Archive
16 August 2005
Vulnerabilities first published on this day (UTC), newest first.
132 results · Feed
-
Unscored —
Buffer overflow in Bochs before 2.1.1, if installed setuid, allows local users to execute arbitrary code via a long HOM…
-
Unscored —CVE-2004-2360 Public exploit
Targem Battle Mages 1.0 allows remote attackers to cause a denial of service (infinite loop) via a UDP packet with inco…
-
Unscored —
BugPort before 1.099 stores its configuration file (conf/config.conf) under the web document root with a file extension…
-
Unscored —
rexecd for AIX 4.3.3 does not properly use a local copy of the pwd structure when calling getpwnam, which may cause the…
-
Unscored —
Buffer overflow in postfile.exe for Twilight Utilities Web Server 2.0.0.0 allows remote attackers to cause a denial of …
-
Unscored —
The /.inlook/.crypt file for inlook 0.7.3 and earlier is installed with world readable permissions, which allows local …
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in PHPX 3.0 through 3.2.6 allows remote attackers to execute arbitrary …
-
Unscored —CVE-2004-2385 Public exploit
EMU Webmail 5.2.7 allows remote attackers to obtain sensitive path information (home directory) via an HTTP request for…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Forum Web Server 1.6 and earlier allow remote attackers to injec…
-
Unscored —CVE-2004-2312 Public exploit
Buffer overflow in GNU make for IBM AIX 4.3.3, when installed setgid, allows local users to gain privileges via a long …
-
Unscored —
Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to bypass cross-frame scripting restrictions and ca…
-
Unscored —
ColdFusion MX 6.1 and 6.1 J2EE allows local users to bypass sandbox security restrictions and obtain sensitive informat…
-
Unscored —
Clearswift MAILsweeper for SMTP before 4.3_13 allows remote attackers to cause a denial of service (infinite loop) via …
-
Unscored —CVE-2004-2373 Public exploit
The Buddy icon file for AOL Instant Messenger (AIM) 4.3 through 5.5 is created in a predictable location, which may all…
-
Unscored —CVE-2004-2307 EPSS 15%
Microsoft Internet Explorer 6.0.2600 on Windows XP allows remote attackers to cause a denial of service (browser crash)…
-
Unscored —
Cross-site scripting (XSS) vulnerability in GBook for PHP-Nuke 1.0 allows remote attackers to inject arbitrary web scri…
-
Unscored —
BEA WebLogic Server and Express 8.1 SP1 and earlier allows local users in the Operator role to obtain administrator pas…
-
Unscored —CVE-2004-2363 Public exploit
Validate-Before-Canonicalize vulnerability in the checkURI function in functions.inc.php in PHPX 3.0 through 3.2.6 allo…
-
Medium —
Jetty HTTP Server Denial of Service vulnerability
HttpRequest.java in Jetty HTTP Server before 4.2.19 allows remote attackers to cause denial of service (memory usage and application crash) via HTTP requests with a large Content-Length.
-
Unscored —CVE-2004-2334 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in EMU Webmail 5.2.7 allow remote attackers to inject arbitrary web…
-
Unscored —
Directory traversal vulnerability in webadmin.nsf for Lotus Domino R6 6.5.1 allows attackers to create and detect direc…
-
Unscored —
The PerfectNav plugin for Microsoft Internet Explorer allows remote attackers to cause a denial of service (browser cra…
-
Unscored —
SQL injection vulnerability in the (1) announce and (2) notes modules of phpWebSite before 0.9.3-2 allows remote attack…
-
Unscored —CVE-2004-2371 Public exploit
Multiple Red Storm web-based games, including Ghost Recon 1.4 and earlier, Desert Siege, and The Sum of all Fears 1.1.1…
-
Unscored —
DotNetNuke (formerly IBuySpy Workshop) 1.0.6 through 1.0.10d allows remote attackers to obtain sensitive information, i…
-
Unscored —
Apache HTTP Server 2.0.47 and earlier allows local users to bypass .htaccess file restrictions, as specified in httpd.c…
-
Unscored —CVE-2004-2308 Public exploit
Cross-site scripting (XSS) vulnerability in cPanel 9.1.0 and possibly earlier allows remote attackers to inject arbitra…
-
Unscored —
The administrative interface (surgeftpmgr.cgi) for SurgeFTP Server 1.0b through 2.2k1 allows remote attackers to cause …
-
Unscored —
SQL injection vulnerability in 4nGuestbook 0.92 for PHP-Nuke 6.5 through 6.9 allows remote attackers to modify SQL stat…
-
Unscored —
NullSoft Winamp 5.02 allows remote attackers to cause a denial of service (crash) by creating a file with a long filena…
-
Unscored —
Stack-based buffer overflow in Trillian 0.71 through 0.74f and Trillian Pro 1.0 through 2.01 allows remote attackers to…
-
Unscored —
ColdFusion MX 6.1 and 6.1 J2EE allows remote attackers to cause a denial of service via an HTTP request containing a la…
-
Unscored —
Directory traversal vulnerability in postfile.exe for Twilight Utilities Web Server 2.0.0.0 allows remote attackers to …
-
Unscored —
Digital Reality game engine, as used in Haegemonia 1.0 through 1.0.7 and Desert Rats vs. Afrika Korps 1.0, allows remot…
-
Unscored —
SQL injection vulnerability in DotNetNuke (formerly IBuySpy Workshop) 1.0.6 through 1.0.10d allows remote attackers to …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in CPAN WWW::Form before 1.13 allow remote attackers to inject arbi…
-
Unscored —CVE-2004-2355 Public exploit
Cross-site scripting (XSS) vulnerability in Crafty Syntax Live Help (CSLH) before 2.7.4 allows remote attackers to inje…
-
Unscored —
Unknown multiple vulnerabilities in Oracle9i Database Server 9.0.1.4, 9.0.1.5, 9.2.0.3, and 9.2.0.4 allow local users w…
-
Unscored —
Early termination vulnerability in Fizmez Web Server 1.0 allows remote attackers to cause a denial of service (crash) b…
-
Unscored —
Bodington 2.1.0 RC1 and earlier does not secure the file upload area, which allows remote attackers to read uploaded fi…