Archive
14 July 2005
Vulnerabilities first published on this day (UTC), newest first.
37 results · Clear filters · Feed
-
Unscored —CVE-2001-1528 Public exploit
AmTote International homebet program returns different error messages when invalid account numbers and PIN codes are pr…
-
Unscored —CVE-2001-1561 Public exploit
Buffer overflow in Xvt 2.1 in Debian Linux 2.2 allows local users to execute arbitrary code via long (1) -name and (2) …
-
Unscored —CVE-2001-1518 Public exploit
RunAs (runas.exe) in Windows 2000 only creates one session instance at a time, which allows local users to cause a deni…
-
Unscored —CVE-2001-1559 Public exploit
The uipc system calls (uipc_syscalls.c) in OpenBSD 2.9 and 3.0 provide user mode return instead of versus rval kernel m…
-
Unscored —CVE-2001-1525 Public exploit
Directory traversal vulnerability in the comments action in easyNews 1.5 and earlier allows remote attackers to modify …
-
Unscored —CVE-2001-1549 Public exploit
Tiny Personal Firewall 1.0 and 2.0 allows local users to bypass filtering via non-standard TCP packets created with non…
-
Unscored —CVE-2001-1519 Public exploit
RunAs (runas.exe) in Windows 2000 allows local users to create a spoofed named pipe when the service is stopped, then c…
-
Unscored —CVE-2001-1560 Public exploit
Win32k.sys (aka Graphics Device Interface (GDI)) in Windows 2000 and XP allows local users to cause a denial of service…
-
Unscored —CVE-2001-1524 Public exploit
Cross-site scripting (XSS) vulnerability in PHP-Nuke 5.3.1 and earlier allows remote attackers to inject arbitrary web …
-
High 7.8CVE-2001-1546 Public exploit
Pathways Homecare 6.5 uses weak encryption for user names and passwords, which allows local users to gain privileges by…
-
Unscored —CVE-2002-1991 Public exploit
PHP file inclusion vulnerability in osCommerce 2.1 execute arbitrary commands via the include_file parameter to include…
-
Unscored —
webbbs_post.pl in WebBBS 4 and 5.0 allows remote attackers to execute arbitrary commands via shell metacharacters in th…
-
Unscored —CVE-2002-1995 Public exploit
Cross-site scripting (XSS) vulnerability in phptonuke.php for PHP-Nuke allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2002-2019 Public exploit
PHP remote file inclusion vulnerability in include_once.php in osCommerce (a.k.a. Exchange Project) 2.1 allows remote a…
-
Unscored —
PHP, when installed on Windows with Apache and ScriptAlias for /php/ set to c:/php/, allows remote attackers to read ar…
-
Low —
Apache Tomcat Default Installation Reveals Sensitive Information
The default installation of Apache Tomcat 4.0 through 4.1 and 3.0 through 3.3.1 allows remote attackers to obtain the installation path and other sensitive system information via the (1) SnoopServlet or (2) TroubleShooter example servlets.
-
Unscored —CVE-2002-2015 Public exploit
PHP file inclusion vulnerability in user.php in PostNuke 0.703 allows remote attackers to include arbitrary files and p…
-
Unscored —CVE-2002-2011 Public exploit
Cross-site scripting (XSS) vulnerability in the fom CGI program (fom.cgi) in Faq-O-Matic 2.711 and 2.712 allows remote …
-
Unscored —CVE-2002-2016 Public exploit
User-mode Linux (UML) 2.4.17-8 does not restrict access to kernel address space, which allows local users to execute ar…
-
Unscored —CVE-2002-2071 Public exploit
Compaq Tru64 4.0 d allows remote attackers to cause a denial of service in (1) telnet, (2) FTP, (3) ypbind, (4) rpc.loc…
-
Unscored —CVE-2002-2072 Public exploit
java.security.AccessController in Sun Java Virtual Machine (JVM) in JRE 1.2.2 and 1.3.1 allows remote attackers to caus…
-
Unscored —
Internet Explorer 5.0, 5.0.1 and 5.5 with JavaScript execution enabled allows remote attackers to determine the existen…
-
Unscored —CVE-2002-2084 Public exploit
Directory traversal vulnerability in index.php of Portix 0.4.02 allows remote attackers to read arbitrary files via a .…
-
Unscored —CVE-2002-2055 Public exploit
Cross-site scripting (XSS) vulnerability in userlog.php in TeeKai Tracking Online 1.0 allows remote attackers to inject…
-
Unscored —
The default installations of Apache Tomcat 3.2.3 and 3.2.4 allows remote attackers to obtain sensitive system informati…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the default ASP pages on Microsoft Site Server 3.0 on Windows NT 4.0 allows…
-
Unscored —
Cross-site scripting (XSS) vulnerability in ftp.htt in Internet Explorer 5.5 and 6.0, when running on Windows 2000 with…
-
Unscored —CVE-2002-2026 Public exploit
Buffer overflow in BrowseFTP 1.62 client allows remote FTP servers to execute arbitrary code via a long FTP "220" messa…
-
Unscored —CVE-2002-2039 Public exploit
/bin/su in QNX realtime operating system (RTOS) 4.25 and 6.1.0 allows local users to obtain sensitive information from …
-
Unscored —CVE-2002-2042 Public exploit
ptrace in the QNX realtime operating system (RTOS) 4.25 and 6.1.0 allows programs to attach to privileged processes, wh…
-
Unscored —CVE-2002-2040 Public exploit
The (1) phrafx and (2) phgrafx-startup programs in QNX realtime operating system (RTOS) 4.25 and 6.1.0 do not properly …
-
Unscored —CVE-2002-2041 Public exploit
Multiple buffer overflows in realtime operating system (RTOS) 6.1.0 allows local users to execute arbitrary code via (1…
-
Unscored —CVE-2002-2021 Public exploit
Cross-site scripting (XSS) vulnerability in WoltLab Burning Board (wbboard) 1.1.1 allows remote attackers to inject arb…
-
Unscored —CVE-2002-2032 Public exploit
sql_layer.php in PHP-Nuke 5.4 and earlier does not restrict access to debugging features, which allows remote attackers…
-
Unscored —CVE-2000-1230 Public exploit
Backdoor in auth.php3 in Phorum 3.0.7 allows remote attackers to access restricted web pages via an HTTP request with t…
-
Unscored —CVE-2000-1234 Public exploit
violation.php3 in Phorum 3.0.7 allows remote attackers to send e-mails to arbitrary addresses and possibly use Phorum a…
-
Unscored —CVE-2000-1228 Public exploit
Phorum 3.0.7 allows remote attackers to change the administrator password without authentication via an HTTP request fo…