Skip to content
OpenAdvisories

Archive

30 June 2005

Vulnerabilities first published on this day (UTC), newest first.

  1. 138
  2. 217
  3. 32
  4. 4 
  5. 5 
  6. 61
  7. 723
  8. 825
  9. 97
  10. 10 
  11. 11 
  12. 121
  13. 131
  14. 1456
  15. 158
  16. 162
  17. 17 
  18. 18 
  19. 19 
  20. 2026
  21. 21163
  22. 2213
  23. 23 
  24. 24 
  25. 25 
  26. 267
  27. 27 
  28. 28220
  29. 2914
  30. 3027

27 results · Feed

  • Unscored —

    Unknown vulnerability in the remote tape support (remote.c) in the RMT client for Jorg Schilling sdd 1.28 and 1.31 has …

  • Unscored —

    CRLF injection vulnerability in YaBB 1 Gold before 1.3.2 allows remote attackers to modify text file contents via the s…

  • Unscored —

    Unknown vulnerability in Adminedit.pl YaBB 1 Gold before 1.3.2 allows attackers to execute arbitrary code via settings.…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in AWSguest.php in AllWebScripts MySQLGuest allows remote attackers to inject …

  • Unscored —
    CVE-2004-2143 Public exploit

    SQL injection vulnerability in the ReMOSitory Server add-on module to Mambo Portal 4.5.1 (1.09) and earlier allows remo…

  • Unscored —

    The ENSURE_BITS macro in mszipd.c for Clam AntiVirus (ClamAV) 0.83, and other versions vefore 0.86, allows remote attac…

  • Unscored —

    The MS-Expand file handling in Clam AntiVirus (ClamAV) before 0.86 allows remote attackers to cause a denial of service…

  • Unscored —

    The ptrace call in the Linux kernel 2.6.8.1 and 2.6.10 for the AMD64 platform allows local users to cause a denial of s…

  • Unscored —

    Lpanel 1.59 and earlier, and other versions before 1.597, allows remote authenticated users to modify certain critical …

  • Unscored —

    syscall in the Linux kernel 2.6.8.1 and 2.6.10 for the AMD64 platform, when running in 32-bit compatibility mode, allow…

  • Unscored —
    CVE-2005-1931 Public exploit

    GoodTech SMTP Server 5.14 allows remote attackers to cause a denial of service (application crash) via a RCPT TO comman…

  • Unscored —

    BEA Systems WebLogic 8.1 SP1 allows remote attackers to poison the web cache, bypass web application firewall protectio…

  • Unscored —
    CVE-2005-2087 Public exploit EPSS 61%

    Internet Explorer 5.01 SP4 up to 6 on various Windows operating systems, including IE 6.0.2900.2180 on Windows XP, allo…

  • Unscored —

    IBM WebSphere 5.1 and WebSphere 5.0 allows remote attackers to poison the web cache, bypass web application firewall pr…

  • Unscored —
    CVE-2005-2089 EPSS 31%

    Microsoft IIS 5.0 and 6.0 allows remote attackers to poison the web cache, bypass web application firewall protection, …

  • Medium —
    CVE-2005-2090 EPSS 26%

    Tomcat Vulnerable to Web Cache Poisoning

    Jakarta Tomcat 5.0.19 (Coyote/1.1) and Tomcat 4.1.24 (Coyote/1.0) allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Co…

  • Unscored —
    CVE-2005-2085 Public exploit

    Buffer overflow in Inframail Advantage Server Edition 6.0 through 6.7 allows remote attackers to cause a denial of serv…

  • Unscored —

    FreeBSD 4.x through 4.11 and 5.x through 5.4 allows remote attackers to modify certain TCP options via a TCP packet wit…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in SearchResults.aspx in Community Forum allows remote attackers to inject arb…

  • Unscored —

    im_trbbs.cgi in imTRSET 1.02 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters…

  • Unscored —

    Sun SunONE web server 6.1 SP1 allows remote attackers to poison the web cache, bypass web application firewall protecti…

  • Unscored —

    Stack-based buffer overflow in the function that parses commands in Asterisk 1.0.7, when the 'write = command' option i…

  • Unscored —
    CVE-2005-2086 Public exploit EPSS 85%

    PHP remote file inclusion vulnerability in viewtopic.php in phpBB 2.0.15 and earlier allows remote attackers to execute…

  • Unscored —
    CVE-2005-2083 Public exploit

    Format string vulnerability in IMAP4 in IA eMailServer Corporate Edition 5.2.2 build 1051 allows remote attackers to ca…

  • Unscored —

    ipfw in FreeBSD 5.4, when running on Symmetric Multi-Processor (SMP) or Uni Processor (UP) systems with the PREEMPTION …

  • Unscored —
    CVE-2005-2088 EPSS 20%

    The Apache HTTP server before 1.3.34, and 2.0.x before 2.0.55, when acting as an HTTP proxy, allows remote attackers to…

  • Unscored —

    Oracle 9i Application Server (Oracle9iAS) 9.0.2 allows remote attackers to poison the web cache, bypass web application…