17 July 2005

68 results · Feed

• Unscored —
  CVE-2004-2251

  The PPTP server in Astaro Security Linux before 4.024 provides information about its version, which makes it easier for…

  Jul 17, 2005
• Unscored —
  CVE-2004-2243

  Phorum allows remote attackers to hijack sessions of other users by stealing and replaying the session hash in the phor…

  Jul 17, 2005
• Unscored —
  CVE-2004-2253 Public exploit

  Directory traversal vulnerability in user.cgi in SurgeLDAP 1.0g and earlier allows remote attackers to read arbitrary f…

  Jul 17, 2005
• Unscored —
  CVE-2004-2222

  Directory traversal vulnerability in index.php in FsPHPGallery before 1.2 allows remote attackers to list arbitrary dir…

  Jul 17, 2005
• Unscored —
  CVE-2004-2248

  Unknown vulnerability in RemoteEditor before 0.1.1 has unknown impact and attack vectors, related to "oversize submissi…

  Jul 17, 2005
• Unscored —
  CVE-2004-2241

  Cross-site scripting (XSS) vulnerability in Phorum 5.0.11 and earlier allows remote attackers to inject arbitrary HTML …

  Jul 17, 2005
• Unscored —
  CVE-2004-2219

  Microsoft Internet Explorer 6 allows remote attackers to spoof the address bar to facilitate phishing attacks via Javas…

  Jul 17, 2005
• Unscored —
  CVE-2004-2232

  SQL injection vulnerability in sql.php in the Glossary module in Moodle 1.4.1 and earlier allows remote attackers to mo…

  Jul 17, 2005
• Unscored —
  CVE-2004-2216

  Unknown vulnerability in Sun Java System Web Server 6.0 SP7 and earlier and 6.1 SP1 and earlier, and Application Server…

  Jul 17, 2005
• Unscored —
  CVE-2004-2255

  Directory traversal vulnerability in phpMyFAQ 1.3.12 allows remote attackers to read arbitrary files, and possibly exec…

  Jul 17, 2005
• Unscored —
  CVE-2004-2256

  Directory traversal vulnerability in phpMyFAQ 1.4.0 alpha allows remote attackers to read arbitrary files, and possibly…

  Jul 17, 2005
• Unscored —
  CVE-2004-2223

  FsPHPGallery before 1.2 allows remote attackers to cause a denial of service via an image with a large size attribute, …

  Jul 17, 2005
• Unscored —
  CVE-2004-2220

  F-Secure Anti-Virus for Microsoft Exchange 6.30 and 6.31 does not properly detect certain password-protected files in a…

  Jul 17, 2005
• Unscored —
  CVE-2004-2247

  Unknown vulnerability in the "admin of paypal email addresses" in AudienceConnect before 1.0.beta.21 has unknown impact…

  Jul 17, 2005
• Unscored —
  CVE-2004-2244

  The XML parser in Oracle 9i Application Server Release 2 9.0.3.0 and 9.0.3.1, 9.0.2.3 and earlier, and Release 1 1.0.2.…

  Jul 17, 2005
• Unscored —
  CVE-2004-2215

  RXVT-Unicode 3.4 and 3.5 does not properly close file descriptors, which allows local users to access the terminals of …

  rxvt-unicode Debian
  Jul 17, 2005
• Unscored —
  CVE-2004-2229

  Multiple unknown vulnerabilities in Oracle 9i Lite Mobile Server 5.0.0.0.0 through 5.0.2.9.0 allow remote authenticated…

  Jul 17, 2005
• Unscored —
  CVE-2004-2254 Public exploit

  SurgeLDAP 1.0g (Build 12), and possibly other versions before 1.0h, allows remote attackers to bypass authentication fo…

  Jul 17, 2005
• Unscored —
  CVE-2004-2231

  Zero G Software InstallAnywhere 5.0.6, 5.0.7, and earlier allows local users to overwrite arbitrary files via a symlink…

  Jul 17, 2005
• Unscored —
  CVE-2004-2234

  Unknown vulnerability in Moodle before 1.2 allows teachers to log in as administrators.

  Jul 17, 2005
• Unscored —
  CVE-2004-2245 Public exploit

  Cross-site scripting (XSS) vulnerability in Goollery 0.03 allows remote attackers to inject arbitrary HTML or web scrip…

  Jul 17, 2005
• Unscored —
  CVE-2004-2240

  Multiple SQL injection vulnerabilities in Phorum 5.0.11 and earlier allow remote attackers to modify SQL statements via…

  Jul 17, 2005
• Unscored —
  CVE-2004-2242 Public exploit

  Cross-site scripting (XSS) vulnerability in search.php in Phorum, possibly 5.0.7 beta and earlier, allows remote attack…

  Jul 17, 2005
• Unscored —
  CVE-2004-2238

  Format string vulnerability in vsybase.c in vpopmail 5.4.2 and earlier has unknown impact and attack vectors. NOTE: in …

  Jul 17, 2005
• Unscored —
  CVE-2004-2237

  Unknown vulnerability in Moodle before 1.3.4 has unknown impact and attack vectors, related to "strings in Moodle texts…

  Jul 17, 2005
• Unscored —
  CVE-2004-2218 Public exploit

  SQL injection vulnerability in pmwh.php in PHPMyWebHosting 0.3.4 and earlier allows remote attackers to modify SQL stat…

  Jul 17, 2005
• Unscored —
  CVE-2004-2233

  Unknown "front page vulnerability with Moodle servers" for Moodle before 1.3.2 has unknown impact and attack vectors.

  Jul 17, 2005
• Unscored —
  CVE-2004-2226

  Mozilla Mail 1.7.1 and 1.7.3, and Thunderbird before 0.9, when HTML-Mails is enabled, allows remote attackers to determ…

  Jul 17, 2005
• Unscored —
  CVE-2004-2224

  Appfoundry Message Foundry 2.75 .0003 allows remote attackers to cause a denial of service (crash) via an HTTP GET requ…

  Jul 17, 2005
• Unscored —
  CVE-2004-2217

  Multiple unknown vulnerabilities in yhttpd in yChat before 0.7 allow remote attackers to cause a denial of service (seg…

  Jul 17, 2005
• Unscored —
  CVE-2004-2214

  Mbedthis AppWeb HTTP server before 1.1.3 allows remote attackers to bypass access restrictions via a URI with mixed cas…

  Jul 17, 2005
• Unscored —
  CVE-2004-2246 Public exploit

  Cross-site scripting (XSS) vulnerability in Goollery before 0.04b allows remote attackers to inject arbitrary HTML or w…

  Jul 17, 2005
• Unscored —
  CVE-2004-2230

  Heap-based buffer overflow in isakmpd on OpenBSD 3.4 through 3.6 allows local users to cause a denial of service (panic…

  Jul 17, 2005
• Unscored —
  CVE-2004-2228

  Mozilla Firefox before 1.0 is installed with world-writable permissions on Mac OS X, which allows local users to gain p…

  Jul 17, 2005
• Unscored —
  CVE-2004-2225

  Mozilla Firefox before 0.10.1 allows remote attackers to delete arbitrary files in the download directory via a crafted…

  Jul 17, 2005
• Unscored —
  CVE-2004-2227

  Mozilla Firefox before 1.0 truncates long filenames in the file download dialog box, which makes it easier for remote a…

  Jul 17, 2005
• Unscored —
  CVE-2004-2249

  Unknown vulnerability in the "access code" in SecureEditor before 0.1.2 has unknown impact and attack vectors, possibly…

  Jul 17, 2005
• Medium 5.3
  CVE-2004-2257

  phpMyFAQ 1.4.0 allows remote attackers to access the Image Manager to upload or delete images without authorization via…

  Jul 17, 2005
• Unscored —
  CVE-2004-2236

  Unknown vulnerability in Moodle before 1.3.3 has unknown impact and attack vectors, related to language setting.

  Jul 17, 2005
• Unscored —
  CVE-2004-2252

  The firewall in Astaro Security Linux before 4.024 sends responses to SYN-FIN packets, which makes it easier for remote…

  Jul 17, 2005