Archive
19 July 2005
Vulnerabilities first published on this day (UTC), newest first.
58 results · Feed
-
Unscored —
vsftpd before 1.2.2, when under heavy load, allows attackers to cause a denial of service (crash) via a SIGCHLD signal …
-
Unscored —
PimenGest2 before 1.1.1 allows remote attackers to obtain the database password via debug information in rowLatex.inc.p…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Ansel 2.1 and earlier allows remote attackers to inject arbitrary HTML or w…
-
Unscored —
DansGuardian before 2.7.7-2 allows remote attackers to bypass URL filters via a ".." in the request.
-
Unscored —CVE-2004-2263 Public exploit
SQL injection vulnerability in the valid function in fr_left.php in PlaySMS 0.7 and earlier allows remote attackers to …
-
Unscored —
i-mall.cgi in I-Mall Commerce allows remote attackers to execute arbitrary commands via shell metacharacters via the p …
-
Unscored —
Unknown vulnerability in IBM Parallel Environment (PE) 3.2 and 4.1 allows attackers to execute arbitrary commands as ro…
-
Unscored —
Stack-based buffer overflow in pads.c in Passive Asset Detection System (Pads) might allow local users to execute arbit…
-
Unscored —
SQL injection vulnerability in Ansel 2.1 and earlier allows remote attackers to modify SQL statements via the image par…
-
Unscored —
F-Secure Anti-Virus 5.41 and 5.42 on Windows, Client Security 5.50 and 5.52, 4.60 for Samba Servers, and 4.52 and earli…
-
Unscored —
Xconfig in Hummingbird Exceed before 9.0.0.1, when the Screen Definition is password-protected, allows local users to a…
-
Unscored —CVE-2004-2280 Public exploit
Buffer overflow in IBM Lotus Notes 6.5.x before 6.5.3 and 6.0.x before 6.0.5 allows remote attackers to cause a denial …
-
Unscored —
Unknown vulnerability in Jigsaw before 2.2.4 has unknown impact and attack vectors, possibly related to the parsing of …
-
Unscored —
Unknown vulnerability in DansGuardian before 2.6.1-13 allows remote attackers to bypass URL filters via a crafted reque…
-
Unscored —
ImageManager in e107 before 0.617 does not properly check the types of uploaded files, which allows remote attackers to…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Invision Power Board 1.3 Final allows remote attackers to execute arbitrary…
-
Unscored —
Format string bug in the open_altfile function in filename.c for GNU less 382, 381, and 358 might allow local users to …
-
Unscored —
The read_list_from_file function in vacation.pl for OpenWebmail before 2.32 20040629 allows remote attackers to execute…
-
Unscored —
Opera Browser 7.23, and other versions before 7.50, updates the address bar as soon as the user clicks a link, which al…
-
Unscored —CVE-2004-2277 Public exploit
Buffer overflow in aGSM Half-Life client allows remote Half-Life servers to cause a denial of service (crash) and possi…
-
Unscored —
Buffer overflow in the sockFinger_DataArrival function in efFingerD 0.2.12 allows remote attackers to cause a denial of…
-
Unscored —
Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET re…
-
Unscored —
efFingerD 0.2.12 allows remote attackers to cause a denial of service (daemon crash) via a packet with a single byte, w…
-
Unscored —
Cross-site scripting (XSS) vulnerability in e107 allows remote attackers to inject arbitrary script or HTML via the "lo…
-
Unscored —
Multiple unknown vulnerabilities in IBM Lotus Notes 6.5.x before 6.5.4 and 6.0.x before 6.0.5 have unknown impact and a…
-
Unscored —
UUDeview 0.5.20 and earlier handles temporary files insecurely during decoding, with unknown attack vectors and impact.
-
Unscored —
Unknown cross-site scripting (XSS) vulnerability in the web GUI in vHost before 3.10r1 has unknown impact and attack ve…
-
Unscored —
A certain contributed script for ekg Gadu Gadu client 1.5 and earlier allows attackers to execute shell commands via un…
-
Unscored —
Certain contributed scripts for ekg Gadu Gadu client 1.5 and earlier create temporary files insecurely, with unknown im…
-
Unscored —
Sophos Anti-Virus 5.0.1, with "Scan inside archive files" enabled, allows remote attackers to cause a denial of service…
-
Unscored —
The Apple AirPort card uses a default WEP key when not connected to a known or trusted network, which can cause it to a…
-
Unscored —
PHP remote file include vulnerability in Yawp library 1.0.6 and earlier, as used in YaWiki and possibly other products,…
-
Unscored —
management.php in Realnode Emilda 1.2.2 and earlier allows remote attackers to perform actions as other users by modify…
-
Unscored —
Microsoft MSN Messenger 9.0 and Internet Explorer 6.0 allows remote attackers to cause a denial of service (crash) via …
-
Unscored —
netman.dll in Microsoft Windows Connections Manager Library allows local users to cause a denial of service (Network Co…
-
Unscored —
WebCalendar before 1.0.0 does not properly restrict access to assistant_edit.php, which allows remote attackers to gain…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Class-1 Forum 0.24.4 and 0.23.2, and Clever Copy with forums installed, all…
-
Unscored —
Clever Copy 2.0 and 2.0a allows remote attackers to obtain the full path of the web root via a direct request to (1) ti…
-
Unscored —
PowerDNS before 2.9.18, when running with an LDAP backend, does not properly escape LDAP queries, which allows remote a…
-
Unscored —
PowerDNS before 2.9.18, when allowing recursion to a restricted range of IP addresses, does not properly handle questio…