Skip to content
OpenAdvisories

Archive

July 2005

Vulnerabilities first published in this month (UTC), newest first.

← June 2005 2005 / July August 2005 →
  1. 124
  2. 2 
  3. 3 
  4. 4 
  5. 516
  6. 624
  7. 71
  8. 82
  9. 92
  10. 1075
  11. 1122
  12. 1235
  13. 1328
  14. 14176
  15. 151
  16. 161
  17. 1768
  18. 18 
  19. 1958
  20. 208
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 2622
  27. 2722
  28. 283
  29. 29 
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

588 results · Feed

  • Unscored —
    CVE-2002-2071 Public exploit

    Compaq Tru64 4.0 d allows remote attackers to cause a denial of service in (1) telnet, (2) FTP, (3) ypbind, (4) rpc.loc…

  • Unscored —
    CVE-2002-2072 Public exploit

    java.security.AccessController in Sun Java Virtual Machine (JVM) in JRE 1.2.2 and 1.3.1 allows remote attackers to caus…

  • Unscored —
    CVE-2002-2002

    Buffer overflow in libc in Compaq Tru64 4.0F, 5.0, 5.1 and 5.1A allows attackers to execute arbitrary code via long (1)…

  • Unscored —
    CVE-2002-2056

    Cross-site scripting (XSS) vulnerability in TeeKai Forum 1.2 allows remote attackers to inject arbitrary web script or …

  • Unscored —
    CVE-2002-2023

    The get_parameter_from_freqency_source function in beep2 1.0, 1.1 and 1.2, when installed setuid root, allows local use…

  • Unscored —
    CVE-2002-2050

    Directory traversal vulnerability in processor_web plugin for ModLogAn 0.5.0 through 0.7.11, when used with the splitby…

  • Unscored —
    CVE-2002-2060

    Buffer overflow in Links 2.0 pre4 allows remote attackers to crash client browsers and possibly execute arbitrary code …

  • Unscored —
    CVE-2002-2027

    Database of Our Owlish Wisdom (DOOW) 0.1 through 0.2.1 does not properly verify user permissions, which allows remote a…

  • Unscored —
    CVE-2002-2038

    Next Generation POSIX Threading (NGPT) 1.9.0 uses a filesystem-based shared memory entry, which allows local users to c…

  • Unscored —
    CVE-2002-2028

    The screensaver on Windows NT 4.0, 2000, XP, and 2002 does not verify if a domain account has already been locked when …

  • Unscored —
    CVE-2002-2004

    portmapper in Compaq Tru64 4.0G and 5.0A allows remote attackers to cause a denial of service via a flood of packets.

  • Unscored —
    CVE-2002-2031 Public exploit EPSS 21%

    Internet Explorer 5.0, 5.0.1 and 5.5 with JavaScript execution enabled allows remote attackers to determine the existen…

  • Unscored —
    CVE-2002-2080

    Floositek FTGate PRO 1.05 allows remote attackers to cause a denial of service (memory and CPU consumption) via a large…

  • Unscored —
    CVE-2002-2033

    faqmanager.cgi in FAQManager 2.2.5 and earlier allows remote attackers to read arbitrary files by specifying the filena…

  • Unscored —
    CVE-2002-2084 Public exploit

    Directory traversal vulnerability in index.php of Portix 0.4.02 allows remote attackers to read arbitrary files via a .…

  • Unscored —
    CVE-2002-2055 Public exploit

    Cross-site scripting (XSS) vulnerability in userlog.php in TeeKai Tracking Online 1.0 allows remote attackers to inject…

  • Unscored —
    CVE-2002-2081 EPSS 15%

    cphost.dll in Microsoft Site Server 3.0 allows remote attackers to cause a denial of service (disk consumption) via an …

  • Medium —
    CVE-2002-2008

    Apache Tomcat Leaks Information via Error Message

    Apache Tomcat 4.0.3 for Windows allows remote attackers to obtain the web root path via an HTTP request for a resource that does not exist, such as lpt9, which leaks the information in an error message.

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2002-2057

    TeeKai Forum 1.2 uses weak encryption of web usage statistics in data/member_log.txt, which is stored under the web doc…

  • Unscored —
    CVE-2002-2058

    TeeKai Tracking Online 1.0 uses weak encryption of web usage statistics in data/userlog/log.txt, which allows remote at…

  • Unscored —
    CVE-2002-2013

    Mozilla 0.9.6 and earlier and Netscape 6.2 and earlier allows remote attackers to steal cookies from another domain via…

  • Unscored —
    CVE-2002-2007 Public exploit EPSS 41%

    The default installations of Apache Tomcat 3.2.3 and 3.2.4 allows remote attackers to obtain sensitive system informati…

  • Unscored —
    CVE-2002-2030

    Stack-based buffer overflow in SQLData Enterprise Server 3.0 allows remote attacker to execute arbitrary code and cause…

  • Unscored —
    CVE-2002-2085

    Directory traversal vulnerability in page.cgi of WWWeBBB Forum 3.82 beta and earlier allows remote attackers to read ar…

  • Unscored —
    CVE-2002-2061

    Heap-based buffer overflow in Netscape 6.2.3 and Mozilla 1.0 and earlier allows remote attackers to crash client browse…

  • Unscored —
    CVE-2002-2059

    BIOS D845BG, D845HV, D845PT and D845WN on Intel motherboards does not properly restrict access to configuration informa…

  • Unscored —
    CVE-2002-2065

    WebCalendar 0.9.34 and earlier with 'browsing in includes directory' enabled allows remote attackers to read arbitrary …

  • Unscored —
    CVE-2002-2054

    TeeKai Forum 1.2 allows remote attackers to authenticate as the administrator and and gain privileged web forum access …

  • Unscored —
    CVE-2002-2073 Public exploit EPSS 13%

    Cross-site scripting (XSS) vulnerability in the default ASP pages on Microsoft Site Server 3.0 on Windows NT 4.0 allows…

  • Unscored —
    CVE-2002-2046

    x_news.php in X-News (x_news) 1.1 and earlier allows remote attackers to gain administrative privileges by stealing and…

  • Unscored —
    CVE-2002-2063

    AtGuard 3.2 allows remote attackers to bypass firwall filters and execute prohibited programs by changing the filenames…

  • Unscored —
    CVE-2002-2036

    Sun Ray Server Software (SRSS) 1.3, when Non-Smartcard Mobility (NSCM) is enabled, allows remote attackers to login as …

  • Unscored —
    CVE-2002-2047

    The file preview functionality in Sketch 0.6.12 and earlier allows remote attackers to execute arbitrary commands via s…

    sketch Debian
  • Unscored —
    CVE-2002-2076

    Directory traversal vulnerability in Lil' HTTP server 2.1 and 2.2 allows remote attackers to read arbitrary files via a…

  • Unscored —
    CVE-2002-2067

    East-Tec Eraser 2002 does not clear Windows alternate data streams that are attached to files on NTFS file systems, whi…

  • Unscored —
    CVE-2002-2064

    isadmin.php in PhpWebGallery 1.0 allows remote attackers to gain administrative access via by setting the photo_login c…

  • Unscored —
    CVE-2002-2086

    Multiple cross-site scripting (XSS) vulnerabilities in magicHTML of SquirrelMail before 1.2.6 allow remote attackers to…

  • Unscored —
    CVE-2002-2062 Public exploit EPSS 13%

    Cross-site scripting (XSS) vulnerability in ftp.htt in Internet Explorer 5.5 and 6.0, when running on Windows 2000 with…

  • Unscored —
    CVE-2002-2020

    Netgear RP114 Cable/DSL Web Safe Router Firmware 3.26 uses a default administrator password and accepts admin logins on…

  • Unscored —
    CVE-2002-2026 Public exploit

    Buffer overflow in BrowseFTP 1.62 client allows remote FTP servers to execute arbitrary code via a long FTP "220" messa…