Skip to content
OpenAdvisories

Archive

June 2005

Vulnerabilities first published in this month (UTC), newest first.

  1. 138
  2. 217
  3. 32
  4. 4 
  5. 5 
  6. 61
  7. 723
  8. 825
  9. 97
  10. 10 
  11. 11 
  12. 121
  13. 131
  14. 1456
  15. 158
  16. 162
  17. 17 
  18. 18 
  19. 19 
  20. 2026
  21. 21163
  22. 2213
  23. 23 
  24. 24 
  25. 25 
  26. 267
  27. 27 
  28. 28220
  29. 2914
  30. 3027

176 results · Clear filters · Feed

  • Unscored —
    CVE-2004-2143 Public exploit

    SQL injection vulnerability in the ReMOSitory Server add-on module to Mambo Portal 4.5.1 (1.09) and earlier allows remo…

  • Unscored —
    CVE-2005-1931 Public exploit

    GoodTech SMTP Server 5.14 allows remote attackers to cause a denial of service (application crash) via a RCPT TO comman…

  • Unscored —
    CVE-2005-2087 Public exploit EPSS 61%

    Internet Explorer 5.01 SP4 up to 6 on various Windows operating systems, including IE 6.0.2900.2180 on Windows XP, allo…

  • Unscored —
    CVE-2005-2085 Public exploit

    Buffer overflow in Inframail Advantage Server Edition 6.0 through 6.7 allows remote attackers to cause a denial of serv…

  • Unscored —
    CVE-2005-2086 Public exploit EPSS 85%

    PHP remote file inclusion vulnerability in viewtopic.php in phpBB 2.0.15 and earlier allows remote attackers to execute…

  • Unscored —
    CVE-2005-2083 Public exploit

    Format string vulnerability in IMAP4 in IA eMailServer Corporate Edition 5.2.2 build 1051 allows remote attackers to ca…

  • Unscored —
    CVE-2005-0771 Public exploit EPSS 54%

    VERITAS Backup Exec Server (beserver.exe) 9.0 through 10.0 for Windows allows remote unauthenticated attackers to modif…

  • Unscored —
    CVE-2005-0773 Public exploit EPSS 86%

    Stack-based buffer overflow in VERITAS Backup Exec Remote Agent 9.0 through 10.0 for Windows, and 9.0.4019 through 9.1.…

  • Unscored —
    CVE-2005-2078 Public exploit

    BisonFTP Server V4R1 allows remote authenticated users to cause a denial of service via an invalid command with a long …

  • Unscored —
    CVE-2005-2072 Public exploit

    The runtime linker (ld.so) in Solaris 8, 9, and 10 trusts the LD_AUDIT environment variable in setuid or setgid program…

  • Unscored —
    CVE-2005-2071 Public exploit

    traceroute in Sun Solaris 10 on x86 systems allows local users to execute arbitrary code with PRIV_NET_RAWACCESS privil…

  • Unscored —
    CVE-2005-2075 Public exploit

    PHP-Fusion 5.0 and 6.0 stores the database file with a predictable filename under the web document root with insufficie…

  • Unscored —
    CVE-2005-2077 Public exploit

    Cross-site scripting (XSS) vulnerability in error.asp for Hosting Controller allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2002-1803 Public exploit

    Cross-site scripting (XSS) vulnerability in PHP-Nuke 6.0 allows remote attackers to inject arbitrary web script or HTML…

  • Unscored —
    CVE-2002-1951 Public exploit

    Buffer overflow in GoAhead WebServer 2.1 allows remote attackers to execute arbitrary code via a long HTTP GET request …

  • Unscored —
    CVE-2002-1907 Public exploit

    TelCondex SimpleWebServer 2.06.20817 allows remote attackers to cause a denial of service (crash) via a long HTTP GET r…

  • Unscored —
    CVE-2002-1966 Public exploit

    Directory traversal vulnerability in magiccard.cgi in My Postcards Platinum 5.0 and 6.0 allows remote attackers to read…

  • Unscored —
    CVE-2002-1790 Public exploit EPSS 34%

    The SMTP service in Microsoft Internet Information Services (IIS) 4.0 and 5.0 allows remote attackers to bypass anti-re…

  • Unscored —
    CVE-2002-1852 Public exploit

    Cross-site scripting (XSS) vulnerability in Monkey 0.5.0 allows remote attackers to inject arbitrary web script or HTML…

  • Unscored —
    CVE-2002-1799 Public exploit

    Cross-site scripting (XSS) vulnerability in phpRank 1.8 allows remote attackers to inject arbitrary web script or HTML …

  • Unscored —
    CVE-2002-1929 Public exploit

    Cross-site scripting (XSS) vulnerability in pafiledb.php in PHP Arena paFileDB 1.1.3 through 3.0 allows remote attacker…

  • Unscored —
    CVE-2002-1798 Public exploit

    MidiCart PHP, PHP Plus, and PHP Maxi allows remote attackers to (1) upload arbitrary php files via a direct request to …

  • Unscored —
    CVE-2002-1806 Public exploit

    Cross-site scripting (XSS) vulnerability in Drupal 4.0.0 allows remote attackers to inject arbitrary web script or HTML…

  • Unscored —
    CVE-2002-1897 Public exploit

    MyWebServer LLC MyWebServer 1.0.2 allows remote attackers to cause a denial of service (crash) via a long HTTP request,…

  • Unscored —
    CVE-2002-1965 Public exploit

    Cross-site scripting (XSS) vulnerability in Errors.gsl in Imatix Xitami 2.5b4 and 2.5b5 allows remote attackers to inje…

  • Unscored —
    CVE-2002-1982 Public exploit

    Directory traversal vulnerability in the list_directory function in Icecast 1.3.12 allows remote attackers to determine…

  • Unscored —
    CVE-2002-1818 Public exploit

    ezhttpbench.php in eZ httpbench 1.1 allows remote attackers to read arbitrary files via a full pathname in the AnalyseS…

  • Unscored —
    CVE-2002-1845 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Yet Another Bulletin Board (YaBB) 1.40 and 1.41 allows remote …

  • Unscored —
    CVE-2002-1884 Public exploit

    index.php in Py-Membres 3.1 allows remote attackers to log in as an administrator by setting the pymembs parameter to "…

  • Unscored —
    CVE-2002-1945 Public exploit

    Buffer overflow in SmartMail Server 1.0 Beta 10 allows remote attackers to cause a denial of service (crash) via a long…

  • Unscored —
    CVE-2002-1809 Public exploit EPSS 16%

    The default configuration of the Windows binary release of MySQL 3.23.2 through 3.23.52 has a NULL root password, which…

  • Unscored —
    CVE-2002-1878 Public exploit

    PHP remote file inclusion vulnerability in w-Agora 4.1.3 allows remote attackers to execute arbitrary PHP code via the …

  • Unscored —
    CVE-2002-1973 Public exploit EPSS 40%

    Buffer overflow in CHttpServer::OnParseError in the ISAPI extension (Isapi.cpp) when built using Microsoft Foundation C…

  • Unscored —
    CVE-2002-1922 Public exploit

    Cross-site scripting (XSS) vulnerability in global.php in Jelsoft vBulletin 2.0.0 through 2.2.8 allows remote attackers…

  • Unscored —
    CVE-2002-1862 Public exploit

    SmartMail Server 2.0 allows remote attackers to cause a denial of service (crash) by sending data and closing the conne…

  • Critical 9.8
    CVE-2002-1816 Public exploit

    Off-by-one buffer overflow in the sock_gets function in sockhelp.c for ATPhttpd 0.4b and earlier allows remote attacker…

  • Unscored —
    CVE-2002-1805 Public exploit

    Cross-site scripting (XSS) vulnerability in DaCode 1.2.0 allows remote attackers to inject arbitrary web script or HTML…

  • Unscored —
    CVE-2002-1792 Public exploit

    Buffer overflow in Fake Identd 0.9 through 1.4 allows remote attackers to execute arbitrary code as root via a long req…

  • Unscored —
    CVE-2002-1954 Public exploit EPSS 12%

    Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.2.3 allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2002-1847 Public exploit EPSS 34%

    Buffer overflow in mplay32.exe of Microsoft Windows Media Player (WMP) 6.3 through 7.1 allows remote attackers to execu…