Skip to content
OpenAdvisories

Archive

14 July 2005

Vulnerabilities first published on this day (UTC), newest first.

← June 2005 2005 / July /14 August 2005 →
  1. 124
  2. 2 
  3. 3 
  4. 4 
  5. 516
  6. 624
  7. 71
  8. 82
  9. 92
  10. 1075
  11. 1122
  12. 1235
  13. 1328
  14. 14176
  15. 151
  16. 161
  17. 1768
  18. 18 
  19. 1958
  20. 208
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 2622
  27. 2722
  28. 283
  29. 29 
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

176 results · Feed

  • Unscored —
    CVE-2002-2085

    Directory traversal vulnerability in page.cgi of WWWeBBB Forum 3.82 beta and earlier allows remote attackers to read ar…

  • Unscored —
    CVE-2002-2061

    Heap-based buffer overflow in Netscape 6.2.3 and Mozilla 1.0 and earlier allows remote attackers to crash client browse…

  • Unscored —
    CVE-2002-2059

    BIOS D845BG, D845HV, D845PT and D845WN on Intel motherboards does not properly restrict access to configuration informa…

  • Unscored —
    CVE-2002-2065

    WebCalendar 0.9.34 and earlier with 'browsing in includes directory' enabled allows remote attackers to read arbitrary …

  • Unscored —
    CVE-2002-2054

    TeeKai Forum 1.2 allows remote attackers to authenticate as the administrator and and gain privileged web forum access …

  • Unscored —
    CVE-2002-2073 Public exploit EPSS 13%

    Cross-site scripting (XSS) vulnerability in the default ASP pages on Microsoft Site Server 3.0 on Windows NT 4.0 allows…

  • Unscored —
    CVE-2002-2046

    x_news.php in X-News (x_news) 1.1 and earlier allows remote attackers to gain administrative privileges by stealing and…

  • Unscored —
    CVE-2002-2063

    AtGuard 3.2 allows remote attackers to bypass firwall filters and execute prohibited programs by changing the filenames…

  • Unscored —
    CVE-2002-2036

    Sun Ray Server Software (SRSS) 1.3, when Non-Smartcard Mobility (NSCM) is enabled, allows remote attackers to login as …

  • Unscored —
    CVE-2002-2047

    The file preview functionality in Sketch 0.6.12 and earlier allows remote attackers to execute arbitrary commands via s…

    sketch Debian
  • Unscored —
    CVE-2002-2076

    Directory traversal vulnerability in Lil' HTTP server 2.1 and 2.2 allows remote attackers to read arbitrary files via a…

  • Unscored —
    CVE-2002-2067

    East-Tec Eraser 2002 does not clear Windows alternate data streams that are attached to files on NTFS file systems, whi…

  • Unscored —
    CVE-2002-2064

    isadmin.php in PhpWebGallery 1.0 allows remote attackers to gain administrative access via by setting the photo_login c…

  • Unscored —
    CVE-2002-2086

    Multiple cross-site scripting (XSS) vulnerabilities in magicHTML of SquirrelMail before 1.2.6 allow remote attackers to…

  • Unscored —
    CVE-2002-2062 Public exploit EPSS 13%

    Cross-site scripting (XSS) vulnerability in ftp.htt in Internet Explorer 5.5 and 6.0, when running on Windows 2000 with…

  • Unscored —
    CVE-2002-2020

    Netgear RP114 Cable/DSL Web Safe Router Firmware 3.26 uses a default administrator password and accepts admin logins on…

  • Unscored —
    CVE-2002-2026 Public exploit

    Buffer overflow in BrowseFTP 1.62 client allows remote FTP servers to execute arbitrary code via a long FTP "220" messa…

  • Unscored —
    CVE-2002-2039 Public exploit

    /bin/su in QNX realtime operating system (RTOS) 4.25 and 6.1.0 allows local users to obtain sensitive information from …

  • Unscored —
    CVE-2002-2069

    PGP 6.x and 7.x does not clear Windows alternate data streams that are attached to files on NTFS file systems, which al…

  • Unscored —
    CVE-2002-2042 Public exploit

    ptrace in the QNX realtime operating system (RTOS) 4.25 and 6.1.0 allows programs to attach to privileged processes, wh…

  • Unscored —
    CVE-2002-2012

    Unknown vulnerability in Apache 1.3.19 running on HP Secure OS for Linux 1.0 allows remote attackers to cause "unexpect…

  • Unscored —
    CVE-2002-2083

    The Novell Netware client running on Windows 95 allows local users to bypass the login and open arbitrary files via the…

  • Unscored —
    CVE-2002-2017

    sastcpd in SAS/Base 8.0 allows local users to execute arbitrary code by setting the authprog environment variable to re…

  • Unscored —
    CVE-2002-2074

    SQL injection vulnerability in Mailidx before 20020105 allows remote attackers to execute arbitrary SQL commands via th…

  • Unscored —
    CVE-2002-2037

    The Cisco Media Gateway Controller (MGC) in (1) SC2200 7.4 and earlier, (2) VSC3000 9.1 and earlier, (3) PGW 2200 9.1 a…

  • Medium —
    CVE-2002-2009

    Apache Tomcat Leaks Pathname Information via Error Message

    Apache Tomcat 4.0.1 allows remote attackers to obtain the web root path via HTTP requests for JSP files preceded by (1) +/, (2) >/, (3) </, and (4) %20/, which leaks the pathname in an error message.

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2002-2068

    Eraser 5.3 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows …

  • Unscored —
    CVE-2002-2051

    The processor_web plugin for ModLogAn 0.5.0 through 0.7.11, when used with the splitby option, allows local users to ov…

  • Unscored —
    CVE-2002-2005

    Unknown vulnerability in Java web start 1.0.1_01, 1.0.1, 1.0 and 1.0.1.01 (HP-UX 11.x only) allows attackers to gain ac…

  • Unscored —
    CVE-2002-2034

    The Email Sanitizer before 1.133 for Procmail allows remote attackers to bypass the mail filter and execute arbitrary c…

  • Unscored —
    CVE-2002-2040 Public exploit

    The (1) phrafx and (2) phgrafx-startup programs in QNX realtime operating system (RTOS) 4.25 and 6.1.0 do not properly …

  • Unscored —
    CVE-2002-2082

    FTGate and FTGate Pro 1.05 lock user mailboxes before authentication succeeds, which allows remote attackers to lock th…

  • Unscored —
    CVE-2002-2003

    ypbind in Compaq Tru64 4.0F, 4.0G, 5.0A, 5.1 and 5.1A allows remote attackers to cause the process to core dump via cer…

  • Unscored —
    CVE-2002-2077 EPSS 16%

    The DCOM client in Windows 2000 before SP3 does not properly clear memory before sending an "alter context" request, wh…

  • Medium 5.3
    CVE-2002-2024

    Horde IMP 2.2.7 allows remote attackers to obtain the full web root pathname via an HTTP request for (1) poppassd.php3,…

  • Unscored —
    CVE-2002-2041 Public exploit

    Multiple buffer overflows in realtime operating system (RTOS) 6.1.0 allows local users to execute arbitrary code via (1…

  • Unscored —
    CVE-2002-2044

    Cross-site scripting (XSS) vulnerability in x_stat_admin.php in x-stat 2.3 and earlier allows remote attackers to injec…

  • Unscored —
    CVE-2002-2018

    sastcpd in SAS/Base 8.0 might allow local users to gain privileges by setting the netencralg environment variable, whic…

  • Unscored —
    CVE-2002-2053

    The design of the Hot Standby Routing Protocol (HSRP), as implemented on Cisco IOS 12.1, when using IRPAS, allows remot…

  • Unscored —
    CVE-2002-2070

    SecureClean 3 build 2.0 does not clear Windows alternate data streams that are attached to files on NTFS file systems, …