Skip to content
OpenAdvisories

Archive

14 July 2005

Vulnerabilities first published on this day (UTC), newest first.

← June 2005 2005 / July /14 August 2005 →
  1. 124
  2. 2 
  3. 3 
  4. 4 
  5. 516
  6. 624
  7. 71
  8. 82
  9. 92
  10. 1075
  11. 1122
  12. 1235
  13. 1328
  14. 14176
  15. 151
  16. 161
  17. 1768
  18. 18 
  19. 1958
  20. 208
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 2622
  27. 2722
  28. 283
  29. 29 
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

176 results · Feed

  • Unscored —
    CVE-2002-2019 Public exploit

    PHP remote file inclusion vulnerability in include_once.php in osCommerce (a.k.a. Exchange Project) 2.1 allows remote a…

  • Unscored —
    CVE-2002-2029 Public exploit EPSS 23%

    PHP, when installed on Windows with Apache and ScriptAlias for /php/ set to c:/php/, allows remote attackers to read ar…

  • Unscored —
    CVE-2002-2052

    Cisco 2611 router running IOS 12.1(6.5), possibly an interim release, allows remote attackers to cause a denial of serv…

  • Low —
    CVE-2002-2006 Public exploit EPSS 31%

    Apache Tomcat Default Installation Reveals Sensitive Information

    The default installation of Apache Tomcat 4.0 through 4.1 and 3.0 through 3.3.1 allows remote attackers to obtain the installation path and other sensitive system information via the (1) SnoopServlet or (2) TroubleShooter example servlets.

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2002-2010

    Cross-site scripting (XSS) vulnerability in htsearch.cgi in htdig (ht://Dig) 3.1.5, 3.1.6, and 3.2 allows remote attack…

  • Unscored —
    CVE-2002-2022

    Format string vulnerability in Kaffe OpenVM 1.0.6 and earlier allows local users to execute arbitrary code, when a java…

  • Unscored —
    CVE-2002-2014

    Lotus Domino 5.0.8 web server returns different error messages when a valid or invalid user is provided in HTTP request…

  • Unscored —
    CVE-2002-2015 Public exploit

    PHP file inclusion vulnerability in user.php in PostNuke 0.703 allows remote attackers to include arbitrary files and p…

  • Unscored —
    CVE-2002-2045

    x_stat_admin.php in x-stat 2.3 and earlier allows remote attackers to (1) execute PHP commands such as phpinfo or (2) o…

  • Unscored —
    CVE-2002-2035

    SQL injection vulnerability in RealityScape MyLogin 2000 1.0.0 and earlier allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2002-2049

    configure for Dsniff 2.3, fragroute 1.2, and fragrouter 1.6, when downloaded from monkey.org on May 17, 2002, has been …

  • Unscored —
    CVE-2002-2079

    mosix-protocol-stack in Multicomputer Operating System for UnIX (MOSIX) 1.5.7 allows remote attackers to cause a denial…

  • Unscored —
    CVE-2002-2011 Public exploit

    Cross-site scripting (XSS) vulnerability in the fom CGI program (fom.cgi) in Faq-O-Matic 2.711 and 2.712 allows remote …

  • Unscored —
    CVE-2002-2025

    Lotus Domino server 5.0.9a and earlier allows remote attackers to cause a denial of service by exhausting the number of…

  • Unscored —
    CVE-2002-2001

    jmcce 1.3.8 in Mandrake 8.1 creates log files in /tmp with predictable names, which allows local users to overwrite arb…

  • Unscored —
    CVE-2002-2078

    Heap-based buffer overflow in Floositek (1) FTGate Pro 1.05 and (2) FTGate Office 1.05 allows remote attackers to cause…

  • Unscored —
    CVE-2002-2016 Public exploit

    User-mode Linux (UML) 2.4.17-8 does not restrict access to kernel address space, which allows local users to execute ar…

    user-mode-linux Debian
  • Unscored —
    CVE-2002-2071 Public exploit

    Compaq Tru64 4.0 d allows remote attackers to cause a denial of service in (1) telnet, (2) FTP, (3) ypbind, (4) rpc.loc…

  • Unscored —
    CVE-2002-2072 Public exploit

    java.security.AccessController in Sun Java Virtual Machine (JVM) in JRE 1.2.2 and 1.3.1 allows remote attackers to caus…

  • Unscored —
    CVE-2002-2002

    Buffer overflow in libc in Compaq Tru64 4.0F, 5.0, 5.1 and 5.1A allows attackers to execute arbitrary code via long (1)…

  • Unscored —
    CVE-2002-2056

    Cross-site scripting (XSS) vulnerability in TeeKai Forum 1.2 allows remote attackers to inject arbitrary web script or …

  • Unscored —
    CVE-2002-2023

    The get_parameter_from_freqency_source function in beep2 1.0, 1.1 and 1.2, when installed setuid root, allows local use…

  • Unscored —
    CVE-2002-2050

    Directory traversal vulnerability in processor_web plugin for ModLogAn 0.5.0 through 0.7.11, when used with the splitby…

  • Unscored —
    CVE-2002-2060

    Buffer overflow in Links 2.0 pre4 allows remote attackers to crash client browsers and possibly execute arbitrary code …

  • Unscored —
    CVE-2002-2027

    Database of Our Owlish Wisdom (DOOW) 0.1 through 0.2.1 does not properly verify user permissions, which allows remote a…

  • Unscored —
    CVE-2002-2038

    Next Generation POSIX Threading (NGPT) 1.9.0 uses a filesystem-based shared memory entry, which allows local users to c…

  • Unscored —
    CVE-2002-2028

    The screensaver on Windows NT 4.0, 2000, XP, and 2002 does not verify if a domain account has already been locked when …

  • Unscored —
    CVE-2002-2004

    portmapper in Compaq Tru64 4.0G and 5.0A allows remote attackers to cause a denial of service via a flood of packets.

  • Unscored —
    CVE-2002-2031 Public exploit EPSS 21%

    Internet Explorer 5.0, 5.0.1 and 5.5 with JavaScript execution enabled allows remote attackers to determine the existen…

  • Unscored —
    CVE-2002-2080

    Floositek FTGate PRO 1.05 allows remote attackers to cause a denial of service (memory and CPU consumption) via a large…

  • Unscored —
    CVE-2002-2033

    faqmanager.cgi in FAQManager 2.2.5 and earlier allows remote attackers to read arbitrary files by specifying the filena…

  • Unscored —
    CVE-2002-2084 Public exploit

    Directory traversal vulnerability in index.php of Portix 0.4.02 allows remote attackers to read arbitrary files via a .…

  • Unscored —
    CVE-2002-2055 Public exploit

    Cross-site scripting (XSS) vulnerability in userlog.php in TeeKai Tracking Online 1.0 allows remote attackers to inject…

  • Unscored —
    CVE-2002-2081 EPSS 15%

    cphost.dll in Microsoft Site Server 3.0 allows remote attackers to cause a denial of service (disk consumption) via an …

  • Medium —
    CVE-2002-2008

    Apache Tomcat Leaks Information via Error Message

    Apache Tomcat 4.0.3 for Windows allows remote attackers to obtain the web root path via an HTTP request for a resource that does not exist, such as lpt9, which leaks the information in an error message.

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2002-2057

    TeeKai Forum 1.2 uses weak encryption of web usage statistics in data/member_log.txt, which is stored under the web doc…

  • Unscored —
    CVE-2002-2058

    TeeKai Tracking Online 1.0 uses weak encryption of web usage statistics in data/userlog/log.txt, which allows remote at…

  • Unscored —
    CVE-2002-2013

    Mozilla 0.9.6 and earlier and Netscape 6.2 and earlier allows remote attackers to steal cookies from another domain via…

  • Unscored —
    CVE-2002-2007 Public exploit EPSS 41%

    The default installations of Apache Tomcat 3.2.3 and 3.2.4 allows remote attackers to obtain sensitive system informati…

  • Unscored —
    CVE-2002-2030

    Stack-based buffer overflow in SQLData Enterprise Server 3.0 allows remote attacker to execute arbitrary code and cause…