Archive
July 2005
Vulnerabilities first published in this month (UTC), newest first.
588 results · Feed
-
Unscored —
SQL injection vulnerability in sql.php in the Glossary module in Moodle 1.4.1 and earlier allows remote attackers to mo…
-
Unscored —
Unknown vulnerability in Sun Java System Web Server 6.0 SP7 and earlier and 6.1 SP1 and earlier, and Application Server…
-
Unscored —
Directory traversal vulnerability in phpMyFAQ 1.3.12 allows remote attackers to read arbitrary files, and possibly exec…
-
Unscored —
Directory traversal vulnerability in phpMyFAQ 1.4.0 alpha allows remote attackers to read arbitrary files, and possibly…
-
Unscored —
FsPHPGallery before 1.2 allows remote attackers to cause a denial of service via an image with a large size attribute, …
-
Unscored —
F-Secure Anti-Virus for Microsoft Exchange 6.30 and 6.31 does not properly detect certain password-protected files in a…
-
Unscored —
Unknown vulnerability in the "admin of paypal email addresses" in AudienceConnect before 1.0.beta.21 has unknown impact…
-
Unscored —
The XML parser in Oracle 9i Application Server Release 2 9.0.3.0 and 9.0.3.1, 9.0.2.3 and earlier, and Release 1 1.0.2.…
-
Unscored —
RXVT-Unicode 3.4 and 3.5 does not properly close file descriptors, which allows local users to access the terminals of …
-
Unscored —
Multiple unknown vulnerabilities in Oracle 9i Lite Mobile Server 5.0.0.0.0 through 5.0.2.9.0 allow remote authenticated…
-
Unscored —CVE-2004-2254 Public exploit
SurgeLDAP 1.0g (Build 12), and possibly other versions before 1.0h, allows remote attackers to bypass authentication fo…
-
Unscored —
Zero G Software InstallAnywhere 5.0.6, 5.0.7, and earlier allows local users to overwrite arbitrary files via a symlink…
-
Unscored —
Unknown vulnerability in Moodle before 1.2 allows teachers to log in as administrators.
-
Unscored —CVE-2004-2245 Public exploit
Cross-site scripting (XSS) vulnerability in Goollery 0.03 allows remote attackers to inject arbitrary HTML or web scrip…
-
Unscored —
Multiple SQL injection vulnerabilities in Phorum 5.0.11 and earlier allow remote attackers to modify SQL statements via…
-
Unscored —CVE-2004-2242 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in Phorum, possibly 5.0.7 beta and earlier, allows remote attack…
-
Unscored —
Format string vulnerability in vsybase.c in vpopmail 5.4.2 and earlier has unknown impact and attack vectors. NOTE: in …
-
Unscored —
Unknown vulnerability in Moodle before 1.3.4 has unknown impact and attack vectors, related to "strings in Moodle texts…
-
Unscored —CVE-2004-2218 Public exploit
SQL injection vulnerability in pmwh.php in PHPMyWebHosting 0.3.4 and earlier allows remote attackers to modify SQL stat…
-
Unscored —
Unknown "front page vulnerability with Moodle servers" for Moodle before 1.3.2 has unknown impact and attack vectors.
-
Unscored —
Mozilla Mail 1.7.1 and 1.7.3, and Thunderbird before 0.9, when HTML-Mails is enabled, allows remote attackers to determ…
-
Unscored —
Appfoundry Message Foundry 2.75 .0003 allows remote attackers to cause a denial of service (crash) via an HTTP GET requ…
-
Unscored —
Multiple unknown vulnerabilities in yhttpd in yChat before 0.7 allow remote attackers to cause a denial of service (seg…
-
Unscored —
Mbedthis AppWeb HTTP server before 1.1.3 allows remote attackers to bypass access restrictions via a URI with mixed cas…
-
Unscored —CVE-2004-2246 Public exploit
Cross-site scripting (XSS) vulnerability in Goollery before 0.04b allows remote attackers to inject arbitrary HTML or w…
-
Unscored —
Heap-based buffer overflow in isakmpd on OpenBSD 3.4 through 3.6 allows local users to cause a denial of service (panic…
-
Unscored —
Mozilla Firefox before 1.0 is installed with world-writable permissions on Mac OS X, which allows local users to gain p…
-
Unscored —
Mozilla Firefox before 0.10.1 allows remote attackers to delete arbitrary files in the download directory via a crafted…
-
Unscored —
Mozilla Firefox before 1.0 truncates long filenames in the file download dialog box, which makes it easier for remote a…
-
Unscored —
Unknown vulnerability in the "access code" in SecureEditor before 0.1.2 has unknown impact and attack vectors, possibly…
-
Medium 5.3
phpMyFAQ 1.4.0 allows remote attackers to access the Image Manager to upload or delete images without authorization via…
-
Unscored —
Unknown vulnerability in Moodle before 1.3.3 has unknown impact and attack vectors, related to language setting.
-
Unscored —
The firewall in Astaro Security Linux before 4.024 sends responses to SYN-FIN packets, which makes it easier for remote…
-
Unscored —
Buffer overflow in vsybase.c in vpopmail 5.4.2 and earlier might allow attackers to cause a denial of service or execut…
-
Unscored —
Unknown vulnerability in Moodle before 1.2 has unknown impact and attack vectors, related to improper filtering of text.
-
Unscored —
Buffer overflow in SoftCart.exe in Mercantec SoftCart 4.00b allows remote attackers to execute arbitrary code via a lon…
-
Unscored —
Mbedthis AppWeb HTTP server before 1.1.3 allows remote attackers to obtain the source code for scripts via a (1) traili…
-
Unscored —
Unknown vulnerability in the "access code" in RemoteEditor before 0.1.6 has unknown impact and attack vectors, possibly…
-
Unscored —
Heap-based buffer overflow in the Key Distribution Center (KDC) in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remot…
-
Unscored —CVE-2005-1689 EPSS 11%
Double free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attack…