Archive
21 June 2005
Vulnerabilities first published on this day (UTC), newest first.
163 results · Feed
-
Unscored —CVE-2002-1716 EPSS 14%
The Host() function in the Microsoft spreadsheet component on Microsoft Office XP allows remote attackers to create arb…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the web-based message board in Prospero Technologies allows remote attacker…
-
Unscored —
Cisco IOS software 11.3 through 12.2 running on Cisco uBR7200 and uBR7100 series Universal Broadband Routers allows rem…
-
Unscored —
BPM Studio Pro 4.2 by ALCATech GmbH includes a webserver that allows a remote attacker to cause a denial of service (cr…
-
Unscored —
Powerboards 2.2b allows remote attackers to view the full path to the backend database by sending a cookie containing a…
-
Unscored —CVE-2002-1766 Public exploit
Buffer overflow in Composer in Netscape 4.77 allows local users to overwrite process memory and execute arbitrary code …
-
Unscored —
Directory traversal vulnerability in CodeBrws.asp in Microsoft IIS 5.0 allows remote attackers to view source code and …
-
Unscored —
Cross-site scripting (XSS) vulnerability in CGI Online Worldweb Shopping 1.1 (a.k.a. COWS) allows remote attackers to e…
-
Unscored —
Multiple SQL injection vulnerabilities in PHProjekt 2.0 through 3.1 allow remote attackers to execute arbitrary SQL com…
-
Unscored —
Directory traversal vulnerability in (1) Deerfield D2Gfx 1.0.2 or (2) BadBlue Enterprise Edition 1.5.x and BadBlue Pers…
-
Unscored —
secure_inc.php in PhotoDB 1.4 allows remote attackers to bypass authentication via a URL with a large Time parameter, n…
-
Unscored —CVE-2002-1769 EPSS 12%
Microsoft Site Server 3.0 prior to SP4 installs a default user, LDAP_Anonymous, with a default password of LdapPassword…
-
Unscored —
PHProjekt 2.0 through 3.1 allows remote attackers to view or modify data via requests to certain scripts that do not ve…
-
Unscored —CVE-2002-1773 Public exploit
Buffer overflow in ICQ 2.6x for MacOS X 10.0 through 10.1.2 allows remote attackers to cause a denial of service and po…
-
Unscored —
install.php in phpBB 2.0 through 2.0.1, when "allow_url_fopen" and "register_globals" variables are set to "on", allows…
-
Unscored —
Webmin 0.92, when installed from an RPM, creates /var/webmin with insecure permissions (world readable), which could al…
-
Unscored —
The "block fragmented IP Packets" option in Symantec Norton Personal Firewall 2002 (NPW) does not properly protect agai…
-
Unscored —
Format string vulnerability in the Cio_PrintF function of cio_main.c in Unreal IRCd 3.1.1 allows remote attackers to ca…
-
Unscored —
NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus 2002 allows remote attackers to bypass viru…
-
Unscored —
NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus 2002 allows remote attackers to send viruse…
-
Unscored —
Snort 1.6, when running in straight ASCII packet logging mode or IDS mode with straight decoded ASCII packet logging se…
-
Unscored —
Xitami 2.5b installs the testcgi.exe program by default in the cgi-bin directory, which allows remote attackers to gain…
-
Unscored —
Enterasys Vertical Horizon VH-2402S before firmware 2.05.05.09 has a hard-coded account and password for debugging, whi…
-
Unscored —CVE-2005-2021 Public exploit
Cross-site scripting (XSS) vulnerability in cPanel 9.1 and earlier allows remote attackers to inject arbitrary web scri…
-
Unscored —CVE-2005-2041 Public exploit
Buffer overflow in addschup in HAURI ViRobot 2.0, and possibly other products, allows remote attackers to execute arbit…
-
Unscored —
Unknown vulnerability in Webmail in iPlanet Messaging Server 5.2 Patch 1 and Sun ONE Messaging Server 6.2 allows remote…
-
Unscored —
The send_pinentry_environment function in asshelp.c in gpg2 on SUSE Linux 9.3 does not properly handle certain options,…
-
Unscored —CVE-2005-2028 Public exploit
SQL injection vulnerability in index.php for MercuryBoard 1.1.4 and earlier allows remote attackers to execute arbitrar…
-
Unscored —
Multiple SQL injection vulnerabilities in Fortibus CMS 4.0.0 allow remote attackers to execute arbitrary SQL commands v…
-
Unscored —
Multiple buffer overflows in the getterminaltype function in telnetd for Heimdal before 0.6.5 may allow remote attacker…
-
Unscored —CVE-2005-2035 Public exploit
SQL injection vulnerability in login.asp for Cool Cafe (Cool Café) Chat 1.2.1 allows remote attackers to execute arbitr…
-
Unscored —
Unknown vulnerability in "various plugins" for NanoBlogger 3.2.1 and earlier allows remote attackers to execute arbitra…
-
Unscored —CVE-2005-2033 Public exploit
Directory traversal vulnerability in folderview.asp for Blue-Collar Productions i-Gallery 3.3 allows remote attackers t…
-
Unscored —
Unknown vulnerability in lpadmin on Sun Solaris 7, 8, and 9 allows local users to overwrite arbitrary files.
-
Unscored —
Cross-site scripting (XSS) vulnerability in folderview.asp for BlueCollar iGallery 3.3 allows remote attackers to injec…
-
Unscored —
Cisco VPN 3000 Concentrator before 4.1.7.F allows remote attackers to determine valid groupnames by sending an IKE Aggr…
-
Unscored —
amaroK Web Frontend 1.3 stores the globals.inc file under the web root without a .php extension and insufficient access…
-
Unscored —
Vipul Razor Agents (razor-agents) before 2.70 allows remote attackers to cause a denial of service via (1) certain "unu…
-
Unscored —
Enterasys Vertical Horizon VH-2402S before firmware 2.05.05.09 does not properly restrict certain debugging commands to…
-
Unscored —CVE-2005-2030 Public exploit
Ultimate PHP Board (UPB) 1.9.6 GOLD uses weak encryption for passwords in the users.dat file, which allows attackers to…