Archive
June 2005
Vulnerabilities first published in this month (UTC), newest first.
651 results · Feed
-
Unscored —CVE-2002-1799 Public exploit
Cross-site scripting (XSS) vulnerability in phpRank 1.8 allows remote attackers to inject arbitrary web script or HTML …
-
Unscored —
Cross-site scripting (XSS) vulnerability in ArGoSoft Mail Server Pro 1.8.1.9 allows remote attackers to inject arbitrar…
-
Unscored —
The ping utility in networking_utils.php in Sourcecraft Networking_Utils 1.0 allows remote attackers to read arbitrary …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Pinboard 1.0 allows remote attackers to inject arbitrary web script or HTML…
-
Unscored —
CGIForum 1.0 through 1.05 allows remote attackers to cause a denial of service (infinite recursion) by creating a messa…
-
Unscored —
CRLF injection vulnerability in the "User Profile: Send Email" feature in Geeklog 1.35 and 1.3.5sr1 allows remote attac…
-
Unscored —
Buffer overflow in Volume Manager daemon (vold) of Sun Solaris 2.5.1 through 8 allows local users to execute arbitrary …
-
Unscored —
ImageFolio 2.23 through 2.27 allows remote attackers to obtain sensitive information via a nonexistent image category, …
-
Unscored —CVE-2002-1929 Public exploit
Cross-site scripting (XSS) vulnerability in pafiledb.php in PHP Arena paFileDB 1.1.3 through 3.0 allows remote attacker…
-
Unscored —
LokwaBB 1.2.2 allows remote attackers to read arbitrary messages by modifying the pmid parameter to pm.php.
-
Unscored —
The document management module in NOLA 1.1.1 and 1.1.2 does not restrict the types of files that are uploaded, which al…
-
Unscored —
CommonName Toolbar 3.5.2.0 sends unqualified domain name requests to the CommonName organization and possibly other web…
-
Unscored —CVE-2002-1798 Public exploit
MidiCart PHP, PHP Plus, and PHP Maxi allows remote attackers to (1) upload arbitrary php files via a direct request to …
-
Unscored —CVE-2002-1806 Public exploit
Cross-site scripting (XSS) vulnerability in Drupal 4.0.0 allows remote attackers to inject arbitrary web script or HTML…
-
Unscored —CVE-2002-1897 Public exploit
MyWebServer LLC MyWebServer 1.0.2 allows remote attackers to cause a denial of service (crash) via a long HTTP request,…
-
Unscored —
SnortCenter 0.9.5, when configured to push Snort rules, stores the rules in a temporary file with world-readable and wo…
-
Unscored —
rhmask 1.0-9 in Red Hat Linux 7.1 allows local users to overwrite arbitrary files via a symlink attack on the mask file.
-
Unscored —
Simple Web Server (SWS) 0.0.4 through 0.1.0 does not close file descriptors for 404 error messages, which could allow r…
-
Unscored —
The servlet engine in Jakarta Apache Tomcat 3.3 and 4.0.4, when using IIS and the ajp1.3 connector, allows remote attac…
-
Unscored —
602Pro LAN SUITE 2002 allows remote attackers to view the directory tree via an HTTP GET request with a trailing "~" (t…
-
Unscored —
Format string vulnerability in newsx NNTP client before 1.4.8 allows local users to execute arbitrary code via format s…
-
Unscored —
Orion Application Server 1.5.3, when running on Windows, allows remote attackers to retrieve files in the WEB-INF direc…
-
Unscored —
Nagios 1.0b1 through 1.0b3 allows remote attackers to execute arbitrary commands via shell metacharacters in plugin out…
-
Unscored —
ParaChat Server 4.0 does not log users off if the browser's back button is used, which allows remote attackers to cause…
-
Unscored —CVE-2002-1965 Public exploit
Cross-site scripting (XSS) vulnerability in Errors.gsl in Imatix Xitami 2.5b4 and 2.5b5 allows remote attackers to inje…
-
Unscored —CVE-2002-1982 Public exploit
Directory traversal vulnerability in the list_directory function in Icecast 1.3.12 allows remote attackers to determine…
-
Unscored —
The Network Attached Storage (NAS) Administration Web Page for Iomega NAS A300U transmits passwords in cleartext, which…
-
Unscored —
Directory traversal vulnerability in TinyHTTPD 0.1 .0 allows remote attackers to read or execute arbitrary files via a …
-
Unscored —
Imatix Xitami 2.5 b5 does not properly terminate certain Keep-Alive connections that have been broken or closed early, …
-
Unscored —
UTStarcom BAS 1000 3.1.10 creates several default or back door accounts and passwords, which allows remote attackers to…
-
Unscored —
Unknown vulnerability in Veritas Cluster Server (VCS) 1.2 for WindowsNT, Cluster Server 1.3.0 for Solaris, and Cluster …
-
Unscored —CVE-2002-1818 Public exploit
ezhttpbench.php in eZ httpbench 1.1 allows remote attackers to read arbitrary files via a full pathname in the AnalyseS…
-
Unscored —
PowerChute plus 5.0.2 creates a "Pwrchute" directory during installation that is shared and world writeable, which coul…
-
Unscored —
Click2Learn Ingenium Learning Management System 5.1 and 6.1 stores the hashed administrative password in a config.txt f…
-
Unscored —CVE-2002-1845 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Yet Another Bulletin Board (YaBB) 1.40 and 1.41 allows remote …
-
Unscored —
Iomega NAS A300U uses cleartext LANMAN authentication when mounting CIFS/SMB drives, which allows remote attackers to p…
-
Unscored —
Macromedia JRun 3.0 through 4.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF dire…
-
Unscored —CVE-2002-1884 Public exploit
index.php in Py-Membres 3.1 allows remote attackers to log in as an administrator by setting the pymembs parameter to "…
-
Unscored —
Microsoft SQL Server 6.0 through 2000, with SQL Authentication enabled, uses weak password encryption (XOR), which allo…
-
Unscored —
Linux kernel 2.4.1 through 2.4.19 sets root's NR_RESERVED_FILES limit to 10 files, which allows local users to cause a …