Archive
June 2005
Vulnerabilities first published in this month (UTC), newest first.
176 results · Clear filters · Feed
-
Unscored —
Microsoft MSN Messenger Service 1.0 through 4.6 allows remote attackers to cause a denial of service (crash) via an inv…
-
Unscored —
mod_cgi in Apache 2.0.39 and 2.0.40 allows local users and possibly remote attackers to cause a denial of service (hang…
-
Unscored —CVE-2002-1837 Public exploit
The getAlbumToDisplay function in idsShared.pm for Image Display System (IDS) 0.81 allows remote attackers to determine…
-
Unscored —CVE-2002-1812 Public exploit
Buffer overflow in gdam123 0.933 and 0.942 allows local users to execute arbitrary code via a long filename parameter.
-
Unscored —CVE-2002-1827 Public exploit
Sendmail 8.9.0 through 8.12.3 allows local users to cause a denial of service by obtaining an exclusive lock on the (1)…
-
Unscored —CVE-2002-1865 Public exploit
Buffer overflow in the Embedded HTTP server, as used in (1) D-Link DI-804 4.68, Dl-704 V2.56b6, and Dl-704 V2.56b5 and …
-
Unscored —CVE-2002-1896 Public exploit
Buffer overflow in Alsaplayer 0.99.71, when installed setuid root, allows local users to execute arbitrary code via a l…
-
Unscored —CVE-2002-1868 Public exploit
Dispair 0.1 and 0.2 allows remote attackers to execute arbitrary shell commands via certain form fields.
-
Unscored —CVE-2002-1904 Public exploit
Buffer overflow in the Log function in util.c in GazTek ghttpd 1.4 through 1.4.3 allows remote attackers to execute arb…
-
Unscored —CVE-2002-1958 Public exploit
Cross-site scripting (XSS) vulnerability in kmMail 1.0, 1.0a, and 1.0b allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2002-1906 Public exploit
The web server for Polycom ViaVideo 2.2 and 3.0 allows remote attackers to cause a denial of service (CPU consumption) …
-
Unscored —CVE-2002-1943 Public exploit
SafeTP 1.46, when network address translation (NAT) is being used, leaks the internal IP address of the FTP server in a…
-
Unscored —CVE-2002-1910 Public exploit
Click2Learn Ingenium Learning Management System 5.1 and 6.1 uses weak encryption for passwords (reversible algorithm), …
-
Unscored —CVE-2002-1930 Public exploit
Buffer overflow in AN HTTPd 1.38 through 1.4.1c allows remote attackers to execute arbitrary code via a SOCKS4 request …
-
Unscored —CVE-2002-1811 Public exploit
Belkin F5D6130 Wireless Network Access Point running firmware AP14G8 allows remote attackers to cause a denial of servi…
-
Unscored —CVE-2002-1813 Public exploit
Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8.2790 allows remote attackers to execute arbitrary …
-
Unscored —CVE-2002-1911 Public exploit
ZoneAlarm Pro 3.0 and 3.1, when configured to block all traffic, allows remote attackers to cause a denial of service (…
-
Unscored —CVE-2002-1814 Public exploit
Buffer overflow in efstools in Bonobo, when installed setuid, allows local users to execute arbitrary code via long com…
-
Unscored —CVE-2002-1905 Public exploit
Buffer overflow in the web server of Polycom ViaVideo 2.2 and 3.0 allows remote attackers to cause a denial of service …
-
Unscored —CVE-2002-1983 Public exploit
The timer implementation in QNX RTOS 6.1.0 allows local users to cause a denial of service (hang) and possibly execute …
-
Unscored —CVE-2002-1826 Public exploit
grsecurity 1.9.4 for Linux kernel 2.4.18 allows local users to bypass read-only permissions by using mmap to directly m…
-
Unscored —CVE-2002-1886 Public exploit
TightAuction 3.0 stores config.inc under the web document root with insufficient access control, which allows remote at…
-
Unscored —
Buffer overflow in the HttpGetRequest function in Zeroo HTTP server 1.5 allows remote attackers to execute arbitrary co…
-
Unscored —
Directory traversal vulnerability in Simple Web Server (SWS) 0.0.4 through 0.1.0 allows remote attackers to read arbitr…
-
Unscored —CVE-2002-1829 Public exploit
Cross-site scripting (XSS) vulnerability in codeparse.php in Open Bulletin Board (OpenBB) 1.0.0 RC3 allows remote attac…
-
Unscored —CVE-2002-1828 Public exploit
Savant Webserver 3.1 allows remote attackers to cause a denial of service (crash) via an HTTP GET request with a negati…
-
Unscored —CVE-2002-1898 Public exploit
Terminal 1.3 in Apple Mac OS X 10.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a…
-
Unscored —CVE-2002-1986 Public exploit
Perception LiteServe 2.0 through 2.0.1 allows remote attackers to obtain the source code of CGI scripts via an HTTP req…
-
Unscored —CVE-2002-1804 Public exploit
Cross-site scripting (XSS) vulnerability in NPDS 4.8 allows remote attackers to inject arbitrary web script or HTML via…
-
Unscored —CVE-2002-1887 Public exploit
PHP remote file inclusion vulnerability in customize.php for phpMyNewsletter 0.6.10 allows remote attackers to execute …
-
Unscored —CVE-2002-1885 Public exploit
PHP remote file inclusion vulnerability in showhits.php3 for PowerPhlogger (PPhlogger) 2.0.9 through 2.2.2 allows remot…
-
Unscored —CVE-2002-1785 Public exploit
Cross-site scripting (XSS) vulnerability in Zeus Administration Server in Zeus Web Server 4.0 through 4.1r2 allows remo…
-
Unscored —CVE-2002-1830 Public exploit
Open Bulletin Board (OpenBB) 1.0.0 RC3 allows remote attackers to bypass authentication and access modifier options via…
-
Unscored —CVE-2002-1891 Public exploit
Buffer overflow in IRCIT 0.3.1 IRC client allows remote attackers to execute arbitrary code via a long invite request.
-
Unscored —CVE-2002-1802 Public exploit
Cross-site scripting (XSS) vulnerability in Xoops 1.0 RC3 allows remote attackers to inject arbitrary web script or HTM…
-
Unscored —CVE-2005-2067 Public exploit
SQL injection vulnerability in article.asp in unknown versions of aspnuke allows remote attackers to execute arbitrary …
-
Unscored —CVE-2005-2062 Public exploit
Multiple SQL injection vulnerabilities in ActiveBuyAndSell 6.2 allow remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2005-2058 Public exploit
Multiple SQL injection vulnerabilities in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to execute arbit…
-
Unscored —CVE-2005-2066 Public exploit
SQL injection vulnerability in comment_post.asp in ASP Nuke 0.80 allows remote attackers to execute arbitrary SQL state…
-
Unscored —CVE-2005-2065 Public exploit
HTTP response splitting vulnerability in language_select.asp in ASP Nuke 0.80 allows remote attackers to spoof web cont…