Archive
August 2005
Vulnerabilities first published in this month (UTC), newest first.
577 results · Feed
-
Unscored —
Cross-site scripting (XSS) vulnerability in phpGroupWare 0.9.16.000 allows administrators to inject arbitrary web scrip…
-
Unscored —
Unknown vulnerability in (1) loadmodule, and (2) modload if modload is installed with setuid/setgid privileges, in SunO…
-
Unscored —
The (1) rcS and (2) mountall programs in Sun Solaris 2.x, possibly before 2.4, start a privileged shell on the system c…
-
Unscored —
loadmodule in SunOS 4.1.x, as used by xnews, does not properly sanitize its environment, which allows local users to ga…
-
Unscored —
lockmail in maildrop before 1.5.3 does not drop privileges before executing commands, which allows local users to gain …
-
Unscored —
phpldapadmin before 0.9.6c allows remote attackers to gain anonymous access to the LDAP server, even when disable_anon_…
-
Unscored —
Backup Manager (backup-manager) before 0.5.8 creates backup files with world-readable default permissions, which allows…
-
Unscored —
The CD-burning feature in backup-manager 0.5.8 and earlier uses a fixed filename in a world-writable directory for logg…
-
Unscored —
Directory traversal vulnerability in Astaro Security Linux 6.0, when using Webmin, allows remote authenticated webmin u…
-
Unscored —
SQL injection vulnerability in auth.php in PaFileDB 3.1, when authmethod is set to cookies, allows remote attackers to …
-
Unscored —
Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 allows remote attackers to inject arbitrary web script or H…
-
Unscored —CVE-2005-2719 Public exploit
Ventrilo 2.1.2 through 2.3.0 allows remote attackers to cause a denial of service (application crash) via a status pack…
-
Unscored —
Symantec AntiVirus 9 Corporate Edition allows local users to gain privileges via the "Scan for viruses" option, which l…
-
Unscored —
Home Ftp Server 1.0.7 stores sensitive user information and server information in the same directory as the user's home…
-
Unscored —
Cross-site scripting (XSS) vulnerability in phpGraphy 0.9.9a and earlier allows remote attackers to inject arbitrary we…
-
Unscored —
Buffer overflow in ad_pcm.c in MPlayer 1.0pre7 and earlier allows remote attackers to execute arbitrary code via crafte…
-
Unscored —CVE-2005-2721 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in (1) index.php or (2) admin.php in Foojan PHP Weblog allow remote…
-
Unscored —
The event_pin_code_request function in the btsrv daemon (btsrv.c) in Nokia Affix 2.1.2 and 3.2.0 allows remote attacker…
-
Unscored —CVE-2005-2729 Public exploit
The HTTP proxy in Astaro Security Linux 6.0 does not properly filter HTTP CONNECT requests to localhost, which allows r…
-
Unscored —
AWStats 6.4, and possibly earlier versions, allows remote attackers to obtain sensitive information via a file that doe…
-
Unscored —
Cross-site scripting (XSS) vulnerability in YaPig 0.95 and earlier allows remote attackers to inject arbitrary web scri…
-
Unscored —
PHP remote file inclusion vulnerability in WebCalendar before 1.0.1 allows remote attackers to execute arbitrary PHP co…
-
Unscored —
upload_img_cgi.php in Simple PHP Blog (SPHPBlog) does not properly restrict file extensions of uploaded files, which co…
-
Unscored —
Stack-based buffer overflow in the ACE archive decompression library (vrAZace.dll) in HAURI Anti-Virus products includi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in PhotoPost PHP Pro 5.1 allows remote attackers to inject arbitrary web scrip…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Gallery 1.5.1-RC2 and earlier allows remote attackers to inject arbitrary w…
-
Unscored —CVE-2005-2728 EPSS 11%
The byte-range filter in Apache 2.0 before 2.0.54 allows remote attackers to cause a denial of service (memory consumpt…
-
Unscored —
Directory traversal vulnerability in Home Ftp Server 1.0.7 allows remote authenticated users to read arbitrary files vi…
-
Unscored —
The HTTP proxy in Astaro Security Linux 6.0 allows remote attackers to obtain sensitive information via an invalid requ…
-
Unscored —
Foojan PHP Weblog allows remote attackers to obtain sensitive information via (1) a direct request to /daylinks/index.p…
-
Unscored —CVE-2005-2725 Public exploit
The inputtrap utility in QNX RTOS 6.1.0, 6.3, and possibly earlier versions does not properly check permissions when th…
-
Unscored —
cvsbug in CVS 1.12.12 and earlier creates temporary files insecurely, which allows local users to overwrite arbitrary f…
-
Unscored —CVE-2005-2697 Public exploit
SQL injection vulnerability in search.php for MyBulletinBoard (MyBB) 1.00 Release Candidate 1 through 4 allows remote a…
-
Unscored —
Unspecified vulnerability in the SSL certificate checking functionality in Cisco CiscoWorks Management Center for IDS S…
-
Unscored —
Unrestricted file upload vulnerability in admin/admin.php in PHPKit 1.6.1 allows remote authenticated administrators to…
-
Unscored —CVE-2005-2694 Public exploit
Buffer overflow in WinAce 2.6.0.5, and possibly earlier versions, allows remote attackers to execute arbitrary code via…
-
Unscored —
Cross-site scripting (XSS) vulnerability in browse.php in Nephp Publisher Enterprise 3.04 allows remote attackers to in…
-
Unscored —
IBM Lotus Notes does not properly restrict access to password hashes in the Notes Address Book (NAB), which allows remo…
-
Unscored —CVE-2005-1843 Public exploit
VCNative for Adobe Version Cue 1.0 and 1.0.1, as used in Creative Suite 1.0 and 1.3, and when running on Mac OS X with …
-
Unscored —CVE-2005-1842 Public exploit
VCNative for Adobe Version Cue 1.0 and 1.0.1, as used in Creative Suite 1.0 and 1.3, and when running on Mac OS X with …