Skip to content
OpenAdvisories

Archive

June 2005

Vulnerabilities first published in this month (UTC), newest first.

← May 2005 2005 / June July 2005 →
  1. 138
  2. 217
  3. 32
  4. 4 
  5. 5 
  6. 61
  7. 723
  8. 825
  9. 97
  10. 10 
  11. 11 
  12. 121
  13. 131
  14. 1456
  15. 158
  16. 162
  17. 17 
  18. 18 
  19. 19 
  20. 2026
  21. 21163
  22. 2213
  23. 23 
  24. 24 
  25. 25 
  26. 267
  27. 27 
  28. 28220
  29. 2914
  30. 3027
All Critical High Medium Low Exploited only Public exploit

651 results · Feed

  • Unscored —
    CVE-2002-1961

    Finjan Software SurfinGate 6.0 and 6.0 1 allows remote attackers to bypass URL access restrictions via a URL whose host…

  • Unscored —
    CVE-2002-1967

    Buffer overflow in XiRCON 1.0 Beta 4 allows remote attackers to cause a denial of service (disconnect) via a long (1) c…

  • Unscored —
    CVE-2002-1945 Public exploit

    Buffer overflow in SmartMail Server 1.0 Beta 10 allows remote attackers to cause a denial of service (crash) via a long…

  • Unscored —
    CVE-2002-1948

    Multiple buffer overflows in Gringotts 0.5.9 allows local users to execute arbitrary commands via unknown attack vector…

  • Unscored —
    CVE-2002-1836

    The default configuration of Xerox DocuTech 6110 and DocuTech 6115 exports certain NFS shares to the world with world w…

  • Unscored —
    CVE-2002-1883

    Trolltech Qt Assistant 1.0 in Trolltech Qt 3.0.3, when loaded from the Designer, opens port 7358 for interprocess commu…

  • Unscored —
    CVE-2002-1933

    The terminal services screensaver for Microsoft Windows 2000 does not automatically lock the terminal window if the win…

  • Unscored —
    CVE-2002-1809 Public exploit EPSS 16%

    The default configuration of the Windows binary release of MySQL 3.23.2 through 3.23.52 has a NULL root password, which…

  • Unscored —
    CVE-2002-1878 Public exploit

    PHP remote file inclusion vulnerability in w-Agora 4.1.3 allows remote attackers to execute arbitrary PHP code via the …

  • Unscored —
    CVE-2002-1973 Public exploit EPSS 40%

    Buffer overflow in CHttpServer::OnParseError in the ISAPI extension (Isapi.cpp) when built using Microsoft Foundation C…

  • Unscored —
    CVE-2002-1786

    SGI IRIX 6.5 through 6.5.14 applies a umask of 022 to root core dumps, which allows local users to read the core dumps …

  • Unscored —
    CVE-2002-1922 Public exploit

    Cross-site scripting (XSS) vulnerability in global.php in Jelsoft vBulletin 2.0.0 through 2.2.8 allows remote attackers…

  • Unscored —
    CVE-2002-1879

    SQL injection vulnerability in LokwaBB 1.2.2 allows remote attackers to execute arbitrary SQL commands via the (1) memb…

  • Unscored —
    CVE-2002-1797

    ChaiVM for HP color LaserJet 4500 and 4550 or HP LaserJet 4100 and 8150 does not properly enforce access control restri…

  • Unscored —
    CVE-2002-1862 Public exploit

    SmartMail Server 2.0 allows remote attackers to cause a denial of service (crash) by sending data and closing the conne…

  • Unscored —
    CVE-2002-1921

    The default configuration of MySQL 3.20.32 through 3.23.52, when running on Windows, does set the bind address to the l…

  • Critical 9.8
    CVE-2002-1816 Public exploit

    Off-by-one buffer overflow in the sock_gets function in sockhelp.c for ATPhttpd 0.4b and earlier allows remote attacker…

  • Unscored —
    CVE-2002-1972

    Unknown vulnerability in Parallel port powerSwitch (aka pp_powerSwitch) 0.1 does not properly enforce access controls, …

  • Unscored —
    CVE-2002-1960

    Cross-site scripting (XSS) vulnerability in Cybozu Share360 1.1 allows remote attackers to inject arbitrary web script …

  • Unscored —
    CVE-2002-1821

    Ultimate PHP Board (UPB) 1.0 and 1.0b allows remote authenticated users to gain privileges and perform unauthorized act…

  • Unscored —
    CVE-2002-1805 Public exploit

    Cross-site scripting (XSS) vulnerability in DaCode 1.2.0 allows remote attackers to inject arbitrary web script or HTML…

  • Unscored —
    CVE-2002-1792 Public exploit

    Buffer overflow in Fake Identd 0.9 through 1.4 allows remote attackers to execute arbitrary code as root via a long req…

  • Unscored —
    CVE-2002-1874

    astrocam.cgi in AstroCam 0.9-1-1 through 1.4.0 allows remote attackers to execute arbitrary commands via shell metachar…

  • Unscored —
    CVE-2002-1842

    Perlbot 1.0 beta allows remote attackers to execute arbitrary commands via shell metacharacters in (1) a word that is b…

  • Unscored —
    CVE-2002-1985

    iSMTP 5.0.1 allows remote attackers to cause a denial of service via a long "MAIL FROM" command, possibly triggering a …

  • Unscored —
    CVE-2002-1793

    HTTP Server mod_ssl module running on HP-UX 11.04 with Virtualvault OS (VVOS) 4.5 through 4.6 closes the connection whe…

  • Unscored —
    CVE-2002-1857

    jo! jo Webserver 1.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, whic…

  • Unscored —
    CVE-2002-1939

    FlashFXP 1.4 prints FTP passwords in plaintext when there are transfers in the queue, which allows attackers to obtain …

  • Unscored —
    CVE-2002-1835

    The default configuration of Xerox DocuTech 6110 and DocuTech 6115 running Solaris 8.0 has a large number of unnecessar…

  • Unscored —
    CVE-2002-1931

    Cross-site scripting (XSS) vulnerability in PHP Arena paFileDB 1.1.3 and 2.1.1 allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2002-1876

    Microsoft Exchange 2000 allows remote authenticated attackers to cause a denial of service via a large number of rapid …

  • Unscored —
    CVE-2002-1957

    Buffer overflow in the netlog function in pen.c for Pen 0.9.1 and 0.9.2 allows remote attackers to execute arbitrary co…

  • Unscored —
    CVE-2002-1954 Public exploit EPSS 12%

    Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.2.3 allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2002-1847 Public exploit EPSS 34%

    Buffer overflow in mplay32.exe of Microsoft Windows Media Player (WMP) 6.3 through 7.1 allows remote attackers to execu…

  • Unscored —
    CVE-2002-1831 Public exploit EPSS 22%

    Microsoft MSN Messenger Service 1.0 through 4.6 allows remote attackers to cause a denial of service (crash) via an inv…

  • Unscored —
    CVE-2002-1950

    Cross-site scripting (XSS) vulnerability in phpRank 1.8 allows remote attackers to inject arbitrary web script or HTML …

  • Unscored —
    CVE-2002-1977

    Network Associates PGP 7.0.4 and 7.1 does not time out according to the value set in the "Passphrase Cache" option, whi…

  • Unscored —
    CVE-2002-1834

    The default configuration of Xerox DocuTech 6110 and DocuTech 6115 allows remote attackers to connect to the web server…

  • Unscored —
    CVE-2002-1850 Public exploit EPSS 17%

    mod_cgi in Apache 2.0.39 and 2.0.40 allows local users and possibly remote attackers to cause a denial of service (hang…

    apache2 Debian
  • Unscored —
    CVE-2002-1875

    Entercept Agent 2.5 agent for Windows, released before May 21, 2002, allows local administrative users to obtain the en…