Archive
21 April 2005
Vulnerabilities first published on this day (UTC), newest first.
83 results · Feed
-
Unscored —
SSH before 2.0, with RC4 encryption and the "disallow NULL passwords" option enabled, makes it easier for remote attack…
-
Unscored —
Dallas Semiconductor iButton DS1991 returns predictable values when given an incorrect password, which makes it easier …
-
Unscored —
Directory traversal vulnerability in WebID in RSA Security SecurID 5.0 as used by ACE/Agent for Windows, Windows NT and…
-
Unscored —
Buffer overflow in MySQL before 3.23.33 allows remote attackers to execute arbitrary code via a long drop database requ…
-
Unscored —
Netegrity SiteMinder 3.6 through 4.5.1 allows remote attackers to bypass filtering via URLs containing Unicode characte…
-
Unscored —
Microsoft Internet Explorer 5.0 through 6.0 allows attackers to cause a denial of service (browser crash) via a crafted…
-
Unscored —
WebID in RSA Security SecurID 5.0 as used by ACE/Agent for Windows, Windows NT and Windows 2000 allows attackers to cau…
-
Unscored —
NetInfo Manager for Mac OS X 10.0 through 10.1 allows local users to gain root privileges by opening applications using…
-
Unscored —
Buffer overflow in HHOpen ActiveX control (hhopen.ocx) 1.0.0.1 for Internet Explorer 4.01 and 5 allows remote attackers…
-
Unscored —
Buffer overflow in Registration Wizard ActiveX control (regwizc.dll, InvokeRegWizard) 3.0.0.0 for Internet Explorer 4.0…
-
Unscored —
Buffer overflow in Adobe Acrobat ActiveX control (pdf.ocx, PDF.PdfCtrl.1) 1.3.188 for Acrobat Reader 4.0 allows remote …
-
Unscored —
SunOS sendmail 5.59 through 5.65 uses popen to process a forwarding host argument, which allows local users to gain roo…
-
Unscored —
Multiple unknown vulnerabilities in the "r-cmnds" (1) remshd, (2) rexecd, (3) rlogind, (4) rlogin, (5) remsh, (6) rcp, …
-
Unscored —
Buffer overflow in the lex routines of nslookup for AIX 4.3 may allow attackers to cause a core dump and possibly execu…
-
Unscored —
The Kodak/Wang (1) Image Edit (imgedit.ocx), (2) Image Annotation (imgedit.ocx), (3) Image Scan (imgscan.ocx), (4) Thum…
-
Unscored —CVE-1999-1579 EPSS 22%
The Cenroll ActiveX control (xenroll.dll) for Terminal Server Editions of Windows NT 4.0 and Windows NT Server 4.0 befo…
-
Unscored —CVE-1999-1581 EPSS 21%
Memory leak in Simple Network Management Protocol (SNMP) agent (snmp.exe) for Windows NT 4.0 before Service Pack 4 allo…
-
Unscored —
By design, the "established" command on the Cisco PIX firewall allows connections from one host to arbitrary ports of a…
-
Unscored —
Buffer overflow in nslookup for AIX 4.3 allows local users to execute arbitrary code via a long hostname command line a…
-
Unscored —
Buffer overflow in portmir for AIX 4.3.0 allows local users to corrupt lock files and gain root privileges via the echo…
-
Unscored —
The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpM…
-
Unscored —
Microsoft Windows 2000 before Service Pack 2 (SP2), when running in a non-Windows 2000 domain and using NTLM authentica…
-
Unscored —
The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root pr…
-
Unscored —
The -ftrapv compiler option in gcc and g++ 3.3.3 and earlier does not handle all types of integer overflows, which may …
-
Unscored —
AIX sysback before 4.2.1.13 uses a relative path to find and execute the hostname program, which allows local users to …
-
Unscored —
quikstore.cgi in Quikstore Shopping Cart allows remote attackers to execute arbitrary commands via shell metacharacters…
-
Unscored —
The line printer daemon (lpd) in the lpr package in multiple Linux operating systems authenticates by comparing the rev…
-
Unscored —
The default configuration of Lotus Domino server 5.0.8 includes system information (version, operating system, and buil…
-
Unscored —
Buffer overflow in CVS before 1.11.20 allows remote attackers to execute arbitrary code.
-
Unscored —
Heap-based buffer overflow in RealPlayer 10 and earlier, Helix Player before 10.0.4, and RealOne Player v1 and v2 allow…
-
Unscored —
The Acrobat web control in Adobe Acrobat and Acrobat Reader 7.0 and earlier, when used with Internet Explorer, allows r…
-
Unscored —CVE-2005-1196 Public exploit
SQL injection vulnerability in kb.php in the Knowledge Base module for phpBB allows remote attackers to obtain sensitiv…
-
Unscored —CVE-2005-1204 Public exploit
Desktop Rover 3.0, and possibly earlier versions, allows remote attackers to cause a denial of service (application cra…
-
Unscored —
Directory traversal vulnerability in apexec.pl for Anaconda Foundation Directory allows remote attackers to read arbitr…
-
Unscored —
Multiple heap-based buffer overflows in the code used to handle (1) MMS over TCP (MMST) streams or (2) RealMedia RTSP s…
-
Unscored —CVE-2005-1202 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in eGroupware before 1.0.0.007 allow remote attackers to inject arb…
-
Unscored —
SQL injection vulnerability in the SYS.DBMS_CDC_IPUBLISH.CREATE_SCN_CHANGE_SET procedure in Oracle Database Server 10g …
-
Unscored —CVE-2005-1199 Public exploit
SQL injection vulnerability in printthread.php in UBB.Threads allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2005-1201 Public exploit
Multiple directory traversal vulnerabilities in AZ Bulletin board (AZbb) before 1.0.08 allow (1) remote authenticated u…
-
Unscored —CVE-2005-1203 Public exploit
Multiple SQL injection vulnerabilities in index.php in eGroupware before 1.0.0.007 allow remote attackers to execute ar…