17 July 2005

68 results · Feed

• Unscored —
  CVE-2004-2239

  Buffer overflow in vsybase.c in vpopmail 5.4.2 and earlier might allow attackers to cause a denial of service or execut…

  Jul 17, 2005
• Unscored —
  CVE-2004-2235

  Unknown vulnerability in Moodle before 1.2 has unknown impact and attack vectors, related to improper filtering of text.

  Jul 17, 2005
• Unscored —
  CVE-2004-2221 Public exploit EPSS 35%

  Buffer overflow in SoftCart.exe in Mercantec SoftCart 4.00b allows remote attackers to execute arbitrary code via a lon…

  Jul 17, 2005
• Unscored —
  CVE-2004-2213

  Mbedthis AppWeb HTTP server before 1.1.3 allows remote attackers to obtain the source code for scripts via a (1) traili…

  Jul 17, 2005
• Unscored —
  CVE-2004-2250

  Unknown vulnerability in the "access code" in RemoteEditor before 0.1.6 has unknown impact and attack vectors, possibly…

  Jul 17, 2005
• Unscored —
  CVE-2005-1175

  Heap-based buffer overflow in the Key Distribution Center (KDC) in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remot…

  krb5 Debian
  Jul 17, 2005
• Unscored —
  CVE-2005-1689 EPSS 11%

  Double free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attack…

  krb5 Debian
  Jul 17, 2005
• Unscored —
  CVE-2005-1914

  CenterICQ 4.20.0 and earlier creates temporary files with predictable file names, which allows local users to overwrite…

  Jul 17, 2005
• Unscored —
  CVE-2005-2195

  Apple Darwin Streaming Server 5.5 and earlier allows remote attackers to cause a denial of service (application crash) …

  Jul 17, 2005
• Unscored —
  CVE-2005-2285

  WebEOC before 6.0.2 stores sensitive information in locations such as URIs, web pages, and configuration files, which a…

  Jul 17, 2005
• Unscored —
  CVE-2005-2294

  Oracle Forms 4.5, 6.0, 6i, and 9i on Unix, when a large number of records are retrieved by an Oracle form, stores a cop…

  Jul 17, 2005
• Unscored —
  CVE-2005-2293

  Oracle Formsbuilder 9.0.4 stores database usernames and passwords in a temporary file, which is not deleted after it is…

  Jul 17, 2005
• Unscored —
  CVE-2005-2288

  Cross-site scripting (XSS) vulnerability in PHPCounter 7.2 allows remote attackers to inject arbitrary web script or HT…

  Jul 17, 2005
• Unscored —
  CVE-2005-2292

  Oracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 stores cleartext passwords in (1) IDEConnections.xml, (2) XSQLConfig.xml and…

  Jul 17, 2005
• Unscored —
  CVE-2005-2291

  Oracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 passes the cleartext password as a parameter when starting sqlplus, which al…

  Jul 17, 2005
• Unscored —
  CVE-2005-2278 Public exploit EPSS 85%

  Stack-based buffer overflow in the IMAP daemon (imapd) in MailEnable Professional 1.54 allows remote authenticated user…

  Jul 17, 2005
• Unscored —
  CVE-2005-2284

  Multiple SQL injection vulnerabilities in WebEOC before 6.0.2 allow remote attackers to modify SQL statements via unkno…

  Jul 17, 2005
• Unscored —
  CVE-2005-2295 Public exploit

  NetPanzer 0.8 and earlier allows remote attackers to cause a denial of service (infinite loop) via a packet with a zero…

  netpanzer Debian
  Jul 17, 2005
• Unscored —
  CVE-2005-2279

  Cisco ONS 15216 Optical Add/Drop Multiplexer (OADM) running firmware 2.2.2 and earlier allows remote attackers to cause…

  Jul 17, 2005
• Unscored —
  CVE-2005-2283

  WebEOC before 6.0.2 does not properly restrict the size of an uploaded file, which allows remote authenticated users to…

  Jul 17, 2005
• Unscored —
  CVE-2005-2289

  PHPCounter 7.2 allows remote attackers to obtain sensitive information via a direct request to prelims.php, which revea…

  Jul 17, 2005
• Unscored —
  CVE-2005-2286

  WebEOC before 6.0.2 does not properly check user authorization, which allows remote attackers to gain privileges via a …

  Jul 17, 2005
• Unscored —
  CVE-2005-2282

  Multiple cross-site scripting (XSS) vulnerabilities in WebEOC before 6.0.2 allow remote attackers to inject arbitrary w…

  Jul 17, 2005
• Unscored —
  CVE-2005-2287 Public exploit EPSS 57%

  SoftiaCom wMailServer 1.0 and 2.0 allows remote attackers to cause a denial of service (application crash) via a large …

  Jul 17, 2005
• Unscored —
  CVE-2005-2290

  wps_shop.cgi in WPS Web Portal System 0.7.0 allows remote attackers to execute arbitrary commands via shell metacharact…

  Jul 17, 2005
• Unscored —
  CVE-2005-2280

  Cisco Security Agent (CSA) 4.5 allows remote attackers to cause a denial of service (system crash) via a crafted IP pac…

  Jul 17, 2005
• Unscored —
  CVE-2005-2296

  YabbSE 1.5.5c allows remote attackers to obtain sensitive information via a direct request to ssi_examples.php, which r…

  Jul 17, 2005
• Unscored —
  CVE-2005-2281

  WebEOC before 6.0.2 uses a weak encryption scheme for passwords, which makes it easier for attackers to crack passwords.

  Jul 17, 2005