in the status bar via TABLE tags.

  • Unscored —

    The Application Framework (AppKit) for Apple Mac OS X 10.2.8 and 10.3.6 does not properly restrict access to a secure t…

  • Unscored —

    Cisco 340-series Aironet access point using firmware 11.01 does not use 6 of the 24 available IV bits for WEP encryptio…

  • Unscored —
    CVE-2001-0163 Public exploit

    Cisco AP340 base station produces predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spo…

  • Unscored —
    CVE-2001-0162 Public exploit EPSS 15%

    WinCE 3.0.9348 generates predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hij…

  • Unscored —

    LocalWEB2000 HTTP server 2.1.0 stores passwords in plain text under the web document root in users.lst, which allows re…

  • Unscored —

    Memory leak in RealSecure Event Collector 6.5 allows attackers to cause a denial of service (memory consumption and cra…

  • Unscored —

    Buffer overflow in the Web management interface in Linksys BEFW11S4 wireless access point router 2 and BEFSR11, BEFSR41…

  • Unscored —
    CVE-2002-1351 Public exploit

    Buffer overflow in Melange Chat System 1.10 allows remote attackers to cause a denial of service (chat server crash) an…

  • Unscored —

    psdoccgi.exe in PeopleSoft PeopleTools 8.4 through 8.43 allows remote attackers to read arbitrary files via the (1) hea…

  • Unscored —

    Information leak in dsimportexport for Apple Macintosh OS X Server 10.2.6 allows local users to obtain the username and…

  • Unscored —

    Buffer overflow in rcp for AIX 4.3.3, 5.1 and 5.2 allows local users to gain privileges.

  • Unscored —

    psdoccgi.exe in PeopleSoft PeopleTools 8.4 through 8.43 allows remote attackers to cause a denial of service (applicati…

  • Unscored —

    Perl 5.8.1 on Fedora Core does not properly initialize the random number generator when forking, which makes it easier …

  • Unscored —

    The Script.prototype.freeze/thaw functionality in Mozilla 1.4 and earlier allows attackers to execute native methods by…

  • Unscored —

    The PKI functionality in Mac OS X 10.2.8 and 10.3.2 allows remote attackers to cause a denial of service (service crash…