Archive
June 2005
Vulnerabilities first published in this month (UTC), newest first.
651 results · Feed
-
Unscored —CVE-2002-1837 Public exploit
The getAlbumToDisplay function in idsShared.pm for Image Display System (IDS) 0.81 allows remote attackers to determine…
-
Unscored —CVE-2002-1812 Public exploit
Buffer overflow in gdam123 0.933 and 0.942 allows local users to execute arbitrary code via a long filename parameter.
-
Unscored —
Microsoft SQL Server 2000 through SQL Server 2000 SP2 allows the "public" role to execute the (1) sp_MSSetServerPropert…
-
Unscored —CVE-2002-1827 Public exploit
Sendmail 8.9.0 through 8.12.3 allows local users to cause a denial of service by obtaining an exclusive lock on the (1)…
-
Unscored —CVE-2002-1865 Public exploit
Buffer overflow in the Embedded HTTP server, as used in (1) D-Link DI-804 4.68, Dl-704 V2.56b6, and Dl-704 V2.56b5 and …
-
Unscored —
irssi IRC client 0.8.4, when downloaded after 14-March-2002, could contain a backdoor in the configuration file, which …
-
Unscored —
The default configuration of BizDesign ImageFolio 2.23 through 2.26 does not control access to (1) admin/setup.cgi, whi…
-
Unscored —
The default configurations for DocuTech 6110 and DocuTech 6115 have a default administrative password of (1) "service!"…
-
Unscored —CVE-2002-1896 Public exploit
Buffer overflow in Alsaplayer 0.99.71, when installed setuid root, allows local users to execute arbitrary code via a l…
-
Unscored —CVE-2002-1868 Public exploit
Dispair 0.1 and 0.2 allows remote attackers to execute arbitrary shell commands via certain form fields.
-
Medium 5.5
Sharp Zaurus PDA SL-5000D and SL-5500 uses a salt of "A0" to encrypt the screen-locking password as stored in the Secur…
-
Unscored —
Unknown vulnerability in AolSecurityPrivate.class in Oracle E-Business Suite 11i 11.1 through 11.6 allows remote attack…
-
Unscored —CVE-2002-1908 EPSS 14%
Microsoft IIS 5.0 and 5.1 allows remote attackers to cause a denial of service (CPU consumption) via an HTTP request wi…
-
Unscored —
Macromedia Flash Player 4.0 r12 through 6.0.47.0 allows remote attackers to cause a denial of service (web browser cras…
-
Unscored —CVE-2002-1904 Public exploit
Buffer overflow in the Log function in util.c in GazTek ghttpd 1.4 through 1.4.3 allows remote attackers to execute arb…
-
Unscored —
Pramati Server 3.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which …
-
Unscored —
phptonuke.php in myPHPNuke 1.8.8 allows remote attackers to read arbitrary files via a full pathname in the filnavn var…
-
Unscored —CVE-2002-1958 Public exploit
Cross-site scripting (XSS) vulnerability in kmMail 1.0, 1.0a, and 1.0b allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2002-1906 Public exploit
The web server for Polycom ViaVideo 2.2 and 3.0 allows remote attackers to cause a denial of service (CPU consumption) …
-
Unscored —
Pine 4.2.1 through 4.4.4 puts Unix usernames and/or uid into Sender: and X-Sender: headers, which could allow remote at…
-
Unscored —
Aquonics File Manager 1.5 allows users with edit privileges to modify user accounts by editing the userlist.cgi file.
-
Unscored —
Cross-site scripting (XSS) vulnerability in phpWebSite 0.8.3 allows remote attackers to inject arbitrary web script or …
-
High 7.8
ChaiVM EZloader for HP color LaserJet 4500 and 4550 and HP LaserJet 4100 and 8150 does not properly verify JAR signatur…
-
Unscored —
Virgil CGI Scanner 0.9 allows remote attackers to execute arbitrary commands via the (1) tar (TARGET) or (2) zielport (…
-
Unscored —
The default configuration in MySQL 3.20.32 through 3.23.52, when running on Windows, does not have logging enabled, whi…
-
Unscored —CVE-2002-1783 EPSS 17%
CRLF injection vulnerability in PHP 4.2.1 through 4.2.3, when allow_url_fopen is enabled, allows remote attackers to mo…
-
Unscored —CVE-2002-1943 Public exploit
SafeTP 1.46, when network address translation (NAT) is being used, leaks the internal IP address of the FTP server in a…
-
Unscored —CVE-2002-1910 Public exploit
Click2Learn Ingenium Learning Management System 5.1 and 6.1 uses weak encryption for passwords (reversible algorithm), …
-
Unscored —
Pingtel Xpressa 1.2.5 through 2.0.1 uses predictable (1) Call-ID, (2) CSeq, and (3) "To" and "From" SIP URL values in a…
-
Unscored —
Videsh Sanchar Nigam Limited (VSNL) Integrated Dialer Software 1.2.000, when the "Save Password" option is used, stores…
-
Unscored —
Yet Another Bulletin Board (YaBB) 1.40 and 1.41 does not require a user to submit the correct password before changing …
-
Unscored —
WatchGuard SOHO products running firmware 5.1.6 and earlier, and Vclass/RSSA using 3.2 SP1 and earlier, allows remote a…
-
Unscored —
Iomega Network Attached Storage (NAS) A300U, and possibly other models, does not allow the FTP service to be disabled, …
-
Unscored —
Trend Micro InterScan VirusWall for Windows NT 3.52 does not record the sender's IP address in the headers for a mail m…
-
Unscored —CVE-2002-1930 Public exploit
Buffer overflow in AN HTTPd 1.38 through 1.4.1c allows remote attackers to execute arbitrary code via a SOCKS4 request …
-
Unscored —
Cross-site scripting (XSS) vulnerability in MyNewsGroups 0.4 and 0.4.1 allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2002-1811 Public exploit
Belkin F5D6130 Wireless Network Access Point running firmware AP14G8 allows remote attackers to cause a denial of servi…
-
Unscored —CVE-2002-1813 Public exploit
Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8.2790 allows remote attackers to execute arbitrary …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Bodo Bauer BBGallery 1.0 allows remote attackers to inject arbitrary web sc…
-
Unscored —CVE-2002-1911 Public exploit
ZoneAlarm Pro 3.0 and 3.1, when configured to block all traffic, allows remote attackers to cause a denial of service (…