Archive
21 June 2005
Vulnerabilities first published on this day (UTC), newest first.
163 results · Feed
-
Unscored —
NewsReactor 1.0 uses a weak encryption scheme, which could allow local users to decrypt the passwords and gain access t…
-
Unscored —
SOAP::Lite 0.50 through 0.52 allows remote attackers to load arbitrary Perl functions by suppling a non-existent functi…
-
Unscored —CVE-2002-1727 Public exploit
Cross-site scripting vulnerability (XSS) in (1) as_web.exe and (2) as_web4.exe in askSam Web Publisher 1 and 4 allows r…
-
Unscored —CVE-2002-1683 Public exploit
Cross-site scripting (XSS) vulnerability in BadBlue Personal Edition 1.7.3 allows remote attackers to execute arbitrary…
-
Unscored —
acroread in Adobe Acrobat Reader 4.05 on Linux allows local users to overwrite arbitrary files via a symlink attack on …
-
Unscored —CVE-2002-1717 EPSS 16%
Microsoft Internet Information Server (IIS) 5.1 allows remote attackers to view path information via a GET request to (…
-
Unscored —
Cisco IOS 11.1 through 12.2, when HSRP support is not enabled, allows remote attackers to cause a denial of service (CP…
-
Unscored —
Directory traversal vulnerability in PHProjekt 2.0 through 3.1 allows remote attackers to read arbitrary files via .. (…
-
Unscored —
Unknown vulnerability in CGINews before 1.06 allow remote attackers to read arbitrary files via "unfiltered user input."
-
Unscored —CVE-2002-1740 Public exploit
Buffer overflow in WorldClient.cgi in WorldClient in Alt-N Technologies MDaemon 5.0.5.0 and earlier allows local users …
-
Unscored —
The default configuration of University of Washington IMAP daemon (wu-imapd), when running on a system that does not al…
-
Unscored —
askSam Web Publisher 1.0 and 4.0 allows remote attackers to determine the full path to the web root directory via a req…
-
Unscored —
Buffer overflow in Novell NetWare Client 4.80 through 4.83 allows local users to cause a denial of service (crash) by u…
-
Unscored —
Off-by-one error in alterMIME 0.1.10 and 0.1.11 allows remote attackers to cause a denial of service (crash) via an x-h…
-
Unscored —
Alcatel OmniPCX 4400 installs known user accounts and passwords in the /etc/password file by default, which allows remo…
-
Unscored —
Evolution 1.0.3 and 1.0.4 allows remote attackers to cause a denial of service (memory consumption and crash) via an em…
-
Unscored —CVE-2002-1695 EPSS 14%
Norton Internet Security 2001 opens log files with FILE_SHARE_READ and FILE_SHARE_WRITE permissions, which could allow …
-
Unscored —
Microsoft Windows XP Professional upgrade edition overwrites previously installed patches for Internet Explorer 6.0, le…
-
Unscored —
Buffer overflow in lscfg of unknown versions of AIX has unknown impact.
-
Unscored —CVE-2002-1673 Public exploit
The web interface for Webmin 0.92 does not properly quote or filter script code in files that are displayed to the inte…
-
Unscored —
procfs on FreeBSD before 4.5 allows local users to cause a denial of service (kernel panic) by removing a file that the…
-
Unscored —
Logitech iTouch keyboards allows attackers with physical access to the system to bypass the screen locking function and…
-
Unscored —
Unknown vulnerability in the login program on AIX before 4.0 could allow remote users to specify 100 or more environmen…
-
Unscored —
Astaro Security Linux 2.016 creates world-writable files and directories, which allows local users to overwrite arbitra…
-
Unscored —
The Standard security setting for Mandrake-Security package (msec) in Mandrake 8.2 installs home directories with world…
-
Unscored —CVE-2002-1720 Public exploit
SQL injection vulnerability in Spooky Login 2.0 through 2.5 allows remote attackers to bypass authentication and gain p…
-
Unscored —
ACDSee 4.0 allows remote attackers to cause a denial of service (crash) via an .ais file with a long file description f…
-
Unscored —
Unknown vulnerability in Slash 2.1.x and 2.2 through 2.2.2, as used in Slashcode, allows remote authenticated users to …
-
Unscored —
Unknown vulnerability in AIX before 4.0 with unknown attack vectors and unknown impact, aka "security issue," as fixed …
-
Unscored —CVE-2002-1741 Public exploit
Directory traversal vulnerability in WorldClient.cgi in WorldClient for Alt-N Technologies MDaemon 5.0.5.0 and earlier …
-
Unscored —
Qualcomm Eudora 5.1 allows remote attackers to execute arbitrary code via an HTML e-mail message that uses a file:// UR…
-
Unscored —CVE-2002-1715 Public exploit
SSH 1 through 3, and possibly other versions, allows local users to bypass restricted shells such as rbash or rksh by u…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin 2.2.0 allows remote attackers to execute arbitrary script…
-
Unscored —
Unknown vulnerability in Oracle E-Business Suite 11i.1 through 11i.6 allows remote attackers to execute unauthorized PL…
-
Unscored —
csChatRBox.cgi in CGIScript.net csChat-R-Box allows remote attackers to execute arbitrary Perl code via the setup param…
-
Unscored —CVE-2002-1708 Public exploit
Cross-site scripting vulnerability (XSS) in BasiliX Webmail 1.10 allows remote attackers to execute arbitrary script as…
-
Unscored —CVE-2002-1702 Public exploit
Cross-site scripting vulnerability (XSS) in DeltaScripts PHP Classifieds 6.0.5 allows remote attackers to execute arbit…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Slashcode CVS releases June 17 through July 1 2002 allows remote attackers …
-
Unscored —CVE-2002-1745 EPSS 19%
Off-by-one error in the CodeBrws.asp sample script in Microsoft IIS 5.0 allows remote attackers to view the source code…
-
Unscored —
NewsPro 1.01 allows remote attackers to gain unauthorized administrator access by setting their authentication cookie t…