Archive
July 2005
Vulnerabilities first published in this month (UTC), newest first.
588 results · Feed
-
Unscored —CVE-2002-2039 Public exploit
/bin/su in QNX realtime operating system (RTOS) 4.25 and 6.1.0 allows local users to obtain sensitive information from …
-
Unscored —
PGP 6.x and 7.x does not clear Windows alternate data streams that are attached to files on NTFS file systems, which al…
-
Unscored —CVE-2002-2042 Public exploit
ptrace in the QNX realtime operating system (RTOS) 4.25 and 6.1.0 allows programs to attach to privileged processes, wh…
-
Unscored —
Unknown vulnerability in Apache 1.3.19 running on HP Secure OS for Linux 1.0 allows remote attackers to cause "unexpect…
-
Unscored —
The Novell Netware client running on Windows 95 allows local users to bypass the login and open arbitrary files via the…
-
Unscored —
sastcpd in SAS/Base 8.0 allows local users to execute arbitrary code by setting the authprog environment variable to re…
-
Unscored —
SQL injection vulnerability in Mailidx before 20020105 allows remote attackers to execute arbitrary SQL commands via th…
-
Unscored —
The Cisco Media Gateway Controller (MGC) in (1) SC2200 7.4 and earlier, (2) VSC3000 9.1 and earlier, (3) PGW 2200 9.1 a…
-
Medium —
Apache Tomcat Leaks Pathname Information via Error Message
Apache Tomcat 4.0.1 allows remote attackers to obtain the web root path via HTTP requests for JSP files preceded by (1) +/, (2) >/, (3) </, and (4) %20/, which leaks the pathname in an error message.
-
Unscored —
Eraser 5.3 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows …
-
Unscored —
The processor_web plugin for ModLogAn 0.5.0 through 0.7.11, when used with the splitby option, allows local users to ov…
-
Unscored —
Unknown vulnerability in Java web start 1.0.1_01, 1.0.1, 1.0 and 1.0.1.01 (HP-UX 11.x only) allows attackers to gain ac…
-
Unscored —
The Email Sanitizer before 1.133 for Procmail allows remote attackers to bypass the mail filter and execute arbitrary c…
-
Unscored —CVE-2002-2040 Public exploit
The (1) phrafx and (2) phgrafx-startup programs in QNX realtime operating system (RTOS) 4.25 and 6.1.0 do not properly …
-
Unscored —
FTGate and FTGate Pro 1.05 lock user mailboxes before authentication succeeds, which allows remote attackers to lock th…
-
Unscored —
ypbind in Compaq Tru64 4.0F, 4.0G, 5.0A, 5.1 and 5.1A allows remote attackers to cause the process to core dump via cer…
-
Unscored —CVE-2002-2077 EPSS 16%
The DCOM client in Windows 2000 before SP3 does not properly clear memory before sending an "alter context" request, wh…
-
Medium 5.3
Horde IMP 2.2.7 allows remote attackers to obtain the full web root pathname via an HTTP request for (1) poppassd.php3,…
-
Unscored —CVE-2002-2041 Public exploit
Multiple buffer overflows in realtime operating system (RTOS) 6.1.0 allows local users to execute arbitrary code via (1…
-
Unscored —
Cross-site scripting (XSS) vulnerability in x_stat_admin.php in x-stat 2.3 and earlier allows remote attackers to injec…
-
Unscored —
sastcpd in SAS/Base 8.0 might allow local users to gain privileges by setting the netencralg environment variable, whic…
-
Unscored —
The design of the Hot Standby Routing Protocol (HSRP), as implemented on Cisco IOS 12.1, when using IRPAS, allows remot…
-
Unscored —
SecureClean 3 build 2.0 does not clear Windows alternate data streams that are attached to files on NTFS file systems, …
-
Unscored —
SQL injection vulnerability in the LDAP and MySQL authentication patch for Cyrus SASL 1.5.24 and 1.5.27 allows remote a…
-
Unscored —
Buffer overflow in PFinger 0.7.8 client allows remote attackers to execute arbitrary code via a long query value passed…
-
Unscored —
ICQ 2001a and 2002b allows remote attackers to cause a denial of service (memory consumption and hang) via a contact me…
-
Unscored —
ACMS 4.3 and 4.4 in OpenVMS Alpha 7.2 and 7.3 does not properly use process privileges, which allows attackers to acces…
-
Unscored —CVE-2002-2021 Public exploit
Cross-site scripting (XSS) vulnerability in WoltLab Burning Board (wbboard) 1.1.1 allows remote attackers to inject arb…
-
Unscored —CVE-2002-2032 Public exploit
sql_layer.php in PHP-Nuke 5.4 and earlier does not restrict access to debugging features, which allows remote attackers…
-
Unscored —
SQL injection vulnerability in mod_sql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allows remote atta…
-
Unscored —CVE-2000-1230 Public exploit
Backdoor in auth.php3 in Phorum 3.0.7 allows remote attackers to access restricted web pages via an HTTP request with t…
-
Unscored —
SQL injection vulnerability in read.php3 and other scripts in Phorum 3.0.7 allows remote attackers to execute arbitrary…
-
Unscored —
The POP3 server in FTGate returns an -ERR code after receiving an invalid USER request, which makes it easier for remot…
-
Unscored —
code.php3 in Phorum 3.0.7 allows remote attackers to read arbitrary files in the phorum directory via the query string.
-
Unscored —
Directory traversal vulnerability in Phorum 3.0.7 allows remote Phorum administrators to read arbitrary files via ".." …
-
Unscored —
The default configurations of (1) the port listener and (2) modplsql in Oracle Internet Application Server (IAS) 3.0.7 …
-
Unscored —CVE-2000-1234 Public exploit
violation.php3 in Phorum 3.0.7 allows remote attackers to send e-mails to arbitrary addresses and possibly use Phorum a…
-
Unscored —CVE-2000-1228 Public exploit
Phorum 3.0.7 allows remote attackers to change the administrator password without authentication via an HTTP request fo…
-
Unscored —
upgrade.php3 in Phorum 3.0.7 could allow remote attackers to modify certain Phorum database tables via an unknown metho…
-
Unscored —
Firefox before 1.0.5 allows remote attackers to steal sensitive information by opening a malicious link in the Firefox …