Archive
14 June 2005
Vulnerabilities first published on this day (UTC), newest first.
56 results · Feed
-
Unscored —CVE-2004-2137 EPSS 26%
Outlook Express 6.0, when sending multipart e-mail messages using the "Break apart messages larger than" setting, leaks…
-
Unscored —CVE-2005-0488 EPSS 17%
Certain BSD-based Telnet clients, including those used on Solaris and SuSE Linux, allow remote malicious Telnet servers…
-
Unscored —
ptrace in Linux kernel 2.6.8.1 does not properly verify addresses on the amd64 platform, which allows local users to ca…
-
Unscored —CVE-2005-0563 EPSS 14%
Cross-site scripting (XSS) vulnerability in Microsoft Outlook Web Access (OWA) component in Exchange Server 5.5 allows …
-
Unscored —
Symantec pcAnywhere 10.5x and 11.x before 11.5, with "Launch with Windows" enabled, allows local users with physical ac…
-
Unscored —
Directory traversal vulnerability in Pico Server (pServ) 3.3 allows remote attackers to read arbitrary files and execut…
-
Unscored —
Directory traversal vulnerability in InteractivePHP FusionBB .11 Beta and earlier allows remote attackers to include ar…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in Invision Gallery before 1.3.1 allows remote attackers to delete albu…
-
Unscored —
xmysqladmin 1.0 and earlier allows local users to delete arbitrary files via a symlink attack on a database backup file…
-
Unscored —
LaunchServices in Apple Mac OS X 10.4.x up to 10.4.1 does not properly mark file extensions and MIME types as unsafe if…
-
Unscored —CVE-2005-1215 EPSS 19%
Microsoft ISA Server 2000 allows remote attackers to poison the ISA cache or bypass content restriction policies via a …
-
Unscored —CVE-2005-1955 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in singapore 0.9.11 allows remote attackers to inject arbitrary w…
-
Unscored —
Cisco switches that support 802.1x security allow remote attackers to bypass port security and gain access to the VLAN …
-
Unscored —
Cerberus Helpdesk 0.97.3 allows remote attackers to obtain sensitive information via certain requests to (1) reports.ph…
-
Unscored —CVE-2005-1212 EPSS 25%
Buffer overflow in Microsoft Step-by-Step Interactive Training (orun32.exe) allows remote attackers to execute arbitrar…
-
Unscored —
Multiple SQL injection vulnerabilities in InteractivePHP FusionBB .11 Beta and earlier allow remote attackers to execut…
-
Unscored —
Unspecified vulnerability in Java 2 Platform, Standard Edition (J2SE) 5.0 and 5.0 Update 1 and J2SE 1.4.2 up to 1.4.2_0…
-
Unscored —
SilverCity before 0.9.5-r1 installs (1) cgi-styler-form.py, (2) cgi-styler.py, and (3) source2html.py with read and wri…
-
Unscored —CVE-2005-1725 Public exploit
launchd 106 in Apple Mac OS X 10.4.x up to 10.4.1 allows local users to overwrite arbitrary files via a symlink attack …
-
Unscored —
Gaim before 1.3.1 allows remote attackers to cause a denial of service (application crash) via a Yahoo! message with no…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the convert_highlite_words function in Invision Blog before 1.1.2 Final all…
-
Unscored —
Cross-site scripting (XSS) vulnerability in ProductCart Ecommerce before 2.7 allows remote attackers to inject arbitrar…
-
Unscored —CVE-2005-1959 Public exploit
jammail.pl in jamchen JamMail 1.8 allows remote attackers to execute arbitrary commands via shell metacharacters in the…
-
Unscored —
The eping_validaddr function in functions.php for the ePing plugin for e107 portal allows remote attackers to execute a…
-
Unscored —
Heap-based buffer overflow in the CGI extension for Pico Server (pServ) 3.3 allows remote attackers to execute arbitrar…
-
Unscored —CVE-2005-1967 Public exploit
Multiple SQL injection vulnerabilities in ProductCart Ecommerce before 2.7 allow remote attackers to execute arbitrary …
-
Unscored —CVE-2005-1948 Public exploit
Multiple SQL injection vulnerabilities in Invision Gallery before 1.3.1 allow remote attackers to execute arbitrary SQL…
-
Unscored —
sysreport 1.3.15 and earlier includes contents of the up2date file in a report, which leaks the password for a proxy se…
-
Unscored —
The eTrace_validaddr function in eTrace plugin for e107 portal allows remote attackers to execute arbitrary commands vi…
-
Unscored —
Buffer overflow in ptrace in the Linux Kernel for 64-bit architectures allows local users to write bytes into kernel me…
-
Unscored —
Multiple SQL injection vulnerabilities in Invision Blog before 1.1.2 Final allow remote attackers to execute arbitrary …
-
Unscored —
The getemails function in C.J. Steele Tattle allows remote attackers to execute arbitrary commands via shell metacharac…
-
Unscored —CVE-2005-1943 Public exploit
Multiple SQL injection vulnerabilities in Loki download manager 2.0 allow remote attackers to execute arbitrary SQL com…
-
Unscored —
singapore 0.9.11 allows remote attackers to obtain sensitive information via a direct request to (1) admin.class.php, (…
-
Unscored —CVE-2005-1205 EPSS 33%
The Telnet client for Microsoft Windows XP, Windows Server 2003, and Windows Services for UNIX allows remote attackers …
-
Unscored —
mtnpeak.net File Upload Manager does not properly check user authentication for certain actions, which allows remote at…
-
Unscored —
The mmap function in the Linux Kernel 2.6.10 can be used to create memory maps with a start address beyond the end addr…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Annuaire 1Two 1.1 and earlier allow remote attackers to inject a…
-
Unscored —
Unknown vulnerability in the CoreGraphics Window Server for Mac OS X 10.4.x up to 10.4.1 allows local users to inject a…
-
Unscored —
MCX Client for Apple Mac OS X 10.4.x up to 10.4.1 insecurely logs Portable Home Directory credentials, which allows loc…