Archive
26 July 2005
Vulnerabilities first published on this day (UTC), newest first.
22 results · Feed
-
Unscored —
Multiple integer overflows in libgadu, as used in Kopete in KDE 3.2.3 to 3.4.1, ekg before 1.6rc3, GNU Gadu, CenterICQ,…
-
Unscored —
Directory traversal vulnerability in Internet Graphics Server in SAP before 6.40 Patch 11 allows remote attackers to re…
-
Unscored —
The (1) Kate and (2) Kwrite applications in KDE KDE 3.2.x through 3.4.0 do not properly set the same permissions on the…
-
Unscored —
inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service (application crash) via an invalid file t…
-
Unscored —CVE-2005-2371 EPSS 22%
Directory traversal vulnerability in Oracle Reports 6.0, 6i, 9i, and 10g allows remote attackers to overwrite arbitrary…
-
Unscored —
vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands v…
-
Unscored —
Belkin 54g wireless routers do not properly set an administrative password, which allows remote attackers to gain acces…
-
Unscored —
PHP Surveyor 0.98 allows remote attackers to obtain sensitive information via a direct request to (1) question.php, (2)…
-
Unscored —
Multiple "memory alignment errors" in libgadu, as used in ekg before 1.6rc2, Gaim before 1.5.0, and other packages, all…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Oracle Reports 9.0.2 allow remote attackers to inject arbitrary …
-
Unscored —
Oracle Forms 4.5 through 10g starts form executables from arbitrary directories and executes them as the Oracle or Syst…
-
Unscored —
Directory traversal vulnerability in Oracle Reports allows remote attackers to read arbitrary files via an absolute or …
-
Unscored —
Buffer overflow in SlimFTPd 3.15 and 3.16 allows remote authenticated users to execute arbitrary code via a long direct…
-
Unscored —CVE-2005-2383 Public exploit
SQL injection vulnerability in auth.php in PHPNews 1.2.5 allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —
The device file system (devfs) in FreeBSD 5.x does not properly check parameters of the node type when creating a devic…
-
Unscored —
nss_ldap 181 to versions before 213, as used in Mandrake Corporate Server and Mandrake 10.0, and other operating system…
-
Unscored —
Oray PeanutHull 3.0.1.0 and earlier does not properly drop SYSTEM privileges when launched from the system tray, which …
-
Unscored —CVE-2005-2276 Public exploit
Cross-site scripting (XSS) vulnerability in Novell Groupwise WebAccess 6.5 before July 11, 2005 allows remote attackers…
-
Unscored —
Multiple cross-site scripting vulnerabilities in PHP Surveyor 0.98 allow remote attackers to inject arbitrary web scrip…
-
Unscored —
Format string vulnerability in Race Driver 1.20 and earlier allows remote attackers to cause a denial of service (appli…
-
Unscored —
Multiple integer signedness errors in libgadu, as used in ekg before 1.6rc2 and other packages, may allow remote attack…
-
Unscored —
Buffer overflow in Race Driver 1.20 and earlier allows remote attackers to cause a denial of service (application crash…