Archive
21 June 2005
Vulnerabilities first published on this day (UTC), newest first.
163 results · Feed
-
Unscored —CVE-2001-1487 Public exploit
popauth utility in Qualcomm Qpopper 4.0 and earlier allows local users to overwrite arbitrary files and execute command…
-
Unscored —
Java Runtime Environment (JRE) and SDK 1.2 through 1.3.0_04 allows untrusted applets to access the system clipboard.
-
Unscored —
Check Point VPN-1 4.1SP4 using SecuRemote returns different error messages for valid and invalid users, with prompts th…
-
Unscored —CVE-2001-1502 Public exploit
webcart.cgi in Mountain Network Systems WebCart 8.4 allows remote attackers to execute arbitrary commands via shell met…
-
Unscored —
script command in the util-linux package before 2.11n allows local users to overwrite arbitrary files by setting a hard…
-
Unscored —
Open Projects Network Internet Relay Chat (IRC) daemon u2.10.05.18 does not perform a double-reverse DNS lookup, which …
-
Unscored —CVE-2001-1500 EPSS 12%
ProFTPD 1.2.2rc2, and possibly other versions, does not properly verify reverse-resolved hostnames by performing forwar…
-
Unscored —
SQL injection vulnerability in bb_memberlist.php for phpBB 1.4.2 allows remote attackers to execute arbitrary SQL queri…
-
Unscored —
Unknown vulnerability in the file system protection subsystem in HP Secure OS Software for Linux 1.0 allows additional …
-
Unscored —
network_query.php in Network Query Tool 1.0 allows remote attackers to execute arbitrary commands via shell metacharact…
-
Unscored —
Lotus Notes R5 Client 4.6 allows remote attackers to execute arbitrary commands via a Lotus Notes object with code in a…
-
Unscored —
The glob functionality in ProFTPD 1.2.1, and possibly other versions allows remote attackers to cause a denial of servi…
-
Unscored —
Alcatel ADSL modems allow remote attackers to access the Trivial File Transfer Protocol (TFTP) to modify firmware and c…
-
Unscored —
tinc 1.0pre3 and 1.0pre4 allows remote attackers to inject data into user sessions by sniffing and replaying packets.
-
Unscored —
Xitami 2.4 through 2.5 b4 stores the Administrator password in plaintext in the default.aut file, whose default permiss…
-
Unscored —
Buffer overflow in mod_bf 0.2 allows local users to execute arbitrary commands via a long script.
-
Unscored —
Buffer overflow in xlock in UnixWare 7.1.0 and 7.1.1 and Open Unix 8.0.0 allows local users to execute arbitrary code.
-
Unscored —CVE-2001-1490 Public exploit
Mozilla 0.9.6 allows remote attackers to cause a denial of service (CPU consumption and memory leak) via a web page wit…
-
Unscored —
smcboot in Sun SMC (Sun Management Center) 2.0 in Solaris 8 allows local users to delete arbitrary files via a symlink …
-
Unscored —
Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (CPU consumption and memory leak) vi…
-
Unscored —
One-Time Passwords In Everything (a.k.a OPIE) 2.32 and 2.4 allows remote attackers to determine the existence of user a…
-
Unscored —
Microsoft Internet Explorer 4.0 through 6.0 could allow local users to differentiate between alphanumeric and non-alpha…
-
Unscored —CVE-2001-1491 Public exploit
Opera 5.11 allows remote attackers to cause a denial of service (CPU consumption and memory leak) via a web page with a…
-
Unscored —
The finger daemon (in.fingerd) in Sun Solaris 2.5 through 8 and SunOS 5.5 through 5.8 allows remote attackers to list a…
-
Unscored —
Off-by-one buffer overflow in Basic Authentication in Acme Labs thttpd 1.95 through 2.20 allows remote attackers to cau…
-
Unscored —
Cross-site scripting vulnerability (XSS) in phpimageview.php for PHPImageView 1.0 allows remote attackers to execute ar…
-
Unscored —
Alt-N Technologies Mdaemon 5.0 through 5.0.6 uses a weak encryption algorithm to store user passwords, which allows loc…
-
Unscored —
Microsoft Internet Explorer 5.5 through 6.0 allows remote attackers to cause a denial of service (crash) via a Cascadin…
-
Unscored —
Buffer overflow in backup utility of Microsoft Windows 95 allows attackers to execute arbitrary code by causing a filen…
-
Unscored —
Vtun 2.5b1 allows remote attackers to inject data into user sessions by sniffing and replaying packets.
-
Unscored —
NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus (NAV) 2002 allows remote attackers to bypas…
-
Unscored —
SQL injection vulnerability in ASP Client Check (ASPCC) 1.3 and 1.5 allows remote attackers to bypass authentication an…
-
Unscored —CVE-2002-1757 Public exploit
PHProjekt 2.0 through 3.1 relies on the $PHP_SELF variable for authentication, which allows remote attackers to bypass …
-
Unscored —
Buffer overflow in the diagnostics library in AIX allows local users to "cause data and instructions to be overwritten"…
-
Unscored —CVE-2002-1671 EPSS 12%
Microsoft Internet Explorer 5.0, 5.01, and 5.5 allows remote attackers to monitor the contents of the clipboard via the…
-
Unscored —CVE-2002-1718 EPSS 15%
Microsoft Internet Information Server (IIS) 5.1 may allow remote attackers to view the contents of a Frontpage Server E…
-
Unscored —
Unknown vulnerability in Bavo 0.3 allows remote attackers to modify posted messages.
-
Unscored —
Novell Netware 5.0 through 5.1 may allow local users to gain "Domain Admin" rights by logging into a Novell Directory S…
-
Unscored —
HP-UX 11.11 and earlier allows local users to cause a denial of service (kernel deadlock), due to a "file system weakne…
-
Unscored —
The browser history feature in Microsoft Internet Explorer 5.5 through 6.0 allows remote attackers to execute arbitrary…