Archive
14 July 2005
Vulnerabilities first published on this day (UTC), newest first.
176 results · Feed
-
Unscored —
Buffer overflow in rpc.yppasswdd (yppasswd server) in AIX allows attackers to gain unauthorized access via a long strin…
-
Unscored —
Axis network camera 2120, 2110, 2100, 200+ and 200 contains a default administration password "pass", which allows remo…
-
Unscored —
Cross-site scripting (XSS) vulnerability in user.php in PostNuke 0.64 allows remote attackers to inject arbitrary web s…
-
Unscored —
pt_chmod in Solaris 8 does not call fdetach to reset terminal privileges when users log out of terminals, which allows …
-
Unscored —
Autogalaxy stores usernames and passwords in cleartext in cookies, which makes it easier for remote attackers to obtain…
-
Unscored —
run.cgi in Webmin 0.80 and 0.88 creates temporary files with world-writable permissions, which allows local users to ex…
-
Unscored —
OpenSSH before 3.0.1 with Kerberos V enabled does not properly authenticate users, which could allow remote attackers t…
-
Unscored —CVE-2001-1560 Public exploit
Win32k.sys (aka Graphics Device Interface (GDI)) in Windows 2000 and XP allows local users to cause a denial of service…
-
Unscored —CVE-2001-1524 Public exploit
Cross-site scripting (XSS) vulnerability in PHP-Nuke 5.3.1 and earlier allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2001-1539 EPSS 14%
Stack consumption vulnerability in Internet Explorer The JavaScript settimeout function in Internet Explorer allows rem…
-
Unscored —
Macromedia JRun 3.0 and 3.1 appends the jsessionid to URL requests (a.k.a. rewriting) when client browsers have cookies…
-
Unscored —
Buffer overflow in ftpd in IBM AIX 4.3 and 5.1 allows attackers to gain privileges.
-
Unscored —
easyNews 1.5 and earlier stores administration passwords in cleartext in settings.php, which allows local users to obta…
-
Unscored —
Macromedia JRun 3.0 and 3.1 allows remote attackers to obtain duplicate active user session IDs and perform actions as …
-
Unscored —
Windows XP with fast user switching and account lockout enabled allows local users to deny user account access by setti…
-
Unscored —
Buffer overflow in Claris Emailer 2.0v2 allows remote attackers to cause a denial of service and possibly execute arbit…
-
Unscored —
Lotus Domino server 5.0.9a and earlier allows remote attackers to bypass security restrictions and view Notes database …
-
High 7.8CVE-2001-1546 Public exploit
Pathways Homecare 6.5 uses weak encryption for user names and passwords, which allows local users to gain privileges by…
-
Unscored —CVE-2001-1552 EPSS 14%
ssdpsrv.exe in Windows ME allows remote attackers to cause a denial of service by sending multiple newlines in a Simple…
-
Unscored —
RunAs (runas.exe) in Windows 2000 stores cleartext authentication information in memory, which could allow attackers to…
-
Unscored —
Format string vulnerability in libvanessa_logger 0.0.1 in Perdition 0.1.8 allows remote attackers to execute arbitrary …
-
Unscored —CVE-2001-1571 EPSS 13%
The Remote Desktop client in Windows XP sends the most recent user account name in cleartext, which could allow remote …
-
Unscored —
WebX stores authentication information in the HTTP_REFERER variable, which is included in URL links within bulletin boa…
-
Unscored —
Point to Point Protocol daemon (pppd) in MacOS x 10.0 and 10.1 through 10.1.5 provides the username and password on the…
-
Unscored —
Slashcode 2.0 creates new accounts with an 8-character random password, which could allow local users to obtain session…
-
Unscored —
Openwave WAP gateway does not verify the fully qualified domain name URL with X.509 certificates from root certificate …
-
Unscored —
Buffer overflow in rpc.cmsd in SCO UnixWare 7.1.1 and Open UNIX 8.0.0 allows remote attackers to execute arbitrary comm…
-
Unscored —
Buffer overflow in jrun.dll in ColdFusion MX, when used with IIS 4 or 5, allows remote attackers to cause a denial of s…
-
Unscored —
Directory traversal vulnerability in view_source.jsp in Resin 2.1.2 allows remote attackers to read arbitrary files via…
-
Unscored —CVE-2002-1991 Public exploit
PHP file inclusion vulnerability in osCommerce 2.1 execute arbitrary commands via the include_file parameter to include…
-
Unscored —
Resin 2.1.1 allows remote attackers to cause a denial of service (memory consumption and hang) via a URL with long vari…
-
Unscored —
Resin 2.0.5 through 2.1.2 allows remote attackers to reveal physical path information via a URL request for the example…
-
Unscored —
webbbs_post.pl in WebBBS 4 and 5.0 allows remote attackers to execute arbitrary commands via shell metacharacters in th…
-
Unscored —
Cross-site scripting (XSS) vulnerability in PostNuke 0.71 and earlier allows remote attackers to inject arbitrary web s…
-
Unscored —
advserver.exe in Advanced Web Server (AdvServer) Professional 1.030000 allows remote attackers to cause a denial of ser…
-
Unscored —CVE-2002-1995 Public exploit
Cross-site scripting (XSS) vulnerability in phptonuke.php for PHP-Nuke allows remote attackers to inject arbitrary web …
-
Unscored —
HP Praesidium Webproxy 1.0 running on HP-UX 11.04 VVOS could allow remote attackers to cause Webproxy to forward reques…
-
Unscored —
ZoneAlarm Pro 3.0 MailSafe allows remote attackers to bypass filtering and possibly execute arbitrary code via email at…
-
Unscored —
Resin 2.1.1 allows remote attackers to cause a denial of service (thread and connection consumption) via multiple URL r…
-
Unscored —
BestCrypt BCWipe 1.0.7 and 2.0 through 2.35.1 does not clear Windows alternate data streams that are attached to files …