Archive
14 July 2005
Vulnerabilities first published on this day (UTC), newest first.
176 results · Feed
-
Unscored —
Unknown vulnerability in Allaire JRun 3.1 allows remote attackers to directly access the WEB-INF and META-INF directori…
-
Unscored —
Cross-site scripting (XSS) vulnerability in phpReview 0.9.0 rc2 and earlier allows remote attackers to inject arbitrary…
-
Unscored —
IPRoute 0.973, 0.974 and 1.18 allows remote attackers to cause a denial of service via fragmented IP packets that split…
-
Unscored —
IBM AIX 430 does not properly unlock IPPMTU_LOCK, which allows remote attackers to cause a denial of service (hang) via…
-
Unscored —
Buffer overflow in Unix-to-Unix Copy Protocol (UUCP) in BSDI BSD/OS 3.0 through 4.2 allows local users to execute arbit…
-
Unscored —
Directory traversal vulnerability in Macromedia JRun Web Server (JWS) 2.3.3, 3.0 and 3.1 allows remote attackers to rea…
-
Unscored —
setrlimit in HP-UX 10.01, 10.10, 10.24, 10.20, 11.00, 11.04 and 11.11 does not properly enforce core file size on proce…
-
Unscored —
Unknown vulnerability in Tomcat 3.2.1 running on HP Secure OS for Linux 1.0 allows attackers to access servlet resource…
-
Unscored —CVE-2001-1528 Public exploit
AmTote International homebet program returns different error messages when invalid account numbers and PIN codes are pr…
-
Unscored —CVE-2001-1561 Public exploit
Buffer overflow in Xvt 2.1 in Debian Linux 2.2 allows local users to execute arbitrary code via long (1) -name and (2) …
-
Unscored —
Buffer overflow in lpstat in SCO OpenServer 5.0 through 5.0.6a allows local users to execute arbitrary code as group bi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the comments action in index.php in easyNews 1.5 and earlier allows remote …
-
Unscored —
Unknown vulnerability in IP defragmenter (frag2) in Snort before 1.8.3 allows attackers to cause a denial of service (c…
-
Unscored —CVE-2001-1518 Public exploit
RunAs (runas.exe) in Windows 2000 only creates one session instance at a time, which allows local users to cause a deni…
-
Unscored —
SpeedXess HA-120 DSL router has a default administrative password of "speedxess", which allows remote attackers to gain…
-
Unscored —CVE-2001-1559 Public exploit
The uipc system calls (uipc_syscalls.c) in OpenBSD 2.9 and 3.0 provide user mode return instead of versus rval kernel m…
-
Unscored —
Xircom REX 6000 allows local users to obtain the 10 digit PIN by starting a serial monitor, connecting to the personal …
-
Unscored —CVE-2001-1525 Public exploit
Directory traversal vulnerability in the comments action in easyNews 1.5 and earlier allows remote attackers to modify …
-
Unscored —
Cross-site scripting (XSS) vulnerability in im.php in IMessenger for PHP-Nuke allows remote attackers to inject arbitra…
-
Unscored —
ColdFusion 4.5 and 5, when running on Windows with the advanced security sandbox type set to "operating system," does n…
-
Unscored —CVE-2001-1547 EPSS 14%
Outlook Express 6.0, with "Do not allow attachments to be saved or opened that could potentially be a virus" enabled, d…
-
Unscored —
The default "basic" security setting' in config.php for TWIG webmail 2.7.4 and earlier stores cleartext usernames and p…
-
Unscored —
JRun 3.0 and 3.1 running on JRun Web Server (JWS) and IIS allows remote attackers to read arbitrary JavaServer Pages (J…
-
Unscored —
Buffer overflow in setiathome for SETI@home 3.03, if installed setuid, could allow local users to execute arbitrary cod…
-
Unscored —
ZoneAlarm 2.1 through 2.6 and ZoneAlarm Pro 2.4 and 2.6 allows local users to bypass filtering via non-standard TCP pac…
-
Unscored —
mod_usertrack in Apache 1.3.11 through 1.3.20 generates session ID's using predictable information including host IP ad…
-
Unscored —CVE-2001-1549 Public exploit
Tiny Personal Firewall 1.0 and 2.0 allows local users to bypass filtering via non-standard TCP packets created with non…
-
Unscored —
Macintosh clients, when using NT file system volumes on Windows 2000 SP1, create subdirectories and automatically modif…
-
Unscored —
NAI WebShield SMTP 4.5 and possibly 4.5 MR1a does not filter improperly MIME encoded email attachments, which could all…
-
Unscored —
Format string vulnerability in nvi before 1.79 allows local users to gain privileges via format string specifiers in a …
-
Unscored —
The log files in Apache web server contain information directly supplied by clients and does not filter or quote contro…
-
Unscored —
geteuid in Itanium Architecture (IA) running on HP-UX 11.20 does not properly identify a user's effective user id, whic…
-
Unscored —CVE-2001-1519 Public exploit
RunAs (runas.exe) in Windows 2000 allows local users to create a spoofed named pipe when the service is stopped, then c…
-
Unscored —
Allaire JRun 2.3.3, 3.0 and 3.1 running on IIS 4.0 and 5.0, iPlanet, Apache, JRun web server (JWS), and possibly other …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the DMOZGateway module for PHP-Nuke allows remote attackers to inject arbit…
-
Unscored —
CentraOne 5.2 and Centra ASP with basic authentication enabled creates world-writable base64 encoded log files, which a…
-
Unscored —
The MAC module in Netfilter in Linux kernel 2.4.1 through 2.4.11, when configured to filter based on MAC addresses, all…
-
Unscored —
CMG WAP gateway does not verify the fully qualified domain name URL with X.509 certificates from root certificate autho…
-
Unscored —
Linux kernel 2.2.19 enables CAP_SYS_RESOURCE for setuid processes, which allows local users to exceed disk quota restri…
-
Medium 5.3CVE-2001-1533 EPSS 18%
Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service via…