Skip to content
OpenAdvisories

Archive

5 August 2005

Vulnerabilities first published on this day (UTC), newest first.

65 results · Feed

  • Unscored —
    CVE-2002-2087 Public exploit

    Buffer overflow in Borland InterBase 6.0 allows local users to execute arbitrary code via a long INTERBASE environment …

  • Unscored —

    Fwmon before 1.0.10 allows remote attackers to cause a denial of service (crash) by causing the kernel to return a larg…

  • Unscored —

    Buffer overflow in Novell Remote Manager module, httpstk.nlm, in NetWare 5.1 and NetWare 6 allows remote attackers to e…

  • Unscored —

    graph.php in Ganglia PHP RRD Web Client 1.0.2 allows remote attackers to execute arbitrary commands via the command par…

  • Unscored —

    SurfControl SuperScout Email filter for SMTP 3.5.1 allows remote attackers to cause a denial of service (crash) via a l…

  • Unscored —

    Buffer overflow in the GNU DataDisplay Debugger (DDD) 3.3.1 allows local users to execute arbitrary code and possibly g…

  • Unscored —

    The RCA Digital Cable Modems DCM225 and DCM225E allow remote attackers to cause a denial of service (modem device reset…

  • Unscored —
    CVE-2002-2113 Public exploit

    search.cgi in AGH HTMLsearch 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the …

  • Unscored —

    Linux kernel 2.6 and 2.4 on the IA64 architecture allows local users to cause a denial of service (kernel crash) via pt…

  • Unscored —

    traps.c in the Linux kernel 2.6.x and 2.4.x executes stack segment faults on an exception stack, which allows local use…

  • Unscored —

    Unknown vulnerability in apt-cacher in Debian 3.1, related to "missing input sanitising," allows remote attackers to ex…

  • Unscored —

    Off-by-one error in the mod_ssl Certificate Revocation List (CRL) verification callback in Apache, when configured to u…

  • Unscored —
    CVE-2005-1272 Public exploit EPSS 66%

    Stack-based buffer overflow in the Backup Agent for Microsoft SQL Server in BrightStor ARCserve Backup Agent for SQL Se…

  • Unscored —

    SQL injection vulnerability in SilverNews 2.0.3 allows remote attackers to execute arbitrary SQL commands via the user …

  • Unscored —

    ChurchInfo allows remote attackers to execute obtain sensitive information via the PersonID parameter to (1) PersonView…

  • Unscored —

    pstopnm in netpbm does not properly use the "-dSAFER" option when calling Ghostscript to convert a PostScript file into…

  • Unscored —

    run-mozilla.sh in Thunderbird, with debugging enabled, allows local users to create or overwrite arbitrary files via a …

  • Unscored —
    CVE-2005-2479 Public exploit

    Quick 'n Easy FTP Server 3.0 allows remote attackers to cause a denial of service (application crash or CPU consumption…

  • Unscored —
    CVE-2005-2472 Public exploit

    Multiple buffer overflows in BusinessMail 4.60.00 allow remote attackers to cause a denial of service (application cras…

  • Unscored —
    CVE-2005-2476 Public exploit

    Cross-site scripting (XSS) vulnerability in lost_passowrd.php in Naxtor Shopping Cart 1.0 allows remote attackers to in…

  • Unscored —

    shop_display_products.php in Naxtor Shopping Cart 1.0 allows remote attackers to obtain sensitive information via a cat…

  • Unscored —

    Multiple SQL injection vulnerabilities in ChurchInfo allow remote attackers to execute arbitrary SQL commands via the P…

  • Unscored —

    ColdFusion Fusebox 4.1.0 allows remote attackers to obtain sensitive information via an invalid fuseaction parameter, w…

  • Unscored —

    Race condition in Unzip 5.52 allows local users to modify permissions of arbitrary files via a hard link attack on a fi…

  • Unscored —
    CVE-2005-2480 Public exploit

    Cross-site scripting (XSS) vulnerability in ColdFusion Fusebox 4.1.0 allows remote attackers to inject arbitrary web sc…