Archive
July 2005
Vulnerabilities first published in this month (UTC), newest first.
588 results · Feed
-
Unscored —CVE-2001-1525 Public exploit
Directory traversal vulnerability in the comments action in easyNews 1.5 and earlier allows remote attackers to modify …
-
Unscored —
Cross-site scripting (XSS) vulnerability in im.php in IMessenger for PHP-Nuke allows remote attackers to inject arbitra…
-
Unscored —
ColdFusion 4.5 and 5, when running on Windows with the advanced security sandbox type set to "operating system," does n…
-
Unscored —CVE-2001-1547 EPSS 14%
Outlook Express 6.0, with "Do not allow attachments to be saved or opened that could potentially be a virus" enabled, d…
-
Unscored —
The default "basic" security setting' in config.php for TWIG webmail 2.7.4 and earlier stores cleartext usernames and p…
-
Unscored —
JRun 3.0 and 3.1 running on JRun Web Server (JWS) and IIS allows remote attackers to read arbitrary JavaServer Pages (J…
-
Unscored —
Buffer overflow in setiathome for SETI@home 3.03, if installed setuid, could allow local users to execute arbitrary cod…
-
Unscored —
ZoneAlarm 2.1 through 2.6 and ZoneAlarm Pro 2.4 and 2.6 allows local users to bypass filtering via non-standard TCP pac…
-
Unscored —
mod_usertrack in Apache 1.3.11 through 1.3.20 generates session ID's using predictable information including host IP ad…
-
Unscored —CVE-2001-1549 Public exploit
Tiny Personal Firewall 1.0 and 2.0 allows local users to bypass filtering via non-standard TCP packets created with non…
-
Unscored —
Macintosh clients, when using NT file system volumes on Windows 2000 SP1, create subdirectories and automatically modif…
-
Unscored —
NAI WebShield SMTP 4.5 and possibly 4.5 MR1a does not filter improperly MIME encoded email attachments, which could all…
-
Unscored —
Format string vulnerability in nvi before 1.79 allows local users to gain privileges via format string specifiers in a …
-
Unscored —
The log files in Apache web server contain information directly supplied by clients and does not filter or quote contro…
-
Unscored —
geteuid in Itanium Architecture (IA) running on HP-UX 11.20 does not properly identify a user's effective user id, whic…
-
Unscored —CVE-2001-1519 Public exploit
RunAs (runas.exe) in Windows 2000 allows local users to create a spoofed named pipe when the service is stopped, then c…
-
Unscored —
Allaire JRun 2.3.3, 3.0 and 3.1 running on IIS 4.0 and 5.0, iPlanet, Apache, JRun web server (JWS), and possibly other …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the DMOZGateway module for PHP-Nuke allows remote attackers to inject arbit…
-
Unscored —
CentraOne 5.2 and Centra ASP with basic authentication enabled creates world-writable base64 encoded log files, which a…
-
Unscored —
The MAC module in Netfilter in Linux kernel 2.4.1 through 2.4.11, when configured to filter based on MAC addresses, all…
-
Unscored —
CMG WAP gateway does not verify the fully qualified domain name URL with X.509 certificates from root certificate autho…
-
Unscored —
Linux kernel 2.2.19 enables CAP_SYS_RESOURCE for setuid processes, which allows local users to exceed disk quota restri…
-
Medium 5.3CVE-2001-1533 EPSS 18%
Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service via…
-
Unscored —
Buffer overflow in rpc.yppasswdd (yppasswd server) in AIX allows attackers to gain unauthorized access via a long strin…
-
Unscored —
Axis network camera 2120, 2110, 2100, 200+ and 200 contains a default administration password "pass", which allows remo…
-
Unscored —
Cross-site scripting (XSS) vulnerability in user.php in PostNuke 0.64 allows remote attackers to inject arbitrary web s…
-
Unscored —
pt_chmod in Solaris 8 does not call fdetach to reset terminal privileges when users log out of terminals, which allows …
-
Unscored —
Autogalaxy stores usernames and passwords in cleartext in cookies, which makes it easier for remote attackers to obtain…
-
Unscored —
run.cgi in Webmin 0.80 and 0.88 creates temporary files with world-writable permissions, which allows local users to ex…
-
Unscored —
OpenSSH before 3.0.1 with Kerberos V enabled does not properly authenticate users, which could allow remote attackers t…
-
Unscored —CVE-2001-1560 Public exploit
Win32k.sys (aka Graphics Device Interface (GDI)) in Windows 2000 and XP allows local users to cause a denial of service…
-
Unscored —CVE-2001-1524 Public exploit
Cross-site scripting (XSS) vulnerability in PHP-Nuke 5.3.1 and earlier allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2001-1539 EPSS 14%
Stack consumption vulnerability in Internet Explorer The JavaScript settimeout function in Internet Explorer allows rem…
-
Unscored —
Macromedia JRun 3.0 and 3.1 appends the jsessionid to URL requests (a.k.a. rewriting) when client browsers have cookies…
-
Unscored —
Buffer overflow in ftpd in IBM AIX 4.3 and 5.1 allows attackers to gain privileges.
-
Unscored —
easyNews 1.5 and earlier stores administration passwords in cleartext in settings.php, which allows local users to obta…
-
Unscored —
Macromedia JRun 3.0 and 3.1 allows remote attackers to obtain duplicate active user session IDs and perform actions as …
-
Unscored —
Windows XP with fast user switching and account lockout enabled allows local users to deny user account access by setti…
-
Unscored —
Buffer overflow in Claris Emailer 2.0v2 allows remote attackers to cause a denial of service and possibly execute arbit…
-
Unscored —
Lotus Domino server 5.0.9a and earlier allows remote attackers to bypass security restrictions and view Notes database …