Skip to content
OpenAdvisories

Archive

21 June 2005

Vulnerabilities first published on this day (UTC), newest first.

  1. 138
  2. 217
  3. 32
  4. 4 
  5. 5 
  6. 61
  7. 723
  8. 825
  9. 97
  10. 10 
  11. 11 
  12. 121
  13. 131
  14. 1456
  15. 158
  16. 162
  17. 17 
  18. 18 
  19. 19 
  20. 2026
  21. 21163
  22. 2213
  23. 23 
  24. 24 
  25. 25 
  26. 267
  27. 27 
  28. 28220
  29. 2914
  30. 3027

163 results · Feed

  • Unscored —
    CVE-2001-1487 Public exploit

    popauth utility in Qualcomm Qpopper 4.0 and earlier allows local users to overwrite arbitrary files and execute command…

  • Unscored —

    Java Runtime Environment (JRE) and SDK 1.2 through 1.3.0_04 allows untrusted applets to access the system clipboard.

  • Unscored —

    Check Point VPN-1 4.1SP4 using SecuRemote returns different error messages for valid and invalid users, with prompts th…

  • Unscored —
    CVE-2001-1502 Public exploit

    webcart.cgi in Mountain Network Systems WebCart 8.4 allows remote attackers to execute arbitrary commands via shell met…

  • Unscored —

    script command in the util-linux package before 2.11n allows local users to overwrite arbitrary files by setting a hard…

  • Unscored —

    Open Projects Network Internet Relay Chat (IRC) daemon u2.10.05.18 does not perform a double-reverse DNS lookup, which …

  • Unscored —
    CVE-2001-1500 EPSS 12%

    ProFTPD 1.2.2rc2, and possibly other versions, does not properly verify reverse-resolved hostnames by performing forwar…

  • Unscored —

    SQL injection vulnerability in bb_memberlist.php for phpBB 1.4.2 allows remote attackers to execute arbitrary SQL queri…

  • Unscored —

    Unknown vulnerability in the file system protection subsystem in HP Secure OS Software for Linux 1.0 allows additional …

  • Unscored —

    network_query.php in Network Query Tool 1.0 allows remote attackers to execute arbitrary commands via shell metacharact…

  • Unscored —

    Lotus Notes R5 Client 4.6 allows remote attackers to execute arbitrary commands via a Lotus Notes object with code in a…

  • Unscored —
    CVE-2001-1501 Public exploit EPSS 38%

    The glob functionality in ProFTPD 1.2.1, and possibly other versions allows remote attackers to cause a denial of servi…

  • Unscored —

    Alcatel ADSL modems allow remote attackers to access the Trivial File Transfer Protocol (TFTP) to modify firmware and c…

  • Unscored —

    tinc 1.0pre3 and 1.0pre4 allows remote attackers to inject data into user sessions by sniffing and replaying packets.

  • Unscored —

    Xitami 2.4 through 2.5 b4 stores the Administrator password in plaintext in the default.aut file, whose default permiss…

  • Unscored —

    Buffer overflow in mod_bf 0.2 allows local users to execute arbitrary commands via a long script.

  • Unscored —

    Buffer overflow in xlock in UnixWare 7.1.0 and 7.1.1 and Open Unix 8.0.0 allows local users to execute arbitrary code.

  • Unscored —
    CVE-2001-1490 Public exploit

    Mozilla 0.9.6 allows remote attackers to cause a denial of service (CPU consumption and memory leak) via a web page wit…

  • Unscored —

    smcboot in Sun SMC (Sun Management Center) 2.0 in Solaris 8 allows local users to delete arbitrary files via a symlink …

  • Unscored —
    CVE-2001-1489 Public exploit EPSS 18%

    Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (CPU consumption and memory leak) vi…

  • Unscored —

    One-Time Passwords In Everything (a.k.a OPIE) 2.32 and 2.4 allows remote attackers to determine the existence of user a…

  • Unscored —

    Microsoft Internet Explorer 4.0 through 6.0 could allow local users to differentiate between alphanumeric and non-alpha…

  • Unscored —
    CVE-2001-1491 Public exploit

    Opera 5.11 allows remote attackers to cause a denial of service (CPU consumption and memory leak) via a web page with a…

  • Unscored —

    The finger daemon (in.fingerd) in Sun Solaris 2.5 through 8 and SunOS 5.5 through 5.8 allows remote attackers to list a…

  • Unscored —

    Off-by-one buffer overflow in Basic Authentication in Acme Labs thttpd 1.95 through 2.20 allows remote attackers to cau…

  • Unscored —

    Cross-site scripting vulnerability (XSS) in phpimageview.php for PHPImageView 1.0 allows remote attackers to execute ar…

  • Unscored —

    Alt-N Technologies Mdaemon 5.0 through 5.0.6 uses a weak encryption algorithm to store user passwords, which allows loc…

  • Unscored —
    CVE-2002-1705 Public exploit EPSS 18%

    Microsoft Internet Explorer 5.5 through 6.0 allows remote attackers to cause a denial of service (crash) via a Cascadin…

  • Unscored —

    Buffer overflow in backup utility of Microsoft Windows 95 allows attackers to execute arbitrary code by causing a filen…

  • Unscored —

    Vtun 2.5b1 allows remote attackers to inject data into user sessions by sniffing and replaying packets.

  • Unscored —

    NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus (NAV) 2002 allows remote attackers to bypas…

  • Unscored —

    SQL injection vulnerability in ASP Client Check (ASPCC) 1.3 and 1.5 allows remote attackers to bypass authentication an…

  • Unscored —
    CVE-2002-1757 Public exploit

    PHProjekt 2.0 through 3.1 relies on the $PHP_SELF variable for authentication, which allows remote attackers to bypass …

  • Unscored —

    Buffer overflow in the diagnostics library in AIX allows local users to "cause data and instructions to be overwritten"…

  • Unscored —
    CVE-2002-1671 EPSS 12%

    Microsoft Internet Explorer 5.0, 5.01, and 5.5 allows remote attackers to monitor the contents of the clipboard via the…

  • Unscored —
    CVE-2002-1718 EPSS 15%

    Microsoft Internet Information Server (IIS) 5.1 may allow remote attackers to view the contents of a Frontpage Server E…

  • Unscored —

    Unknown vulnerability in Bavo 0.3 allows remote attackers to modify posted messages.

  • Unscored —

    Novell Netware 5.0 through 5.1 may allow local users to gain "Domain Admin" rights by logging into a Novell Directory S…

  • Unscored —

    HP-UX 11.11 and earlier allows local users to cause a denial of service (kernel deadlock), due to a "file system weakne…

  • Unscored —
    CVE-2002-1688 Public exploit EPSS 17%

    The browser history feature in Microsoft Internet Explorer 5.5 through 6.0 allows remote attackers to execute arbitrary…