Archive
21 April 2005
Vulnerabilities first published on this day (UTC), newest first.
83 results · Feed
-
Unscored —
Unknown vulnerability in the dotlock implementation in mailutils before 1:0.5-4 on Debian GNU/Linux allows attackers to…
-
Unscored —
The Microsoft IIS Connector in JRun 4.0 and Macromedia ColdFusion MX 6.0, 6.1, and 6.1 J2EE allows remote attackers to …
-
Unscored —
mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client respons…
-
Unscored —
Cisco IOS 12.1(3) and 12.1(3)T allows remote attackers to read and modify device configuration data via the cable-docsi…
-
Unscored —
Cisco VACM (View-based Access Control MIB) for Catalyst Operating Software (CatOS) 5.5 and 6.1 and IOS 12.0 and 12.1 al…
-
Unscored —
SSH before 2.0, when using RC4 and password authentication, allows remote attackers to replay messages until a new serv…
-
Unscored —
The Kerberos Telnet protocol, as implemented by KTH Kerberos IV and Kerberos V (Heimdal), does not encrypt authenticati…
-
Unscored —
Cross-site scripting (XSS) vulnerability in VisualAge for Java 3.5 Professional allows remote attackers to execute Java…
-
Unscored —
OpenSSH 2.9 and earlier does not initiate a Pluggable Authentication Module (PAM) session if commands are executed with…
-
Unscored —
The RC4 stream cipher as used by SSH1 allows remote attackers to modify messages without detection by XORing the origin…
-
Unscored —
Unknown vulnerability in login for AIX 5.1L, when using loadable authentication modules, allows remote attackers to gai…
-
Unscored —
Magic eDeveloper Enterprise Edition 8.30-5 and earlier allows local users to overwrite arbitrary files and possibly exe…
-
Unscored —
Handspring Visor 1.0 and 1.0.1 with the VisorPhone Springboard module installed allows remote attackers to cause a deni…
-
Unscored —CVE-2001-1451 EPSS 28%
Memory leak in the SNMP LAN Manager (LANMAN) MIB extension for Microsoft Windows 2000 before SP3, when the Print Spoole…
-
Unscored —CVE-2001-1472 Public exploit
SQL injection vulnerability in prefs.php in phpBB 1.4.0 and 1.4.1 allows remote authenticated users to execute arbitrar…
-
Unscored —
easyScripts easyNews 1.5 allows remote attackers to obtain the full path of the web root via a view request with a non-…
-
Unscored —CVE-2001-1471 Public exploit
prefs.php in phpBB 1.4.0 and earlier allows remote authenticated users to execute arbitrary PHP code via an invalid lan…
-
Unscored —
Buffer overflow in the (1) smap/smapd and (2) CSMAP daemons for Gauntlet Firewall 5.0 through 6.0 allows remote attacke…
-
Unscored —
Directory traversal vulnerability in Novell GroupWise 5.5 and 6.0 allows remote attackers to read arbitrary files via a…
-
Unscored —
KTH Kerberos IV and Kerberos V (Heimdal) for Telnet clients do not encrypt connections if the server does not support t…
-
Unscored —
Find-By-Content in Mac OS X 10.0 through 10.0.4 creates world-readable index files named .FBCIndex in every directory, …
-
Unscored —
Cisco IOS 12.0(5)XU through 12.1(2) allows remote attackers to read system administration and topology information via …
-
Unscored —
Buffer overflow in VanDyke SecureCRT before 3.4.2, when using the SSH-1 protocol, allows remote attackers to execute ar…
-
Unscored —
inetd in Compaq Tru64 UNIX 5.1 allows attackers to cause a denial of service (network connection loss) by causing one o…
-
Unscored —
Buffer overflow in the text editor functionality in HP-UX 10.01 through 11.04 on HP9000 Series 700 and Series 800 allow…
-
Unscored —
By default, DNS servers on Windows NT 4.0 and Windows 2000 Server cache glue records received from non-delegated name s…
-
Unscored —
SSH before 2.0 disables host key checking when connecting to the localhost, which allows remote attackers to silently r…
-
Unscored —
Unknown vulnerability in the SMTP server in Lotus Domino 5.0 through 5.7 allows remote attackers to bypass mail relayin…
-
Unscored —
mkpasswd in expect 5.2.8, as used by Red Hat Linux 6.2 through 7.0, seeds its random number generator with its process …
-
Unscored —
The IDEA cipher as implemented by SSH1 does not protect the final block of a message against modification, which allows…
-
Unscored —
The remote administration client for RhinoSoft Serv-U 3.0 sends the user password in plaintext even when S/KEY One-Time…
-
Unscored —
Buffer overflow in CrazyWWWBoard 2000p4 and 2000LEp5 allows remote attackers to execute arbitrary code via a long HTTP_…
-
Unscored —CVE-2001-1473 Scanner template
The SSH-1 protocol allows remote servers to conduct man-in-the-middle attacks and replay a client challenge response to…
-
Unscored —
The default installation of Apache before 1.3.19 on Mandrake Linux 7.1 through 8.0 and Linux Corporate Server 1.0.1 all…
-
Unscored —CVE-2001-1442 Public exploit
Buffer overflow in innfeed for ISC InterNetNews (INN) before 2.3.0 allows local users in the "news" group to gain privi…
-
Unscored —
SurfControl SuperScout only filters packets containing both an HTTP GET request and a Host header, which allows local u…
-
Unscored —
PHP remote file inclusion vulnerability in checklogin.php in phpSecurePages 0.24 and earlier allows remote attackers to…
-
Unscored —CVE-2001-1460 Public exploit
SQL injection vulnerability in article.php in PostNuke 0.62 through 0.64 allows remote attackers to bypass authenticati…
-
Unscored —
Crystal Reports, when displaying data for a password protected database using HTML pages, embeds the username and passw…
-
Unscored —CVE-2001-1453 EPSS 11%
Buffer overflow in libmysqlclient.so in MySQL 3.23.33 and earlier allows remote attackers to execute arbitrary code via…