Archive
July 2005
Vulnerabilities first published in this month (UTC), newest first.
588 results · Feed
-
High 7.8CVE-2001-1546 Public exploit
Pathways Homecare 6.5 uses weak encryption for user names and passwords, which allows local users to gain privileges by…
-
Unscored —CVE-2001-1552 EPSS 14%
ssdpsrv.exe in Windows ME allows remote attackers to cause a denial of service by sending multiple newlines in a Simple…
-
Unscored —
RunAs (runas.exe) in Windows 2000 stores cleartext authentication information in memory, which could allow attackers to…
-
Unscored —
Format string vulnerability in libvanessa_logger 0.0.1 in Perdition 0.1.8 allows remote attackers to execute arbitrary …
-
Unscored —CVE-2001-1571 EPSS 13%
The Remote Desktop client in Windows XP sends the most recent user account name in cleartext, which could allow remote …
-
Unscored —
WebX stores authentication information in the HTTP_REFERER variable, which is included in URL links within bulletin boa…
-
Unscored —
Point to Point Protocol daemon (pppd) in MacOS x 10.0 and 10.1 through 10.1.5 provides the username and password on the…
-
Unscored —
Slashcode 2.0 creates new accounts with an 8-character random password, which could allow local users to obtain session…
-
Unscored —
Openwave WAP gateway does not verify the fully qualified domain name URL with X.509 certificates from root certificate …
-
Unscored —
Buffer overflow in rpc.cmsd in SCO UnixWare 7.1.1 and Open UNIX 8.0.0 allows remote attackers to execute arbitrary comm…
-
Unscored —
Buffer overflow in jrun.dll in ColdFusion MX, when used with IIS 4 or 5, allows remote attackers to cause a denial of s…
-
Unscored —
Directory traversal vulnerability in view_source.jsp in Resin 2.1.2 allows remote attackers to read arbitrary files via…
-
Unscored —CVE-2002-1991 Public exploit
PHP file inclusion vulnerability in osCommerce 2.1 execute arbitrary commands via the include_file parameter to include…
-
Unscored —
Resin 2.1.1 allows remote attackers to cause a denial of service (memory consumption and hang) via a URL with long vari…
-
Unscored —
Resin 2.0.5 through 2.1.2 allows remote attackers to reveal physical path information via a URL request for the example…
-
Unscored —
webbbs_post.pl in WebBBS 4 and 5.0 allows remote attackers to execute arbitrary commands via shell metacharacters in th…
-
Unscored —
Cross-site scripting (XSS) vulnerability in PostNuke 0.71 and earlier allows remote attackers to inject arbitrary web s…
-
Unscored —
advserver.exe in Advanced Web Server (AdvServer) Professional 1.030000 allows remote attackers to cause a denial of ser…
-
Unscored —CVE-2002-1995 Public exploit
Cross-site scripting (XSS) vulnerability in phptonuke.php for PHP-Nuke allows remote attackers to inject arbitrary web …
-
Unscored —
HP Praesidium Webproxy 1.0 running on HP-UX 11.04 VVOS could allow remote attackers to cause Webproxy to forward reques…
-
Unscored —
ZoneAlarm Pro 3.0 MailSafe allows remote attackers to bypass filtering and possibly execute arbitrary code via email at…
-
Unscored —
Resin 2.1.1 allows remote attackers to cause a denial of service (thread and connection consumption) via multiple URL r…
-
Unscored —
BestCrypt BCWipe 1.0.7 and 2.0 through 2.35.1 does not clear Windows alternate data streams that are attached to files …
-
Unscored —CVE-2002-2019 Public exploit
PHP remote file inclusion vulnerability in include_once.php in osCommerce (a.k.a. Exchange Project) 2.1 allows remote a…
-
Unscored —
PHP, when installed on Windows with Apache and ScriptAlias for /php/ set to c:/php/, allows remote attackers to read ar…
-
Unscored —
Cisco 2611 router running IOS 12.1(6.5), possibly an interim release, allows remote attackers to cause a denial of serv…
-
Low —
Apache Tomcat Default Installation Reveals Sensitive Information
The default installation of Apache Tomcat 4.0 through 4.1 and 3.0 through 3.3.1 allows remote attackers to obtain the installation path and other sensitive system information via the (1) SnoopServlet or (2) TroubleShooter example servlets.
-
Unscored —
Cross-site scripting (XSS) vulnerability in htsearch.cgi in htdig (ht://Dig) 3.1.5, 3.1.6, and 3.2 allows remote attack…
-
Unscored —
Format string vulnerability in Kaffe OpenVM 1.0.6 and earlier allows local users to execute arbitrary code, when a java…
-
Unscored —
Lotus Domino 5.0.8 web server returns different error messages when a valid or invalid user is provided in HTTP request…
-
Unscored —CVE-2002-2015 Public exploit
PHP file inclusion vulnerability in user.php in PostNuke 0.703 allows remote attackers to include arbitrary files and p…
-
Unscored —
x_stat_admin.php in x-stat 2.3 and earlier allows remote attackers to (1) execute PHP commands such as phpinfo or (2) o…
-
Unscored —
SQL injection vulnerability in RealityScape MyLogin 2000 1.0.0 and earlier allows remote attackers to execute arbitrary…
-
Unscored —
configure for Dsniff 2.3, fragroute 1.2, and fragrouter 1.6, when downloaded from monkey.org on May 17, 2002, has been …
-
Unscored —
mosix-protocol-stack in Multicomputer Operating System for UnIX (MOSIX) 1.5.7 allows remote attackers to cause a denial…
-
Unscored —CVE-2002-2011 Public exploit
Cross-site scripting (XSS) vulnerability in the fom CGI program (fom.cgi) in Faq-O-Matic 2.711 and 2.712 allows remote …
-
Unscored —
Lotus Domino server 5.0.9a and earlier allows remote attackers to cause a denial of service by exhausting the number of…
-
Unscored —
jmcce 1.3.8 in Mandrake 8.1 creates log files in /tmp with predictable names, which allows local users to overwrite arb…
-
Unscored —
Heap-based buffer overflow in Floositek (1) FTGate Pro 1.05 and (2) FTGate Office 1.05 allows remote attackers to cause…
-
Unscored —CVE-2002-2016 Public exploit
User-mode Linux (UML) 2.4.17-8 does not restrict access to kernel address space, which allows local users to execute ar…