Archive
28 June 2005
Vulnerabilities first published on this day (UTC), newest first.
68 results · Clear filters · Feed
-
Unscored —CVE-2002-1803 Public exploit
Cross-site scripting (XSS) vulnerability in PHP-Nuke 6.0 allows remote attackers to inject arbitrary web script or HTML…
-
Unscored —CVE-2002-1951 Public exploit
Buffer overflow in GoAhead WebServer 2.1 allows remote attackers to execute arbitrary code via a long HTTP GET request …
-
Unscored —CVE-2002-1907 Public exploit
TelCondex SimpleWebServer 2.06.20817 allows remote attackers to cause a denial of service (crash) via a long HTTP GET r…
-
Unscored —CVE-2002-1966 Public exploit
Directory traversal vulnerability in magiccard.cgi in My Postcards Platinum 5.0 and 6.0 allows remote attackers to read…
-
Unscored —
The SMTP service in Microsoft Internet Information Services (IIS) 4.0 and 5.0 allows remote attackers to bypass anti-re…
-
Unscored —CVE-2002-1852 Public exploit
Cross-site scripting (XSS) vulnerability in Monkey 0.5.0 allows remote attackers to inject arbitrary web script or HTML…
-
Unscored —CVE-2002-1799 Public exploit
Cross-site scripting (XSS) vulnerability in phpRank 1.8 allows remote attackers to inject arbitrary web script or HTML …
-
Unscored —CVE-2002-1929 Public exploit
Cross-site scripting (XSS) vulnerability in pafiledb.php in PHP Arena paFileDB 1.1.3 through 3.0 allows remote attacker…
-
Unscored —CVE-2002-1798 Public exploit
MidiCart PHP, PHP Plus, and PHP Maxi allows remote attackers to (1) upload arbitrary php files via a direct request to …
-
Unscored —CVE-2002-1806 Public exploit
Cross-site scripting (XSS) vulnerability in Drupal 4.0.0 allows remote attackers to inject arbitrary web script or HTML…
-
Unscored —CVE-2002-1897 Public exploit
MyWebServer LLC MyWebServer 1.0.2 allows remote attackers to cause a denial of service (crash) via a long HTTP request,…
-
Unscored —CVE-2002-1965 Public exploit
Cross-site scripting (XSS) vulnerability in Errors.gsl in Imatix Xitami 2.5b4 and 2.5b5 allows remote attackers to inje…
-
Unscored —CVE-2002-1982 Public exploit
Directory traversal vulnerability in the list_directory function in Icecast 1.3.12 allows remote attackers to determine…
-
Unscored —CVE-2002-1818 Public exploit
ezhttpbench.php in eZ httpbench 1.1 allows remote attackers to read arbitrary files via a full pathname in the AnalyseS…
-
Unscored —CVE-2002-1845 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Yet Another Bulletin Board (YaBB) 1.40 and 1.41 allows remote …
-
Unscored —CVE-2002-1884 Public exploit
index.php in Py-Membres 3.1 allows remote attackers to log in as an administrator by setting the pymembs parameter to "…
-
Unscored —CVE-2002-1945 Public exploit
Buffer overflow in SmartMail Server 1.0 Beta 10 allows remote attackers to cause a denial of service (crash) via a long…
-
Unscored —
The default configuration of the Windows binary release of MySQL 3.23.2 through 3.23.52 has a NULL root password, which…
-
Unscored —CVE-2002-1878 Public exploit
PHP remote file inclusion vulnerability in w-Agora 4.1.3 allows remote attackers to execute arbitrary PHP code via the …
-
Unscored —
Buffer overflow in CHttpServer::OnParseError in the ISAPI extension (Isapi.cpp) when built using Microsoft Foundation C…
-
Unscored —CVE-2002-1922 Public exploit
Cross-site scripting (XSS) vulnerability in global.php in Jelsoft vBulletin 2.0.0 through 2.2.8 allows remote attackers…
-
Unscored —CVE-2002-1862 Public exploit
SmartMail Server 2.0 allows remote attackers to cause a denial of service (crash) by sending data and closing the conne…
-
Critical 9.8CVE-2002-1816 Public exploit
Off-by-one buffer overflow in the sock_gets function in sockhelp.c for ATPhttpd 0.4b and earlier allows remote attacker…
-
Unscored —CVE-2002-1805 Public exploit
Cross-site scripting (XSS) vulnerability in DaCode 1.2.0 allows remote attackers to inject arbitrary web script or HTML…
-
Unscored —CVE-2002-1792 Public exploit
Buffer overflow in Fake Identd 0.9 through 1.4 allows remote attackers to execute arbitrary code as root via a long req…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.2.3 allows remote attackers to inject arbitra…
-
Unscored —
Buffer overflow in mplay32.exe of Microsoft Windows Media Player (WMP) 6.3 through 7.1 allows remote attackers to execu…
-
Unscored —
Microsoft MSN Messenger Service 1.0 through 4.6 allows remote attackers to cause a denial of service (crash) via an inv…
-
Unscored —
mod_cgi in Apache 2.0.39 and 2.0.40 allows local users and possibly remote attackers to cause a denial of service (hang…
-
Unscored —CVE-2002-1837 Public exploit
The getAlbumToDisplay function in idsShared.pm for Image Display System (IDS) 0.81 allows remote attackers to determine…
-
Unscored —CVE-2002-1812 Public exploit
Buffer overflow in gdam123 0.933 and 0.942 allows local users to execute arbitrary code via a long filename parameter.
-
Unscored —CVE-2002-1827 Public exploit
Sendmail 8.9.0 through 8.12.3 allows local users to cause a denial of service by obtaining an exclusive lock on the (1)…
-
Unscored —CVE-2002-1865 Public exploit
Buffer overflow in the Embedded HTTP server, as used in (1) D-Link DI-804 4.68, Dl-704 V2.56b6, and Dl-704 V2.56b5 and …
-
Unscored —CVE-2002-1896 Public exploit
Buffer overflow in Alsaplayer 0.99.71, when installed setuid root, allows local users to execute arbitrary code via a l…
-
Unscored —CVE-2002-1868 Public exploit
Dispair 0.1 and 0.2 allows remote attackers to execute arbitrary shell commands via certain form fields.
-
Unscored —CVE-2002-1904 Public exploit
Buffer overflow in the Log function in util.c in GazTek ghttpd 1.4 through 1.4.3 allows remote attackers to execute arb…
-
Unscored —CVE-2002-1958 Public exploit
Cross-site scripting (XSS) vulnerability in kmMail 1.0, 1.0a, and 1.0b allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2002-1906 Public exploit
The web server for Polycom ViaVideo 2.2 and 3.0 allows remote attackers to cause a denial of service (CPU consumption) …
-
Unscored —CVE-2002-1943 Public exploit
SafeTP 1.46, when network address translation (NAT) is being used, leaks the internal IP address of the FTP server in a…
-
Unscored —CVE-2002-1910 Public exploit
Click2Learn Ingenium Learning Management System 5.1 and 6.1 uses weak encryption for passwords (reversible algorithm), …