Archive
16 August 2005
Vulnerabilities first published on this day (UTC), newest first.
132 results · Feed
-
Unscored —
Kerio Personal Firewall (KPF) 2.1.5 allows local users to execute arbitrary code with SYSTEM privileges via the Load bu…
-
Unscored —CVE-2004-2311 Public exploit
Directory traversal vulnerability in webadmin.nsf in Lotus Domino R6 6.5.1 allows local users to create folders or dete…
-
Unscored —
Unknown vulnerability in Novell GroupWise and GroupWise WebAccess 6.0 through 6.5, when running with Apache Web Server …
-
Unscored —
The Telnet listener for Novell iChain Server before 2.2 Field Patch 3b 2.2.116 does not have a password by default, whi…
-
Unscored —
ChatterBox 2.0 allows remote attackers to cause a denial of service (server crash) via a malformed request to the serve…
-
Unscored —
** UNVERIFIABLE ** SQL injection vulnerability in PunkBuster Screenshot Database (PB-DB) Alpha 6 allows remote attacker…
-
Unscored —
Mbedthis AppWeb HTTP server before 1.0.2 allows remote attackers to cause a denial of service (crash) via an empty OPTI…
-
Unscored —
Mbedthis AppWeb HTTP server before 1.0.2 allows remote attackers to cause a denial of service (crash) via a GET request…
-
Unscored —
OpenBSD 3.3 and 3.4 does not properly parse Accept and Deny rules without netmasks on big-endian 64-bit platforms such …
-
Unscored —
Cross-site scripting (XSS) vulnerability in admin_words.php for phpBB 2.0.6c allows remote attackers to inject arbitrar…
-
Medium 5.3
The default configuration of BEA WebLogic Server and Express 8.1 SP2 and earlier, 7.0 SP4 and earlier, 6.1 through SP6,…
-
Unscored —CVE-2004-2310 Public exploit
Cross-site scripting (XSS) vulnerability in webadmin.nsf in Lotus Domino R6 6.5.1 allows remote attackers to inject arb…
-
Unscored —
Cross-site scripting (XSS) vulnerability in GBook for Php-Nuke 1.0 allows remote attackers to inject arbitrary web scri…
-
Unscored —
Alcatel OmniSwitch 7000 and 7800 allows remote attackers to cause a denial of service (reboot) via certain network scan…
-
Unscored —CVE-2004-2367 Public exploit
The Control Panel applet in WFTPD and WFTPD Pro 3.21 R1 and R2 allows remote authenticated users to cause a denial of s…
-
Unscored —CVE-2004-2303 Public exploit
MTools Mformat before 3.9.9, when installed setuid root, creates files with world-readable and world-writable permissio…
-
Unscored —
Buffer overflow in the HandleCPCCommand function of sercd before 2.3.1 and sredird 2.2.1 and earlier allows remote atta…
-
Unscored —
Vizer Web Server 1.9.1 allows remote attackers to cause a denial of service (crash) via multiple malformed requests inc…
-
Unscored —
PHP file include injection vulnerability in isearch.inc.php for iSearch allows remote attackers to execute arbitrary co…
-
Unscored —CVE-2004-2368 Public exploit
PHP remote file inclusion vulnerability in header.php in Opt-X 0.7.2 allows remote attackers to execute arbitrary PHP c…
-
Unscored —
Computer Associates eTrust Antivirus EE 6.0 through 7.0 allows remote attackers to bypass virus scanning by including a…
-
Unscored —CVE-2004-2350 Public exploit
SQL injection vulnerability in search.php for phpBB 1.0 through 2.0.6 allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2004-2344 Public exploit
Unknown vulnerability in the ASN.1/H.323/H.225 stack of VocalTec VGW120 and VGW480 allows remote attackers to cause a d…
-
Unscored —
The Macromedia installers and e-licensing client on Mac OS X, as used for Macromedia Contribute 2, Director, Dreamweave…
-
Unscored —
Multiple SQL injection vulnerabilities in Tunez before 1.20-pre2 allow remote attackers to execute arbitrary SQL querie…
-
Unscored —
Integer overflow in Trillian 0.74 and earlier, and Trillian Pro 2.01 and earlier, allows remote attackers to cause a de…
-
Unscored —CVE-2004-2347 Public exploit
blog.cgi in Leif M. Wright Web Blog 1.1 and 1.1.5 allows remote attackers to execute arbitrary commands via shell metac…
-
Unscored —
The embedded MySQL 4.0 server for Proofpoint Protection Server does not require a password for the root user of MySQL, …
-
Unscored —CVE-2004-2309 Public exploit
Directory traversal vulnerability in Crob FTP Server 3.5.1 allows local users to browse outside the FTP root via multip…
-
Unscored —CVE-2004-2375 Public exploit
Buffer overflow in the POP3 server in 1st Class Mail Server 4.0 allows remote attackers to cause a denial of service (c…
-
Unscored —CVE-2004-2366 Public exploit
Buffer overflow in GlobalSCAPE Secure FTP Server 2.0 B03.11.2004.2 allows remote attackers to cause a denial of service…
-
Unscored —
Sun Solaris 7 through 9, when Basic Security Module (BSM) is enabled and the SUNWscpu package has been removed as a res…
-
Unscored —
Sybari AntiGen for Domino 7.0 Build 722 SR2 allows remote attackers to cause a denial of service (hang) via an encrypte…
-
High 8.4
Microsoft Windows 2000, XP, and possibly 2003 allows local users with the SeDebugPrivilege privilege to execute arbitra…
-
Unscored —CVE-2004-2374 Public exploit
BadBlue 2.4 allows remote attackers to obtain the location of the server installation path via a request for phptest.ph…
-
Unscored —
Inter7 SqWebMail 3.4.1 through 3.6.1 generates different error messages for incorrect passwords versus correct password…
-
Unscored —
@Mail 3.64 for Windows allows remote attackers to cause a denial of service ("unusable" server) via a large number of P…
-
Unscored —CVE-2004-2359 Public exploit
Dell TrueMobile 1300 WLAN Mini-PCI Card Util TrayApplet 3.10.39.0 does not properly drop SYSTEM privileges when started…
-
Unscored —
Format string vulnerability in the LogMsg function in sercd before 2.3.1 and sredird 2.2.1 and earlier allows remote at…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in @Mail 3.64 for Windows allow remote attackers to inject arbitrar…