Archive
July 2005
Vulnerabilities first published in this month (UTC), newest first.
116 results · Clear filters · Feed
-
Unscored —CVE-2001-1560 Public exploit
Win32k.sys (aka Graphics Device Interface (GDI)) in Windows 2000 and XP allows local users to cause a denial of service…
-
Unscored —CVE-2001-1524 Public exploit
Cross-site scripting (XSS) vulnerability in PHP-Nuke 5.3.1 and earlier allows remote attackers to inject arbitrary web …
-
High 7.8CVE-2001-1546 Public exploit
Pathways Homecare 6.5 uses weak encryption for user names and passwords, which allows local users to gain privileges by…
-
Unscored —CVE-2002-1991 Public exploit
PHP file inclusion vulnerability in osCommerce 2.1 execute arbitrary commands via the include_file parameter to include…
-
Unscored —
webbbs_post.pl in WebBBS 4 and 5.0 allows remote attackers to execute arbitrary commands via shell metacharacters in th…
-
Unscored —CVE-2002-1995 Public exploit
Cross-site scripting (XSS) vulnerability in phptonuke.php for PHP-Nuke allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2002-2019 Public exploit
PHP remote file inclusion vulnerability in include_once.php in osCommerce (a.k.a. Exchange Project) 2.1 allows remote a…
-
Unscored —
PHP, when installed on Windows with Apache and ScriptAlias for /php/ set to c:/php/, allows remote attackers to read ar…
-
Low —
Apache Tomcat Default Installation Reveals Sensitive Information
The default installation of Apache Tomcat 4.0 through 4.1 and 3.0 through 3.3.1 allows remote attackers to obtain the installation path and other sensitive system information via the (1) SnoopServlet or (2) TroubleShooter example servlets.
-
Unscored —CVE-2002-2015 Public exploit
PHP file inclusion vulnerability in user.php in PostNuke 0.703 allows remote attackers to include arbitrary files and p…
-
Unscored —CVE-2002-2011 Public exploit
Cross-site scripting (XSS) vulnerability in the fom CGI program (fom.cgi) in Faq-O-Matic 2.711 and 2.712 allows remote …
-
Unscored —CVE-2002-2016 Public exploit
User-mode Linux (UML) 2.4.17-8 does not restrict access to kernel address space, which allows local users to execute ar…
-
Unscored —CVE-2002-2071 Public exploit
Compaq Tru64 4.0 d allows remote attackers to cause a denial of service in (1) telnet, (2) FTP, (3) ypbind, (4) rpc.loc…
-
Unscored —CVE-2002-2072 Public exploit
java.security.AccessController in Sun Java Virtual Machine (JVM) in JRE 1.2.2 and 1.3.1 allows remote attackers to caus…
-
Unscored —
Internet Explorer 5.0, 5.0.1 and 5.5 with JavaScript execution enabled allows remote attackers to determine the existen…
-
Unscored —CVE-2002-2084 Public exploit
Directory traversal vulnerability in index.php of Portix 0.4.02 allows remote attackers to read arbitrary files via a .…
-
Unscored —CVE-2002-2055 Public exploit
Cross-site scripting (XSS) vulnerability in userlog.php in TeeKai Tracking Online 1.0 allows remote attackers to inject…
-
Unscored —
The default installations of Apache Tomcat 3.2.3 and 3.2.4 allows remote attackers to obtain sensitive system informati…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the default ASP pages on Microsoft Site Server 3.0 on Windows NT 4.0 allows…
-
Unscored —
Cross-site scripting (XSS) vulnerability in ftp.htt in Internet Explorer 5.5 and 6.0, when running on Windows 2000 with…
-
Unscored —CVE-2002-2026 Public exploit
Buffer overflow in BrowseFTP 1.62 client allows remote FTP servers to execute arbitrary code via a long FTP "220" messa…
-
Unscored —CVE-2002-2039 Public exploit
/bin/su in QNX realtime operating system (RTOS) 4.25 and 6.1.0 allows local users to obtain sensitive information from …
-
Unscored —CVE-2002-2042 Public exploit
ptrace in the QNX realtime operating system (RTOS) 4.25 and 6.1.0 allows programs to attach to privileged processes, wh…
-
Unscored —CVE-2002-2040 Public exploit
The (1) phrafx and (2) phgrafx-startup programs in QNX realtime operating system (RTOS) 4.25 and 6.1.0 do not properly …
-
Unscored —CVE-2002-2041 Public exploit
Multiple buffer overflows in realtime operating system (RTOS) 6.1.0 allows local users to execute arbitrary code via (1…
-
Unscored —CVE-2002-2021 Public exploit
Cross-site scripting (XSS) vulnerability in WoltLab Burning Board (wbboard) 1.1.1 allows remote attackers to inject arb…
-
Unscored —CVE-2002-2032 Public exploit
sql_layer.php in PHP-Nuke 5.4 and earlier does not restrict access to debugging features, which allows remote attackers…
-
Unscored —CVE-2000-1230 Public exploit
Backdoor in auth.php3 in Phorum 3.0.7 allows remote attackers to access restricted web pages via an HTTP request with t…
-
Unscored —CVE-2000-1234 Public exploit
violation.php3 in Phorum 3.0.7 allows remote attackers to send e-mails to arbitrary addresses and possibly use Phorum a…
-
Unscored —CVE-2000-1228 Public exploit
Phorum 3.0.7 allows remote attackers to change the administrator password without authentication via an HTTP request fo…
-
Unscored —CVE-2005-2256 Public exploit
Encoded directory traversal vulnerability in phpPgAdmin 3.1 to 3.5.3 allows remote attackers to access arbitrary files …
-
Unscored —
Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 allows remote attackers to cause a denial of ser…
-
Unscored —
Buffer overflow in Bluetooth FTP client (BTFTP) in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbit…
-
Unscored —CVE-2005-2095 Public exploit
options_identities.php in SquirrelMail 1.4.4 and earlier uses the extract function to process the $_POST variable, whic…
-
Unscored —CVE-2005-2262 Public exploit
Firefox 1.0.3 and 1.0.4, and Netscape 8.0.2, allows remote attackers to execute arbitrary code by tricking the user int…
-
Unscored —
Buffer overflow in the Microsoft Color Management Module for Windows allows remote attackers to execute arbitrary code …
-
Unscored —CVE-2005-2246 Public exploit
Multiple PHP remote file inclusion vulnerabilities in iPhotoAlbum 1.1 allow remote attackers to execute arbitrary code …
-
Unscored —CVE-2005-2219 Public exploit
Hosting Controller 6.1 Hotfix 2.1 allows remote authenticated users to perform unauthorized actions, such as modifying …
-
Unscored —CVE-2005-2232 Public exploit
Buffer overflow in invscout in IBM AIX 5.1.0 through 5.3.0 might allow local users to execute arbitrary code via a long…
-
Unscored —CVE-2005-2229 Public exploit
Blog Torrent 0.92 and earlier stores sensitive files under the web document root in the (1) data or (2) torrents direct…