Archive
21 June 2005
Vulnerabilities first published on this day (UTC), newest first.
163 results · Feed
-
Unscored —CVE-2002-1767 Public exploit
Buffer overflow in tnslsnr of Oracle 8i Database Server 8.1.5 for Linux allows local users to execute arbitrary code as…
-
Unscored —
ASPjar Guestbook 1.00 allows remote attackers to delete arbitrary messages accessing the delete.asp administrative scri…
-
Unscored —
Cross-site scripting (XSS) vulnerability in memberlist.php in Jelsoft vBulletin 2.0 rc 2 through 2.2.4 allows remote at…
-
Unscored —
14all.cgi 1.1p15 in mrtgconfig allows remote attackers to determine the physical path to the web root directory via a r…
-
Unscored —CVE-2002-1731 Public exploit
The System Request menu in IBM AS/400 allows local users to list valid user accounts by viewing the object names that a…
-
Unscored —
Electronic Code Book (ECB) mode in VTun 2.0 through 2.5 uses a weak encryption algorithm that produces the same ciphert…
-
Unscored —
Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to cause a denial of service (crash) via an object …
-
Unscored —
NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus (NAV) 2002 allows remote attackers to bypas…
-
Unscored —
The virtual memory management system in FreeBSD 4.5-RELEASE and earlier does not properly check the existence of a VM o…
-
Unscored —CVE-2002-1685 Public exploit
Cross-site scripting vulnerability (XSS) in BadBlue Enterprise Edition and Personal Edition 1.7 and 1.7.2 allows remote…
-
Unscored —CVE-2002-1753 EPSS 32%
csNewsPro.cgi in CGIScript.net csNews Professional (csNewsPro) allows remote attackers to execute arbitrary Perl code v…
-
Unscored —
Vtun 2.5b1 does not authenticate forwarded packets, which allows remote attackers to inject data into user sessions wit…
-
Unscored —
The dtscreen Sun Solaris 8 CDE screensaver crashes when the "Shift" and "Return" keys are pressed repeatedly and quickl…
-
Unscored —
Cross-site scripting vulnerability (XSS) in ASPjar Guestbook 1.00 allows remote attackers to execute arbitrary script a…
-
Unscored —CVE-2002-1762 EPSS 16%
Microsoft Baseline Security Analyzer (MBSA) 1.0 stores security scans in a known location C:\Documents and Settings\use…
-
Unscored —CVE-2002-1703 Public exploit
Cross-site scripting vulnerability (XSS) in auction.cgi for Mewsoft NetAuction 3.0 allows remote attackers to execute a…
-
Unscored —
Windows 2000 Terminal Services, when using the disconnect feature of the client, does not properly lock itself if it is…
-
Unscored —
tinc 1.0pre3 and 1.0pre4 VPN does not authenticate forwarded packets, which allows remote attackers to inject data into…
-
Unscored —
csLiveSupport.cgi in CGIScript.net csLiveSupport allows remote attackers to execute arbitrary Perl code via the setup p…
-
Unscored —
phpimageview.php in PHPImageView 1.0 allows remote attackers to obtain sensitive information via the pw=show option, wh…
-
Unscored —
BasiliX 1.1.0 saves attachments in a world readable /tmp/BasiliX directory, which allows local users to read other user…
-
Unscored —
AOL ICQ 2002a Build 3722 allows remote attackers to cause a denial of service (crash) via a malformed .hpf file.
-
Unscored —
The attachment capability in Compose Mail in BasiliX Webmail 1.1.0 does not check whether the attachment was uploaded b…
-
Unscored —
csGuestbook.cgi in CGISCRIPT.NET csGuestbook 1.0 allows remote attackers to execute arbitrary Perl code via the setup p…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Actinic Catalog 4.7.0 allow remote attackers to inject arbitrary…
-
Unscored —
Matt Wright FormMail 1.9 and earlier allows remote attackers to send spam or anonymous e-mail by injecting a newline ch…
-
Unscored —CVE-2002-1704 Public exploit
Zeroboard 4.1, when the "allow_url_fopen" and "register_globals" variables are enabled, allows remote attackers to exec…
-
Unscored —
pkg_add in FreeBSD 4.2 through 4.4 creates a temporary directory with world-searchable permissions, which may allow loc…
-
Unscored —
Microsoft Outlook plug-in PGP version 7.0, 7.0.3, and 7.0.4 silently saves a decrypted copy of a message to hard disk w…
-
Unscored —
Multiple buffer overflows in DeleGate 7.7.0 through 7.8.1 allow remote attackers to execute arbitrary code, as demonstr…
-
Unscored —
Alt-N Technologies MDaemon 5.0.5.0 and earlier creates a default MDaemon mail account with a password of MServer, which…
-
Unscored —
Buffer overflow in dlogin 1.0a could allow local users to gain privileges via unknown attack vectors.
-
Unscored —
The upload function in PHProjekt 2.0 through 3.1 does not properly verify certain variables related to uploaded data, w…
-
Unscored —CVE-2002-1694 EPSS 13%
Microsoft Internet Information Server (IIS) 4.0 opens log files with FILE_SHARE_READ and FILE_SHARE_WRITE permissions, …
-
Unscored —
BindView NetInventory 1.0, when used with NetRC 1.0, allows local users to read sensitive information (passwords) by de…
-
Unscored —
SQL injection vulnerability in BasiliX Webmail 1.10 allows remote attackers to obtain sensitive information or possibly…
-
Unscored —
Symantec Norton Personal Firewall 2002 allows remote attackers to bypass the portscan protection by using a (1) SYN/FIN…
-
Unscored —
Cross-site scripting vulnerability (XSS) in the missing template handler in Macromedia ColdFusion MX allows remote atta…
-
Unscored —
Microsoft Windows 2000 allows remote attackers to cause a denial of service (memory consumption) by sending a flood of …
-
Unscored —CVE-2002-1698 EPSS 16%
Buffer overflow in Microsoft MSN Messenger Service 1.0 through 4.6 allows remote attackers to cause a denial of service…